Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: gdQhQ02h3u6UmPeu5QODklLgFJM5nGDPPd7IwWXnn90=
Subject key identifier: 49:CC:DA:15:A9:C6:79:0E:21:6A:FA:18:70:4F:25:8B:5C:51:C5:AC
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 01958B4D4CC890A4DEDCA9F81219BA072A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 0274
Signing time: Wed 12 Mar 2025 17:00:53 +0000
Manifest this update: Wed 12 Mar 2025 17:00:53 +0000
Manifest next update: Thu 13 Mar 2025 17:00:53 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: QgU8bhRuraqRVdVZTW68qmK271C1zlj5RdG7q+aYcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:4c:c8:90:a4:de:dc:a9:f8:12:19:ba:07:2a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Mar 12 17:00:53 2025 GMT
Not After : Mar 13 17:00:53 2025 GMT
Subject: CN=49ccda15a9c6790e216afa18704f258b5c51c5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:bc:62:16:67:f8:c0:b0:63:90:61:d8:cb:
fa:ac:6e:09:3c:62:15:4d:2a:b2:6a:fb:f0:9c:95:
19:54:97:40:9a:db:69:3b:f2:2d:00:76:0b:75:98:
4b:be:e4:fa:44:96:98:4b:ce:16:79:c9:de:02:6b:
6a:e5:07:fd:91:bb:81:8d:aa:db:8f:ea:5b:f7:d0:
47:e1:da:4b:e0:0b:1c:65:ad:3c:56:c8:d9:a9:42:
4f:c8:39:41:ff:c1:ce:85:ad:86:88:70:09:79:4f:
be:dd:a1:6e:ff:0e:2e:20:4b:65:de:25:03:b6:01:
37:b4:f0:18:c3:ec:22:da:6b:98:e7:5c:2b:c7:f3:
0c:fc:14:f5:2e:f1:7e:dd:3e:25:13:f1:df:93:9e:
08:40:57:26:92:33:d1:90:46:5d:c3:d5:69:8d:53:
e0:a2:f8:03:dd:65:78:e2:40:5b:14:ee:1a:cf:60:
fc:8f:c2:b0:67:4a:e4:57:0d:3b:70:f0:70:49:ea:
d8:4b:6e:a6:51:66:03:b2:27:72:01:8e:03:f9:3e:
c9:36:54:41:21:85:0b:51:8f:90:f0:41:79:49:4b:
77:60:43:97:32:c6:49:ed:e0:a5:18:4b:80:d5:23:
5f:37:62:74:af:60:66:bb:ed:28:82:53:b9:07:3c:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:DA:15:A9:C6:79:0E:21:6A:FA:18:70:4F:25:8B:5C:51:C5:AC
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:bb:76:a3:ac:48:69:c3:f0:10:72:55:fe:d5:c9:ce:09:
dc:87:7f:cf:de:fa:a2:1f:b1:ae:2a:b2:b0:d0:85:c9:78:9d:
77:ea:63:b2:28:88:e3:8d:fc:30:8d:0f:a2:71:9a:30:23:3e:
af:c4:44:7e:48:74:6b:3b:75:59:59:34:a8:75:0a:1c:59:ad:
f3:d4:c2:22:c6:ef:39:85:bc:d1:2b:8e:f6:6b:5a:ad:93:46:
06:9f:f2:51:c6:ba:dc:bc:d3:bf:83:68:ae:3c:42:7a:7a:9c:
53:a0:60:f7:c4:a0:0e:2e:55:f2:84:f4:81:07:ac:45:5a:2b:
2d:1d:eb:37:c6:09:89:e3:36:17:73:ce:c4:ec:91:9d:15:a0:
23:38:c9:22:41:41:3d:b8:68:2c:8b:32:66:24:f2:1d:e2:a9:
0b:fd:eb:0b:3a:39:ea:c9:13:91:a7:4c:cb:f4:e7:b7:14:7c:
f3:bc:23:99:88:25:2a:9b:db:5f:05:32:06:ea:a6:9a:35:70:
15:74:16:5a:27:42:d2:be:89:b4:2c:6d:fd:77:a6:5d:ed:3c:
94:22:fa:e4:e3:96:fb:69:46:1c:3b:11:0d:4f:d4:cc:36:a7:
ee:13:0c:99:ab:24:ac:cd:45:8b:b5:e3:45:7c:6f:61:19:02:
1e:68:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:26 2025 by rpki-client