Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
File: fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json)
Hash identifier: CXHuOV9QCERqVITXhpXPsDyBnKWBa+vJg+28ygVU7AQ=
Subject key identifier: FF:D5:55:2F:37:D5:FF:4D:BA:C3:37:04:AC:51:F0:C1:39:A8:08:48
Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
Certificate issuer: /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Certificate serial: 0196452029C2DD714A86DCB722BB56886FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
Manifest number: 0892
Signing time: Thu 17 Apr 2025 19:00:57 +0000
Manifest this update: Thu 17 Apr 2025 19:00:57 +0000
Manifest next update: Fri 18 Apr 2025 19:00:57 +0000
Files and hashes: 1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: XlWi0hyqDLZqBRWbu+dQCSjizanTY4dvV74dj1OvT/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:29:c2:dd:71:4a:86:dc:b7:22:bb:56:88:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Validity
Not Before: Apr 17 19:00:57 2025 GMT
Not After : Apr 18 19:00:57 2025 GMT
Subject: CN=ffd5552f37d5ff4dbac33704ac51f0c139a80848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:01:d4:ba:2b:8e:89:c2:53:b8:49:11:57:
0d:d4:83:80:a8:17:f0:15:14:10:b9:57:7e:51:d8:
5f:de:2a:fc:d2:fe:7a:9e:4a:f7:22:3b:06:54:b7:
2c:15:c1:9d:4a:ee:0f:fa:b0:70:1b:69:a8:01:e4:
ea:5f:fa:1e:aa:23:5d:af:c7:52:f0:59:0d:8a:79:
91:ea:04:c8:69:ba:99:98:5b:3c:0c:b8:db:9e:f1:
d6:e1:01:b4:a7:96:e3:59:84:89:90:32:fc:0f:6f:
21:40:3f:59:df:cd:64:ca:c5:d3:a9:33:1a:86:c6:
a5:6e:5d:b1:55:11:80:f9:65:f1:5a:52:6d:a9:32:
b7:74:d0:d0:0e:af:59:ee:c5:e8:18:09:fd:18:8d:
c2:45:a8:d2:80:aa:9c:76:d0:9a:8c:e4:b7:33:73:
c2:fd:18:3e:5f:6b:7b:42:c0:7c:f7:4c:bf:95:69:
b8:6f:d0:4c:c9:19:78:ef:c5:88:f8:e2:26:6d:9f:
70:b4:ce:09:d8:a5:52:37:35:29:f0:80:dd:be:03:
ec:1a:47:9e:14:6d:9e:23:69:34:3a:11:85:8a:57:
1e:59:76:00:50:2b:59:bd:2c:e0:09:66:48:84:75:
61:35:43:8a:b1:be:58:62:91:9c:dc:17:68:f3:89:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:55:2F:37:D5:FF:4D:BA:C3:37:04:AC:51:F0:C1:39:A8:08:48
X509v3 Authority Key Identifier:
keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:71:09:79:7b:c9:bb:52:b7:29:eb:22:b7:92:b9:c1:1d:84:
95:e8:98:f0:c6:69:04:a3:8f:0e:ee:78:91:44:48:9c:94:5b:
f8:71:07:ba:05:1f:c3:be:6a:47:20:71:5a:77:23:12:96:45:
71:e9:5f:6c:1f:48:8e:65:bc:21:01:42:65:39:62:2f:58:ec:
e2:62:82:84:74:9a:02:28:00:d4:2c:1d:c2:e5:82:c0:b4:48:
57:20:a6:f4:c3:89:f2:ca:2d:2d:7d:e8:5b:f1:fe:64:c2:e2:
7e:a4:73:b9:72:7e:fd:bf:7e:fb:3c:75:f0:0b:29:42:77:30:
a0:7c:5f:12:12:d4:83:a4:05:48:a6:35:86:33:74:6a:73:97:
a4:38:ca:5f:6c:2c:1f:a8:2a:3e:1d:93:dc:1e:17:80:33:50:
49:e9:9a:10:3e:72:25:43:68:76:f1:a4:2a:36:f8:f1:0f:bb:
d1:1f:ed:c8:41:0f:c9:de:29:f7:ca:0e:8f:77:48:36:23:e3:
29:cd:d1:70:0a:cd:15:b7:27:17:43:3a:a0:58:f3:87:cb:46:
98:72:13:7c:42:63:34:7d:4b:d3:eb:d0:e0:5e:cb:40:8f:74:
0b:9b:9d:a6:49:70:de:2d:97:a9:63:24:c4:2b:b7:1b:87:23:
b6:96:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:39 2025 by rpki-client