Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: Q7xXj4HWcWY0+qqk+7wavOGeVGig2XFZ4GQwTegHYIQ=
Subject key identifier: BF:70:36:F9:AF:66:FB:21:CD:59:C9:06:20:C4:60:11:88:86:B5:9F
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 019644B2178C7EDE60475EEF30E8D48F8500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 0C97
Signing time: Thu 17 Apr 2025 17:00:44 +0000
Manifest this update: Thu 17 Apr 2025 17:00:44 +0000
Manifest next update: Fri 18 Apr 2025 17:00:44 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: iar1r59yyxBTFfwHUTDwBn5S0hkTebxsPOPRmOo7WvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:17:8c:7e:de:60:47:5e:ef:30:e8:d4:8f:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: Apr 17 17:00:44 2025 GMT
Not After : Apr 18 17:00:44 2025 GMT
Subject: CN=bf7036f9af66fb21cd59c90620c460118886b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:6a:fa:cc:af:5f:cd:86:08:89:89:e9:45:
23:94:32:9d:3c:4b:73:d8:b3:a4:8b:b1:c5:17:79:
8d:74:1b:3c:29:e4:9b:67:9e:61:0d:59:f1:4b:02:
86:3d:ec:8c:18:a8:d5:fa:f7:92:f4:c4:ae:e5:f2:
27:df:08:7e:bc:4c:9f:50:ab:ad:72:ab:81:db:d9:
ce:5d:98:5f:fc:8c:72:d9:ca:44:6f:4f:a7:6a:59:
91:95:d6:85:f4:2c:be:2e:0e:3b:2c:8c:2f:98:1e:
34:27:8d:53:08:c3:9e:02:52:85:9e:e3:1d:78:23:
80:c7:2a:0f:9f:35:72:e6:ee:44:97:2e:00:27:65:
52:f5:31:6e:4a:09:21:53:25:d0:ba:76:dd:47:8e:
f4:92:3f:70:73:b6:89:11:82:0e:8b:06:6d:71:e2:
7a:63:7b:ea:82:30:50:7b:bc:66:bb:84:7e:99:2f:
39:68:f1:87:fd:d1:80:61:7d:07:fa:38:ab:b0:26:
dc:fb:34:02:8c:dc:1c:15:9f:3b:42:a8:e4:96:5b:
23:4e:2a:1e:e5:0f:3d:6e:8e:62:0a:89:91:73:d4:
fd:1a:10:10:c7:13:02:8e:69:46:06:38:d1:63:f6:
2b:de:55:3b:ba:98:bc:0f:1d:fd:70:09:8b:9d:7b:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:70:36:F9:AF:66:FB:21:CD:59:C9:06:20:C4:60:11:88:86:B5:9F
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:67:82:65:43:cf:54:42:fc:76:2e:0c:c9:c7:b4:de:e3:
c6:16:ba:bc:29:2b:d9:7e:70:21:de:83:5e:fa:12:57:54:76:
2c:e9:f2:19:42:45:3d:1d:06:db:fd:16:a8:ba:69:0a:ee:b2:
64:0a:79:e3:2f:ef:5e:e5:65:fe:db:7c:3b:97:88:b4:f9:9e:
b3:d2:09:bf:ce:e3:55:57:83:a2:c7:9d:9f:6b:f6:e7:0c:2d:
cf:2a:c1:b0:b0:63:ef:7e:15:15:65:20:eb:ac:2b:89:24:14:
03:00:1a:2f:f1:b8:3a:e7:49:b4:07:07:75:1b:dc:b8:87:ee:
5c:98:56:2d:07:27:16:2a:68:1f:dc:85:96:a0:2b:62:9f:92:
57:02:dd:74:23:9f:18:e4:dd:f1:4b:96:0d:0a:f6:74:8c:ca:
ad:5c:b9:ed:78:42:5f:1f:5f:46:75:4b:d1:8c:8a:fe:e9:9a:
50:65:95:f7:a9:83:2f:a3:13:c9:a8:c0:17:3d:b1:dc:fe:a3:
ce:47:b8:77:42:c4:48:52:b6:e7:be:1f:81:3d:a6:5f:25:f4:
df:c1:29:cd:50:91:b9:6a:8f:27:4c:a4:da:e9:f3:f1:14:a5:
f9:3a:74:41:84:c7:ee:17:a2:16:d7:4a:9f:3f:79:b1:4a:7e:
75:6b:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:12:51 2025 by rpki-client