Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: ZNevcXEno6/SNG5QrflmPA1VosWg7v0BaW9LdUbvIlA=
Subject key identifier: AD:B0:42:38:EA:9F:14:13:6A:3B:90:1C:ED:BC:BF:0A:5B:8B:B2:37
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 0196534A60F9184059EECD445C8AAF96BC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0C5D
Signing time: Sun 20 Apr 2025 13:01:45 +0000
Manifest this update: Sun 20 Apr 2025 13:01:45 +0000
Manifest next update: Mon 21 Apr 2025 13:01:45 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: sCSkXVUOQgr97plxcVT83LCXHjo8hZbfQMjChtpM7qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:60:f9:18:40:59:ee:cd:44:5c:8a:af:96:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Apr 20 13:01:45 2025 GMT
Not After : Apr 21 13:01:45 2025 GMT
Subject: CN=adb04238ea9f14136a3b901cedbcbf0a5b8bb237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:10:02:e7:8c:b8:58:d4:40:d1:92:13:be:
5f:f6:e7:0e:ff:5e:05:fd:c5:f7:7d:40:ec:f5:c2:
f1:8c:20:20:e7:bb:09:8d:67:0d:62:8d:f3:ad:11:
0d:61:54:7d:51:57:a8:a3:51:c7:2c:98:eb:87:39:
3c:51:a9:19:a0:f7:a2:b1:79:6d:89:7e:2e:ba:b9:
17:ed:8c:bb:30:8a:d3:dc:eb:18:fe:ad:10:46:9a:
0a:c1:95:a7:0c:20:2d:6e:68:29:0b:4d:aa:a7:62:
ea:d5:ac:f8:2a:85:1f:29:f0:14:d1:77:85:b8:ea:
72:68:8e:be:06:a4:25:c5:55:5e:78:f8:22:0b:47:
a6:c9:e2:cd:5f:43:8b:bd:fd:7c:c2:a7:35:25:e1:
f0:45:de:74:7a:d8:3a:5a:f7:82:7a:2d:08:8c:13:
e7:29:18:08:c0:2e:04:74:a8:ff:ca:dc:66:7b:11:
91:0f:36:4b:ad:23:42:a7:41:d2:ed:7f:0a:cf:42:
b5:55:e3:7d:ac:d9:0e:24:63:ba:b5:d9:9a:f3:75:
17:c0:8d:59:eb:ac:09:5b:47:54:6b:d0:31:fc:97:
47:63:1d:6e:fa:20:17:43:e0:15:d2:7b:03:4b:49:
8a:35:8f:4f:a0:4a:33:d5:b6:5a:bc:65:0c:0d:8e:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B0:42:38:EA:9F:14:13:6A:3B:90:1C:ED:BC:BF:0A:5B:8B:B2:37
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f2:02:33:ff:cc:40:90:45:2e:a0:35:38:d3:2c:b4:17:a3:
cd:32:af:11:82:f3:64:eb:92:1f:86:97:34:0d:d6:65:3c:63:
a3:40:64:f2:f9:52:b4:3f:d3:98:06:ec:29:93:b8:66:68:5f:
2f:17:3b:25:d1:2e:2f:0c:21:58:06:ea:e9:c4:3a:86:36:f4:
75:5e:23:5e:36:28:f5:a9:a0:3a:e8:00:9f:3c:2d:19:d8:68:
9e:27:35:10:ed:7f:14:5c:2a:63:a3:f9:d8:88:e2:3d:52:91:
af:45:d8:68:57:14:84:8f:bd:98:d7:ae:71:40:7e:f6:27:fc:
1e:33:f5:8a:9e:ca:e9:42:57:3a:32:7a:48:ee:11:58:63:84:
35:33:aa:ec:d4:61:ef:f5:ae:85:d5:93:13:dc:60:89:b4:a5:
7e:64:f3:97:f3:fe:af:d9:a3:d8:95:f6:29:e2:d4:b3:c1:81:
73:0e:b7:d7:f0:24:6c:3b:5f:07:5e:a9:e2:aa:ef:07:91:38:
6c:22:ed:59:8a:88:3a:1c:36:15:44:76:36:70:02:36:5a:17:
69:14:24:21:db:b0:04:31:d1:8b:48:2e:07:30:1d:e2:d3:cc:
75:9b:1d:75:9c:54:19:8d:63:e2:f3:2c:7d:b9:48:d8:b1:c6:
7f:e2:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:17 2025 by rpki-client