Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: oM5nvqbLpNQ1HZvGPrOEgxK6dy+2VOo6xhH5IEaZ2xY=
Subject key identifier: 09:1C:B6:DC:D6:FB:39:D3:28:EB:67:61:7A:0B:92:CF:F6:72:85:87
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 01963C8B1210F092C117BCB9F83D42DDD449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0884
Signing time: Wed 16 Apr 2025 03:01:09 +0000
Manifest this update: Wed 16 Apr 2025 03:01:09 +0000
Manifest next update: Thu 17 Apr 2025 03:01:09 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: xpo2W8VnCqI/65UCbEFxAxUM5QsRqydkZP+EmcUSyFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8b:12:10:f0:92:c1:17:bc:b9:f8:3d:42:dd:d4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Apr 16 03:01:09 2025 GMT
Not After : Apr 17 03:01:09 2025 GMT
Subject: CN=091cb6dcd6fb39d328eb67617a0b92cff6728587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:01:42:c7:58:c3:52:01:f8:ae:f4:08:9e:
19:31:4c:31:93:00:c8:f4:a8:ce:b0:9b:f8:80:f5:
c9:0d:22:85:33:db:0a:ce:f7:a2:be:ea:3f:b5:8d:
ec:50:52:03:d2:24:cb:f7:64:95:98:72:b9:6b:67:
66:5d:80:b8:17:19:d5:5d:49:1b:dc:99:14:39:07:
7c:0a:d8:e9:e1:1d:4d:2a:38:c6:37:7c:c0:94:d6:
00:56:de:96:1b:b9:87:e4:6e:f9:ad:d0:ad:c5:f1:
de:23:08:ca:93:11:4a:8b:c0:59:fe:12:f9:5c:6d:
ae:77:7f:5a:18:1a:62:b3:3d:c6:f1:3d:cb:6f:98:
59:77:c1:20:f0:d1:9a:ba:0b:2d:88:73:e4:6b:75:
e4:3f:39:d8:d1:96:15:cb:f5:62:ac:3d:32:a2:94:
d1:f2:09:77:f9:52:fa:3e:1d:fe:78:3b:d4:f7:1f:
e4:fb:e7:6a:35:80:80:1f:02:2c:1c:9d:a7:40:11:
7b:cc:ff:d8:8c:2a:4b:5e:df:4a:64:d0:6d:9e:68:
f5:d4:58:d9:89:6b:59:b5:88:3c:8a:46:4b:eb:ec:
50:64:ca:64:6e:36:78:da:7d:22:40:97:a8:18:af:
a1:4c:09:fe:8b:8b:31:df:ae:2c:a0:e7:2e:15:ce:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:B6:DC:D6:FB:39:D3:28:EB:67:61:7A:0B:92:CF:F6:72:85:87
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:1e:4b:50:75:41:58:13:2f:4b:12:74:6f:08:02:ac:54:
6f:a6:ee:a8:9b:8d:7b:17:53:c9:e2:44:6b:a6:12:a0:3a:fe:
3b:4b:29:17:46:7a:01:5e:f0:ca:60:0d:74:1c:3b:cb:cd:5d:
7a:0a:09:9e:92:a5:6e:6a:f9:ce:c5:a8:09:76:50:06:5c:91:
df:1f:f2:33:da:c9:5f:5d:63:06:02:33:6d:06:59:8b:40:6e:
e6:36:1d:57:2f:79:1e:2a:6d:08:75:06:bf:4b:2c:1c:6d:ee:
22:35:24:ae:07:18:8c:c4:90:05:9a:a4:05:38:3c:11:d1:85:
0f:d9:1a:e3:12:ee:85:93:9c:bf:a0:f9:2e:ce:f5:34:ad:c8:
b2:2c:1b:bc:74:9d:18:2f:20:47:c0:3a:36:21:2f:c5:24:38:
25:db:7f:44:9c:53:fb:12:41:0d:9e:76:d0:15:f6:9e:51:95:
93:bf:1d:fa:ce:f0:07:a8:37:7d:4b:e7:95:74:21:cd:b6:9e:
ad:44:25:cc:3f:1b:6c:5c:05:ae:6c:bd:67:eb:7f:50:ca:73:
c9:f6:65:5e:61:17:63:7c:da:9a:95:08:19:1e:29:f2:93:2c:
d4:2a:10:07:75:9c:f1:e5:9b:c6:75:df:32:81:80:dc:3a:60:
7a:0f:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:20:42 2025 by rpki-client