Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: r7YcopClZ62IM7fLHiYq7mtZzruvwYyPPeOxbfuGfUo=
Subject key identifier: BB:72:33:DA:AA:48:EB:D4:35:BC:8C:C7:E5:28:5D:76:2F:01:1F:B3
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 01961F25BCCDDE297066723C1F20EF569947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 14E0
Signing time: Thu 10 Apr 2025 10:01:28 +0000
Manifest this update: Thu 10 Apr 2025 10:01:28 +0000
Manifest next update: Fri 11 Apr 2025 10:01:28 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: Gu6tccRVLsks0yJPPZRIOEgB40fB1JAcn6ec+Lx4n2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:25:bc:cd:de:29:70:66:72:3c:1f:20:ef:56:99:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Apr 10 10:01:28 2025 GMT
Not After : Apr 11 10:01:28 2025 GMT
Subject: CN=bb7233daaa48ebd435bc8cc7e5285d762f011fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:55:1f:be:d2:1e:b4:7b:28:70:01:c6:a1:
65:aa:12:95:fa:41:6e:ac:c2:a1:d4:8d:11:ad:3a:
de:e9:28:90:40:18:9a:59:26:c9:16:97:73:2f:f7:
b5:20:6f:db:aa:1f:5f:58:b8:dd:17:fe:e0:6b:d2:
9d:fe:2e:60:ac:49:ff:21:55:7e:0c:02:ea:11:db:
26:dc:04:e3:e5:40:92:3d:91:e4:80:29:48:c6:7f:
3b:19:c8:86:f0:5b:cd:3f:35:cc:5d:a2:56:6b:5a:
ac:91:52:e6:45:41:b3:e4:37:de:91:60:36:68:9f:
13:d8:a0:9a:3c:e0:3a:c4:e8:89:b5:f7:92:75:d9:
05:c2:2a:2c:39:54:d4:4f:cd:49:8c:32:ca:f7:3b:
9f:e3:bc:e0:ce:65:35:bf:78:33:22:0d:5a:01:85:
7c:77:7a:4e:38:02:f8:72:13:03:73:8b:d7:f2:9e:
69:4c:bd:0b:fe:44:a6:ea:28:98:95:0d:1f:58:b1:
66:c6:d7:ec:ec:d7:74:1e:e7:ff:21:21:cf:f1:02:
c4:f1:cd:5c:b1:06:0b:4c:4d:15:97:48:f1:43:29:
d3:b7:bf:ad:37:a6:81:be:f8:7c:1c:a0:c8:fe:50:
4a:f3:49:48:8e:de:46:24:4d:c9:7a:61:1c:b1:eb:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:72:33:DA:AA:48:EB:D4:35:BC:8C:C7:E5:28:5D:76:2F:01:1F:B3
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:3a:83:74:1a:0b:37:30:36:49:47:ff:6c:31:37:9e:97:
d0:76:03:69:ee:99:4e:c3:cc:93:ad:e7:ad:77:1e:1d:cf:cd:
88:ea:69:ff:fe:0b:08:07:17:ef:97:44:e8:b2:49:56:2c:1a:
a2:a5:d3:81:64:5f:3d:8f:00:50:0d:c4:a2:f3:a5:b7:c0:9f:
6e:ad:b6:83:ac:63:89:18:ef:69:50:66:55:1d:c5:36:8f:8e:
52:61:73:8a:0b:84:fb:c7:fa:ab:c8:66:fe:e4:73:c7:79:c2:
db:0e:cc:38:3c:ae:ce:cd:93:59:02:74:8a:9d:a4:aa:69:33:
78:d2:da:9f:49:4c:78:da:4f:88:24:68:04:23:27:68:a3:2f:
6f:1f:68:84:0e:6d:cd:bf:d6:ce:4c:d9:10:26:e9:ae:4f:d7:
8b:7d:1f:ff:e5:be:82:d6:10:ef:67:d8:c0:70:50:e9:ef:bc:
6d:80:ff:03:b5:53:d4:65:2c:67:5c:e6:93:9b:f9:76:c8:11:
aa:1e:83:7b:94:dc:a1:57:79:3e:20:60:27:27:82:89:cc:74:
f5:23:a0:ea:3a:06:7b:d8:e2:c2:82:0d:38:48:51:af:a9:72:
1f:ad:a3:8b:5b:39:ec:e9:9f:b5:95:b3:8c:c7:53:d3:54:a0:
21:a8:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:29:54 2025 by rpki-client