Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: bMPWf9zTYV3ctYKei2WFWmCWNKw4QRez/vi5GlNYNIQ=
Subject key identifier: C9:41:4F:73:D8:D5:0F:50:8E:D3:DC:BB:FB:99:6F:7C:C3:87:4A:86
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 0195116BBE494F854DD2656E2A0DD7A5BF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 129C
Signing time: Mon 17 Feb 2025 01:00:28 +0000
Manifest this update: Mon 17 Feb 2025 01:00:28 +0000
Manifest next update: Tue 18 Feb 2025 01:00:28 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: lE7KsATt7a9D8AxveqPYdOjt4n9R1wnS4+uJvjt6G0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:be:49:4f:85:4d:d2:65:6e:2a:0d:d7:a5:bf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Feb 17 01:00:28 2025 GMT
Not After : Feb 18 01:00:28 2025 GMT
Subject: CN=c9414f73d8d50f508ed3dcbbfb996f7cc3874a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:c4:16:fe:d4:b6:26:c4:17:da:db:e8:85:
a9:51:36:13:3c:0d:3e:08:91:47:e3:70:dd:f9:1f:
09:6c:47:81:81:2d:37:72:58:93:2a:3c:51:c8:5c:
9b:02:a6:d5:6e:b7:35:c5:70:d3:11:37:f2:45:85:
ae:e0:75:f4:1d:b6:42:c6:5a:fd:4e:3e:63:80:e1:
b2:cb:61:4e:c6:0d:04:e4:49:87:48:21:e2:21:a6:
bf:1b:fa:77:cd:40:23:c6:67:2b:7c:0e:87:c5:f3:
29:7e:ce:f5:4b:3c:30:85:fe:d4:71:5e:db:d9:fd:
93:bc:49:d5:1a:0d:dc:2b:90:0e:fb:17:57:e5:97:
8e:61:4c:80:ed:d2:62:65:80:f6:1a:47:bc:2f:ed:
1b:86:91:7d:90:a1:8f:b6:08:6b:15:6d:9a:cb:2e:
f6:35:6e:c5:a4:26:54:52:91:b6:22:d3:0d:a2:88:
c7:f9:90:e3:4b:70:73:54:d8:bb:13:a7:9f:0b:16:
5d:42:e4:bd:be:79:57:ec:cd:7d:bd:04:a9:74:73:
ba:da:b4:77:4f:89:f2:d7:c5:67:ea:42:ce:bd:3d:
d7:3d:d5:1f:ae:4a:87:23:a0:00:fa:62:e8:11:32:
eb:3a:7f:f6:5c:9b:a3:4e:d3:de:de:c9:c8:e6:f3:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:4F:73:D8:D5:0F:50:8E:D3:DC:BB:FB:99:6F:7C:C3:87:4A:86
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:02:3f:a8:49:a8:b7:98:0d:5a:e7:2a:e3:2f:4b:6a:f2:
93:c6:04:0d:3d:fe:41:c5:5b:26:3c:3f:88:7c:0b:85:c7:83:
04:47:0b:5c:0c:02:94:1f:5c:0d:c8:9f:f4:a5:1a:31:ae:6e:
ef:ff:85:2a:74:5c:fe:4c:8d:61:30:cb:52:fe:73:01:81:43:
29:2a:72:4d:84:5c:17:fb:0e:5b:65:25:01:55:4b:ed:65:97:
0a:e2:27:56:2f:9f:f9:fe:50:87:f4:40:ad:ba:22:c4:79:fa:
67:74:60:b9:95:8b:b1:e0:1d:bd:e0:6e:b3:06:bb:d6:3f:0a:
a9:43:5f:cf:e2:53:91:88:6d:70:9f:80:13:dd:0a:cf:9c:ea:
6e:2c:88:83:da:ac:ea:18:d2:26:53:e5:68:3d:fa:f8:64:d4:
19:c7:ef:52:ec:23:f3:89:cd:3c:10:5f:c3:77:91:14:58:d3:
14:cb:2b:58:c3:7e:d7:cb:cf:3c:d2:b5:15:23:36:87:dd:ac:
c7:bf:6b:ed:ab:1e:91:4b:86:a9:89:b8:4b:3b:d5:1b:8e:2f:
4a:3e:bb:1e:c4:f2:ec:ba:67:53:47:39:00:3c:75:23:f9:97:
2e:8d:1c:38:c9:4f:38:42:f3:1f:72:be:f4:0c:73:20:9a:25:
ef:8a:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:03 2025 by rpki-client