Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File: fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier: yNZp7xKJhHXwWM0YjP3DedtHFQKoTIbysRZ2dI6ij3s=
Subject key identifier: 65:B4:B3:BF:37:8B:DD:DF:E1:47:29:5F:43:89:58:B7:69:69:D6:FA
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer: /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial: 0196534A494345F3BEDE3584AF5D43E94211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 13:01:39 +0000
Manifest this update: Sun 20 Apr 2025 13:01:39 +0000
Manifest next update: Mon 21 Apr 2025 13:01:39 +0000
Files and hashes: 1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: zAYeoTAkGaXvQ2ClKP0ZCrdHlV0yTEdX33ve0pk0edY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:49:43:45:f3:be:de:35:84:af:5d:43:e9:42:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Validity
Not Before: Apr 20 13:01:39 2025 GMT
Not After : Apr 21 13:01:39 2025 GMT
Subject: CN=65b4b3bf378bdddfe147295f438958b76969d6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:7a:bf:51:81:a2:bc:3a:1a:a8:fe:02:ae:
71:2b:a8:87:17:61:88:91:bc:2c:4e:53:2d:f8:b2:
a0:ae:a5:e4:51:61:62:be:3e:ac:9b:fe:a6:e9:bb:
7b:fd:84:20:9c:fe:9b:8a:34:c9:4c:4b:4f:7d:c6:
cd:75:06:c6:15:1f:88:48:ef:a4:14:be:8c:4a:d7:
5a:62:f6:4f:da:ed:5b:9d:6b:05:9d:fe:90:05:b3:
98:18:b6:8e:ed:eb:f5:58:0f:fa:b5:1b:fe:fc:1e:
5f:02:c5:2b:49:a1:7d:70:76:4b:4c:e8:88:b9:86:
26:8e:b7:31:7b:04:37:56:0f:c0:0d:75:b5:3a:20:
e5:af:05:c1:8a:da:ef:1a:d5:43:ef:ad:fa:24:5c:
6a:1d:40:28:1c:62:70:17:0c:e2:25:7c:b9:90:05:
94:4c:e1:9d:c6:2b:19:24:f8:19:fb:b6:29:71:9c:
25:21:0f:1c:16:a0:6d:e8:b0:b5:77:52:6e:7f:fc:
2b:87:61:9d:16:29:84:d4:bc:74:d3:bc:f9:35:70:
e3:45:5a:c2:5f:aa:96:b6:45:4c:67:e9:fe:df:c2:
7f:b9:0f:88:cf:2f:67:41:86:2b:54:f1:ec:df:27:
da:ac:f1:da:41:41:8e:2f:71:5e:d6:37:37:20:de:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:B3:BF:37:8B:DD:DF:E1:47:29:5F:43:89:58:B7:69:69:D6:FA
X509v3 Authority Key Identifier:
keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:89:6a:fc:dd:66:c6:e7:34:dd:a8:65:e7:20:47:61:a1:dc:
51:80:0a:74:de:fd:b7:2d:ab:ca:df:22:75:6c:f8:5b:86:6e:
e0:0e:11:05:f8:5d:d4:ec:e2:ad:60:15:e1:de:dc:56:c8:cf:
8e:08:76:e7:ca:74:04:1b:9a:e1:ea:87:a1:be:fb:c9:8e:6d:
c2:1f:55:8b:c8:3f:f3:15:19:b2:da:e4:59:9d:75:fa:e3:b8:
2d:df:5c:79:4d:c8:8e:cf:a1:7c:45:ba:5f:49:a2:6e:8f:10:
34:89:ed:6d:25:4a:fa:0b:ac:44:11:d7:81:44:10:93:d3:60:
61:18:4b:c1:c0:d0:2f:65:50:7c:e5:ec:a3:10:ff:6e:8c:24:
6c:0c:27:46:56:61:de:44:8d:95:20:5b:c9:aa:9a:87:3a:55:
2a:cf:05:c0:f8:42:a4:f2:95:ba:3d:7c:56:87:86:3a:e8:3c:
3c:ae:2f:a9:47:9e:5a:80:0c:70:38:6b:51:20:ba:ab:1a:02:
9f:95:75:60:81:32:86:ec:05:f4:10:2a:b0:4b:a9:9e:88:94:
ad:c4:ba:03:94:e5:ba:63:7d:09:6a:aa:c8:b9:3e:bc:db:62:
15:fa:e8:ea:1d:8d:c7:9f:73:13:32:3a:01:ee:8d:a0:d6:d6:
f1:17:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:37 2025 by rpki-client