Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: gua/WF+9P3ewsDOoM4J9hknfnWXpoTDsnavuM8c+OY4=
Subject key identifier: CE:F2:36:3C:0A:34:41:AC:D4:00:41:C7:9E:D2:2F:1E:AE:7D:36:81
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 01963EAFB1657A4F50F1CC5F96335D40E30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 1338
Signing time: Wed 16 Apr 2025 13:00:23 +0000
Manifest this update: Wed 16 Apr 2025 13:00:23 +0000
Manifest next update: Thu 17 Apr 2025 13:00:23 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: FiHT9ZWWDpeoU6vuvN0yPrWpnFvQJrKbKubtc+/Ipsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:b1:65:7a:4f:50:f1:cc:5f:96:33:5d:40:e3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Apr 16 13:00:23 2025 GMT
Not After : Apr 17 13:00:23 2025 GMT
Subject: CN=cef2363c0a3441acd40041c79ed22f1eae7d3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:bd:dd:f9:67:d1:e5:78:04:b4:49:fc:df:
cf:35:b6:2a:54:e1:20:88:82:a9:fa:9f:86:8e:40:
bd:48:3c:f4:03:bb:54:f9:e1:a1:27:5c:22:2e:9f:
29:c7:5e:0f:92:85:2e:81:ee:70:74:97:d4:68:b8:
25:99:f4:3a:21:41:69:ef:f6:47:f3:af:f4:01:d9:
cf:ae:b4:80:28:4d:0f:0f:16:47:2e:47:69:9b:1a:
12:c9:e5:21:87:81:d3:8b:dd:29:ae:e8:60:57:1a:
fa:40:0f:7e:18:bf:7c:ec:eb:cc:29:c6:74:03:19:
77:b8:33:b1:22:fa:75:6a:9e:cc:11:dc:10:cc:79:
52:f9:1d:2c:bb:62:4a:57:f0:25:4b:3f:30:d2:48:
5b:40:58:bb:07:8e:52:8a:21:b2:ec:2a:bb:da:e8:
2f:4a:d7:0f:29:3c:81:90:55:c7:a0:d5:15:e9:f0:
98:80:e2:6b:e3:fa:6e:7b:41:c3:73:0a:9f:69:c8:
18:aa:9b:e5:5b:4d:82:80:73:f0:6a:af:e4:10:65:
84:4d:35:87:55:79:dd:fe:ed:37:5f:7d:34:5d:83:
a8:67:55:53:5d:f9:09:21:cb:f1:ef:68:8c:c2:23:
ca:39:25:f6:cb:5f:e8:d3:3f:c7:54:fb:d5:35:c5:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F2:36:3C:0A:34:41:AC:D4:00:41:C7:9E:D2:2F:1E:AE:7D:36:81
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9d:4e:f7:10:10:ae:29:d2:85:50:c4:3f:20:24:9a:a6:ce:
c1:fa:45:8e:8d:58:f6:e2:79:05:22:51:c3:ac:e0:b5:66:0a:
0b:93:5a:08:ee:bc:a1:1c:fa:93:48:45:02:e2:25:ff:04:2a:
64:5a:46:f6:93:69:0b:b1:35:c9:b5:bd:bc:59:07:9e:dd:fb:
2e:4b:26:5b:5f:53:03:7a:67:1f:e4:90:f7:0a:5d:f7:20:a2:
31:ef:43:ce:9e:25:df:81:37:f3:89:d9:f0:37:45:e5:f3:79:
d3:e3:c4:23:48:0b:40:d6:29:a7:25:22:fa:d7:fc:a7:6e:e1:
eb:c7:c9:90:da:72:a3:a6:97:38:53:cf:6e:ca:0b:61:6f:f3:
62:e2:b7:75:36:01:a1:e3:ea:98:c4:75:87:4d:a9:bf:0f:7d:
56:ea:a6:60:e9:b2:be:a8:74:60:ad:e1:1b:16:e1:68:67:32:
0a:f4:21:ad:9a:b1:d3:80:c7:4f:7b:88:15:c9:39:05:4e:fb:
d5:12:dd:d0:a3:0b:c5:f2:b7:9e:c9:71:b3:b8:da:c3:af:49:
c4:dd:f4:8e:a4:cf:f0:13:33:a0:1e:18:d2:fe:ba:62:26:77:
c1:cf:4f:85:48:65:a9:05:19:86:82:ea:d6:70:2f:f5:5a:05:
6a:08:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:50:36 2025 by rpki-client