Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: oE+90aEgOuYENFm1mxfhqweR8yUf8EL4Ygyt3twus6M=
Subject key identifier: E2:F7:26:CA:80:14:2C:FF:97:D2:1C:81:D3:BD:42:9B:88:D4:31:43
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 0195127E3532B4B95A1F39144DE3DEC102C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0730
Signing time: Mon 17 Feb 2025 06:00:15 +0000
Manifest this update: Mon 17 Feb 2025 06:00:15 +0000
Manifest next update: Tue 18 Feb 2025 06:00:15 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: tpSxSUpZAsO9M2ZTGKDvJinjvm7u40PRs+SUf6Ak8Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:35:32:b4:b9:5a:1f:39:14:4d:e3:de:c1:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Feb 17 06:00:15 2025 GMT
Not After : Feb 18 06:00:15 2025 GMT
Subject: CN=e2f726ca80142cff97d21c81d3bd429b88d43143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:10:fe:5c:c1:d7:0c:5c:54:be:43:1d:44:
f2:64:41:28:36:1f:07:a1:c9:77:06:8f:7b:80:bd:
43:09:0f:3d:cb:f9:a9:e5:5a:4d:ba:fe:21:51:c3:
bb:4d:80:9e:bb:c6:16:cf:88:e3:b0:7c:73:83:db:
cf:00:92:1e:d7:ca:0b:05:03:18:29:e7:43:fc:62:
3e:6f:62:d3:a7:13:f3:74:7c:37:6e:10:51:9d:16:
9f:65:4a:1d:88:b5:b9:c1:a3:a3:b5:a4:47:b9:7a:
b6:44:df:5a:f1:63:4e:a5:4b:da:06:5c:4e:d5:f4:
28:a9:da:ca:39:95:fc:52:c3:9d:34:69:7f:b1:91:
fc:e2:d3:0e:b7:c1:c9:51:73:b4:03:2a:23:94:cd:
fc:11:d8:6d:45:5b:eb:7a:0f:1e:72:f8:19:0a:78:
ca:1e:f4:f9:83:a6:6f:98:44:64:9f:24:5f:ce:ba:
14:d7:68:b3:8e:e3:e6:6c:fc:60:ed:2d:5c:80:0b:
56:1a:85:95:a3:7f:8c:af:02:8a:40:d0:11:2b:fd:
15:51:7e:88:3e:15:a7:d2:54:e4:02:9f:7a:7e:ce:
b6:e8:66:60:d0:ed:84:7b:eb:b8:84:ef:fc:0a:1a:
1c:d8:75:20:89:1c:a5:2f:e2:77:dc:62:3f:5f:6a:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F7:26:CA:80:14:2C:FF:97:D2:1C:81:D3:BD:42:9B:88:D4:31:43
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:47:a9:cd:81:42:f2:d7:e0:bd:f4:47:8f:c3:12:d9:99:fd:
4b:8f:8a:81:7d:f3:1c:93:5c:46:57:0c:3c:32:34:3e:f8:be:
f6:43:87:63:f3:8b:91:5b:2f:a9:78:13:c2:98:ed:b4:f5:a7:
f3:50:13:88:97:62:99:53:f2:38:9f:c2:19:60:a1:dc:7a:38:
f0:e6:9d:b4:41:1e:da:31:8d:2c:45:3b:54:91:0e:b8:7c:e3:
7c:55:9c:a2:b5:13:f1:ff:b3:a5:0e:b5:bd:42:e4:ce:b4:f1:
dc:3c:d6:86:7c:6f:95:13:95:75:9e:17:36:fe:8c:ad:74:c8:
e1:0c:70:e4:dd:bd:de:35:55:49:98:e6:a8:d7:27:d8:33:5f:
df:92:24:a3:9f:4a:49:97:d3:a8:7f:77:71:c4:38:de:c1:80:
f2:24:2a:2b:e3:79:a4:39:b3:a2:61:30:02:d7:dc:98:c1:6a:
e9:d2:02:2f:94:85:6e:c8:ea:30:01:0d:cd:31:96:09:21:76:
25:71:e5:b6:79:be:41:d0:ba:06:c9:8e:fa:cd:9f:04:a4:36:
7b:b0:32:a6:08:37:21:eb:84:fe:fe:84:48:c4:f2:59:ae:64:
0a:5f:f3:d5:1e:7b:9c:1f:1f:bf:82:c7:22:01:48:80:72:3c:
49:23:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:43 2025 by rpki-client