Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
File: fE1IJUsiup1SREgNc0E0brz1wPc.mft (raw, json)
Hash identifier: LGTmsHDe+E+uVjXSZatr/Rjr2cvItLDddXiyYehboTM=
Subject key identifier: 49:17:34:7A:33:9F:1F:5A:19:61:2A:58:8D:4B:C2:E1:31:8D:F0:06
Authority key identifier: 7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
Certificate issuer: /CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Certificate serial: 019652A4EE18B8F86FB9238597200754A279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
Manifest number: 030C
Signing time: Sun 20 Apr 2025 10:01:02 +0000
Manifest this update: Sun 20 Apr 2025 10:01:02 +0000
Manifest next update: Mon 21 Apr 2025 10:01:02 +0000
Files and hashes: 1: fE1IJUsiup1SREgNc0E0brz1wPc.crl (hash: +qLeiuM0IXkLgQuheydL3+oc4ygM7HDNxCEwoVu2QaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:ee:18:b8:f8:6f:b9:23:85:97:20:07:54:a2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Validity
Not Before: Apr 20 10:01:02 2025 GMT
Not After : Apr 21 10:01:02 2025 GMT
Subject: CN=4917347a339f1f5a19612a588d4bc2e1318df006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:5d:f7:19:0f:c4:9d:84:bb:a7:c7:1d:a5:
fd:aa:97:4f:b4:6f:17:6c:97:cb:4e:b7:38:a5:00:
25:d1:b3:0a:47:ab:df:79:72:70:21:a3:86:05:17:
5a:73:8b:8e:62:0e:58:83:1f:b9:83:93:d2:20:be:
44:cb:d6:7e:1e:59:9d:e9:13:e3:61:41:8f:7b:c0:
9a:02:12:e4:35:2f:26:43:c8:b7:4e:eb:aa:89:68:
d8:9a:ac:a0:70:8d:35:e2:94:ae:1b:35:f9:9a:61:
7a:db:ef:87:c1:4b:eb:8e:37:bc:f2:d3:e0:bb:3f:
07:db:02:8e:c1:b8:5a:06:53:71:b9:75:84:6e:ef:
5e:ad:77:50:1f:66:9c:ba:49:64:5b:a7:5d:8c:52:
96:18:e9:41:66:4b:bd:a6:35:91:01:02:29:34:de:
4d:1a:9f:40:ec:4b:17:30:9c:6d:bd:2b:1c:7b:84:
bf:2d:05:22:aa:80:34:7d:21:8c:4a:41:53:56:a5:
48:bf:5a:39:dc:5f:0d:c7:05:fa:81:c1:93:70:14:
62:ba:c8:b2:da:6e:2b:8e:45:0f:12:c1:d1:84:de:
04:50:f6:aa:69:5e:d9:ce:42:01:03:da:17:69:79:
71:cb:c4:ae:ed:ea:bf:62:66:56:61:8c:8f:48:69:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:17:34:7A:33:9F:1F:5A:19:61:2A:58:8D:4B:C2:E1:31:8D:F0:06
X509v3 Authority Key Identifier:
keyid:7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e3:3b:bc:4b:f3:c4:fa:c4:63:85:12:08:f4:d7:44:a6:dd:
f5:5d:5e:50:84:10:2f:00:40:4e:2d:2e:34:47:64:bc:97:21:
a4:74:30:ae:69:e1:aa:dc:e9:d1:27:18:df:74:ca:ec:67:a7:
40:3b:ec:9a:da:c3:a8:34:8b:fb:67:9e:18:22:11:b3:41:0c:
dd:9f:40:03:d8:82:30:31:61:0b:56:a8:89:2a:ef:aa:3e:70:
d1:ec:b6:dd:86:10:f7:69:e8:4b:2a:51:4f:f7:ce:25:d1:79:
de:ee:8e:b7:7b:20:f8:68:75:86:65:f0:bd:5b:62:91:f0:60:
3c:95:88:5f:6d:ee:33:f3:44:ca:48:90:4a:15:c1:9b:f1:a9:
3b:00:bf:7e:99:29:a3:dd:a9:b8:59:e4:c3:a7:2f:ec:81:cd:
6e:e3:ca:76:13:67:46:4d:d7:fd:56:3a:62:97:c9:25:89:68:
df:3c:63:56:b9:27:41:35:b8:44:bb:38:f2:33:4d:64:9b:84:
fd:ae:e9:06:a9:63:50:98:83:db:41:3a:79:d1:43:f4:59:a1:
58:75:03:da:13:e8:40:04:73:00:8b:64:f2:67:4c:61:c6:2c:
8a:4b:98:ba:0f:a9:9c:69:62:3e:9e:34:99:75:81:6b:92:80:
17:bf:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:14 2025 by rpki-client