Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: Nioq8bvu7I+YNEQ9kWGB+DhsCr5kI7jdKOrZiRby1Bo=
Subject key identifier: 74:1B:CE:7D:85:31:89:FF:9E:17:58:AB:04:A8:DB:40:0D:A1:50:85
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 01964F6C530A8753218B0ED53E1266ABA617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0C5B
Signing time: Sat 19 Apr 2025 19:00:21 +0000
Manifest this update: Sat 19 Apr 2025 19:00:21 +0000
Manifest next update: Sun 20 Apr 2025 19:00:21 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: cHJ7s+c5jtbR01y8W5CvJ9RdxluVbN+ezHk50cbcp5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:53:0a:87:53:21:8b:0e:d5:3e:12:66:ab:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Apr 19 19:00:21 2025 GMT
Not After : Apr 20 19:00:21 2025 GMT
Subject: CN=741bce7d853189ff9e1758ab04a8db400da15085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:c2:d8:49:9b:95:04:d1:7d:be:d4:bf:b7:
a9:f3:aa:08:65:d8:b4:a7:09:e4:8f:f9:aa:15:35:
ac:19:0e:58:94:1f:67:15:55:2b:45:29:4e:42:41:
61:1a:21:c3:29:77:c8:c8:3f:12:04:a9:2c:46:6c:
bf:e5:66:5d:f2:ba:a3:d0:e7:81:44:58:b1:2e:23:
72:32:e2:83:74:35:7c:19:f4:e3:b9:c8:16:25:21:
38:54:d6:d6:ab:0d:8f:60:91:6a:fa:7a:3a:f3:a8:
26:c0:09:d8:2a:6d:c0:b8:79:12:84:c4:af:95:c7:
49:2e:5d:2a:e4:3c:1a:38:bb:b8:d3:5e:8b:71:99:
ba:22:ea:39:24:79:d8:18:bf:c7:95:28:1d:a0:d4:
83:9c:6b:6c:07:aa:f0:d5:3a:de:9e:04:8e:b2:dc:
2b:93:e6:65:7c:b8:bc:c2:be:6a:69:5d:c8:8f:71:
9f:35:39:bb:67:76:c9:07:da:9f:a7:cc:75:7e:27:
25:ac:39:e0:fb:52:31:db:07:90:6a:80:a6:87:64:
0c:b2:0e:33:8a:93:4b:1c:3a:d1:8b:75:93:12:18:
ea:7b:f0:63:d5:c0:70:44:dd:5a:af:5a:2a:90:c4:
09:f0:3b:c2:3a:8d:73:c7:4f:71:67:e7:9e:0d:57:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1B:CE:7D:85:31:89:FF:9E:17:58:AB:04:A8:DB:40:0D:A1:50:85
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:60:5c:97:9a:8d:f2:4c:a2:9e:c9:ce:74:36:6f:e9:c0:
04:d9:1b:a4:50:55:c8:13:5a:41:08:dc:80:f2:1b:66:f3:40:
80:56:80:ef:8a:bf:c2:b9:22:e2:f7:58:55:0f:f8:67:34:cd:
86:2c:d3:15:b0:98:a6:38:fe:45:1f:74:bb:a6:3b:56:10:85:
0e:1b:dc:95:03:99:54:19:30:fe:13:30:8f:2f:de:b6:16:cf:
ce:ed:ba:4b:18:d8:d5:ed:df:e0:3b:aa:c4:6a:4e:7f:27:d0:
ba:1a:ca:3c:37:17:de:46:80:a5:6f:59:79:4c:46:54:e9:e7:
6c:44:23:41:80:38:f9:01:77:ac:50:8c:19:8c:74:69:a0:6d:
4c:8c:fd:cf:e2:7c:15:2c:34:9c:c2:ea:db:28:d1:e6:f8:8b:
59:d3:4c:76:a2:a8:0d:7b:35:a7:da:f3:40:67:ab:b1:1b:67:
8c:99:23:70:0b:ed:3b:54:54:02:24:64:8e:96:fd:41:17:f8:
f3:96:d1:29:67:7d:ef:f3:2b:d6:df:90:96:47:1a:93:11:80:
e5:38:b3:04:b1:af:e4:79:16:a9:c0:ee:1b:2d:19:78:ba:e5:
80:a0:b7:f6:a4:76:de:cd:ac:e3:f3:88:0c:27:bf:7d:93:e8:
7e:fb:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:54 2025 by rpki-client