Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json)
Hash identifier: PmYVOp6QnZrjN/jpo68xBvSXTU43BBa+YMXHnUOuD+c=
Subject key identifier: 17:03:1B:28:9C:98:9F:D5:1C:41:FE:52:D9:40:B2:EC:18:EC:11:11
Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Certificate serial: 019655387A7730CCF8674A10361D5053DD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 22:01:26 +0000
Manifest this update: Sun 20 Apr 2025 22:01:26 +0000
Manifest next update: Mon 21 Apr 2025 22:01:26 +0000
Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: HTJ0pGxYVrfKhyZkoXpGA82YBaNGRsK8Dg9+DuKME08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:7a:77:30:cc:f8:67:4a:10:36:1d:50:53:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb
Validity
Not Before: Apr 20 22:01:26 2025 GMT
Not After : Apr 21 22:01:26 2025 GMT
Subject: CN=17031b289c989fd51c41fe52d940b2ec18ec1111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:ef:00:01:32:63:70:77:03:a2:4d:a0:23:
12:33:5d:c0:df:0d:21:06:8f:28:f7:da:19:15:df:
1e:7b:59:e0:17:54:34:61:73:2f:c7:00:60:7b:60:
a4:12:fd:5e:b0:aa:83:36:b6:d8:cb:14:5a:36:e8:
81:07:fe:de:42:a8:41:6f:f4:54:87:d0:ec:af:65:
a9:39:ba:26:db:c4:b6:8b:8f:c5:55:51:b6:cb:ed:
0b:0f:79:99:00:65:55:bc:de:a7:21:7d:d7:4e:95:
fc:44:20:7a:28:cb:73:58:3f:51:c5:44:91:1d:05:
65:44:0d:8b:5d:d8:26:da:b5:2b:df:35:a5:16:03:
cf:d8:47:45:9b:fd:53:91:9d:51:6c:84:af:bd:67:
61:c9:9f:49:5e:53:d8:b6:ff:e6:4f:86:bf:7a:bd:
c7:24:2a:17:65:f6:0c:7b:71:63:d4:01:eb:42:a6:
2b:33:28:b3:7c:0e:59:26:10:24:26:ae:ab:7e:9f:
34:7f:a7:22:60:2e:7a:6e:60:e9:20:9f:d2:d4:ff:
af:cf:65:c8:c5:2c:6e:3f:fd:83:7d:96:e1:8c:3d:
4d:97:10:ec:1f:a3:e2:8a:9a:46:5b:d4:52:c8:42:
c4:21:9d:8c:80:48:31:a4:21:6f:b9:6a:9e:3c:34:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:1B:28:9C:98:9F:D5:1C:41:FE:52:D9:40:B2:EC:18:EC:11:11
X509v3 Authority Key Identifier:
keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ee:3b:b6:c3:6c:b4:08:e6:68:77:ab:29:52:e7:6b:5a:a1:
9d:76:fb:d4:be:d8:a1:06:b5:00:d2:cd:73:2e:2a:40:d9:45:
38:ef:6e:68:73:ff:11:39:a9:ba:98:c8:c0:4e:97:28:58:40:
52:84:d6:28:1e:ed:56:18:a5:e0:c9:04:e6:47:c7:b3:65:4a:
c8:33:10:f6:91:36:97:62:46:9d:c4:5d:7e:18:36:3f:23:89:
16:8d:4b:11:e7:42:8a:1f:80:66:e2:23:4e:c8:f1:e9:96:d3:
3b:10:db:28:64:78:e8:da:6a:d4:80:d2:dc:68:6c:4a:cb:ee:
ac:80:f8:12:ba:d2:0c:4c:50:31:f3:20:1f:da:69:46:80:d0:
31:03:28:ac:dd:12:41:91:39:54:66:7b:6b:9c:08:ce:47:e6:
00:37:75:e9:ef:6b:b4:f9:e9:13:64:59:f2:17:47:07:e4:fe:
3b:a0:a6:94:c5:ab:ae:cc:86:06:b8:9d:e1:f1:ce:0c:70:24:
59:67:21:e8:cb:2e:10:53:bb:b7:f5:35:3a:e8:68:72:b0:8f:
e5:fe:59:0a:e2:0a:d6:99:54:26:cf:55:6f:82:46:d7:92:43:
4b:c8:ca:df:ec:7f:d8:7d:61:5f:72:9b:bd:d9:69:24:be:15:
34:72:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:29 2025 by rpki-client