Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: rPhet0W/Jn2ZQMoEtMyUaEMdepxAw51AjgLDFqfZQU0=
Subject key identifier: CE:47:79:DD:F1:07:DB:17:70:03:91:D7:18:D7:29:D7:CB:AC:8D:28
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 0196488E99664ECD3F6A749E48FBFF389322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 02D6
Signing time: Fri 18 Apr 2025 11:00:27 +0000
Manifest this update: Fri 18 Apr 2025 11:00:27 +0000
Manifest next update: Sat 19 Apr 2025 11:00:27 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: g0HtQRHl+BfR1nTb8Z9gOnqPF+rbi0a+lSoiVfABbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:99:66:4e:cd:3f:6a:74:9e:48:fb:ff:38:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Apr 18 11:00:27 2025 GMT
Not After : Apr 19 11:00:27 2025 GMT
Subject: CN=ce4779ddf107db17700391d718d729d7cbac8d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:01:e7:69:93:d7:ad:37:24:f8:d1:c7:e8:
9f:3c:27:b5:93:d1:7e:2e:b8:b7:2b:69:54:da:0d:
b0:f0:f4:90:53:45:10:e4:50:36:6b:2e:9c:86:92:
00:6a:3b:6e:f3:2f:8c:4b:6d:59:68:41:a7:85:62:
db:8e:1a:39:ec:32:69:7c:e0:49:ca:3a:b7:8a:73:
8e:3a:16:55:a1:9a:a9:84:64:ed:fc:9e:26:63:68:
57:dc:f7:6f:65:91:57:35:22:be:81:ac:b7:f0:12:
d7:4a:50:44:fa:0d:72:8a:a2:97:28:15:8f:84:a9:
29:0d:3e:48:44:68:d2:9c:0b:c2:e8:8a:55:74:fb:
b1:d3:d3:0c:cb:30:d4:24:5b:73:77:19:d3:86:02:
28:62:aa:ee:d9:fb:bc:9b:0d:97:65:53:b6:0f:c9:
4e:f1:44:21:0f:63:0f:92:ba:db:8a:a4:f6:1f:de:
e9:b6:d3:4b:50:30:2d:f1:2a:1b:c3:7d:e9:25:7b:
68:26:da:7e:e4:b7:53:f0:d3:9c:8c:7a:1c:c3:68:
b9:9e:1c:4e:27:d2:0d:03:3a:08:d5:d1:a1:fd:31:
75:82:33:7f:46:e9:aa:33:81:22:88:7d:87:d4:e8:
9b:d7:23:a2:e3:5a:80:73:a4:98:77:3b:45:e3:ab:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:79:DD:F1:07:DB:17:70:03:91:D7:18:D7:29:D7:CB:AC:8D:28
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3d:26:b3:b2:34:38:74:98:af:fb:78:19:d2:73:6c:5b:d0:
55:b1:8b:01:c9:ad:84:b5:c0:56:2b:a9:88:78:44:e1:5e:ed:
05:04:90:44:90:7e:cf:a7:7f:0e:a5:8f:23:76:f8:de:1e:31:
da:45:8f:39:08:cb:9c:ea:87:15:2c:d1:75:75:ac:f2:b7:a1:
da:bf:56:00:d0:8a:e4:55:80:cb:6b:14:6b:b3:2e:79:92:2e:
64:56:ff:b3:5e:53:be:7f:f7:af:22:17:95:53:10:7e:b6:15:
f0:7e:b8:38:29:d0:b3:74:4b:90:5a:b0:f5:e6:a8:52:e4:4b:
d7:3b:63:02:20:57:f6:cd:fe:7a:5f:6b:9c:cc:72:97:bf:6b:
75:5f:4b:2c:0d:55:51:38:6d:18:b6:d2:d0:d7:1c:62:f3:fa:
36:32:eb:de:d5:86:ee:84:8e:f1:2c:75:e9:c8:2e:8f:cc:f4:
70:3b:65:da:4e:5e:73:1c:f7:d5:4e:64:4c:0f:d2:fb:41:66:
a0:90:67:7a:1a:43:12:f1:fd:73:07:55:b0:a9:27:ef:bb:b5:
f4:b0:5b:84:d2:05:56:1c:4b:56:cf:8a:7c:32:1a:13:b1:61:
1e:a8:02:55:c4:57:b5:9b:fe:dd:53:6a:6a:75:a2:58:27:0d:
a2:71:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:22:26 2025 by rpki-client