Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: KXpYxReVoj105cRPSE9xzXTvzaZvdkdot74ExbLgb9U=
Subject key identifier: 90:0B:33:31:3C:F9:78:85:E2:CA:4F:75:D1:48:A7:BE:51:FC:34:02
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 0196531207C9872A4FC1D8259C1536E03E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 07D6
Signing time: Sun 20 Apr 2025 12:00:12 +0000
Manifest this update: Sun 20 Apr 2025 12:00:12 +0000
Manifest next update: Mon 21 Apr 2025 12:00:12 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: R2ymh8zu62JmZXnX3eBmD0JtqACM2dZigtLHxFjJR8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:07:c9:87:2a:4f:c1:d8:25:9c:15:36:e0:3e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Apr 20 12:00:12 2025 GMT
Not After : Apr 21 12:00:12 2025 GMT
Subject: CN=900b33313cf97885e2ca4f75d148a7be51fc3402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:c0:d8:d1:36:99:70:a6:3f:29:29:21:b9:
6a:ae:40:f4:7d:9a:51:d4:50:09:02:fa:c5:33:e9:
24:dd:7d:c4:4c:87:72:69:92:bc:85:71:e8:f1:4d:
37:63:57:b6:91:33:1b:66:d4:6d:e3:da:b0:76:f9:
b6:5e:31:78:43:7c:6b:6e:71:0b:b3:95:57:cd:af:
05:6e:ce:21:41:45:d2:e1:b5:d2:2d:b9:af:5c:dd:
5d:f2:fa:57:55:36:e3:4b:43:10:d2:17:4e:52:11:
3c:b6:76:1b:9f:62:d1:37:a0:93:e7:72:e8:28:60:
d6:00:13:38:e8:a3:1c:23:f5:ad:71:7d:94:08:73:
3c:4e:9f:81:47:f3:ff:15:7e:a4:f4:37:d7:3f:d3:
fa:95:eb:a9:a8:46:cb:84:53:ca:1a:d3:40:a9:88:
22:29:57:8f:11:f6:9b:fa:3d:30:74:b0:a5:4c:94:
e9:47:1d:e9:30:76:e5:e9:24:f6:74:c1:02:23:f2:
b8:cc:06:d9:bf:8b:e2:9b:c7:c0:ff:20:57:13:d9:
6c:64:29:99:94:e6:13:d5:b4:d7:31:9c:d6:56:7d:
8b:1a:13:7d:b8:93:07:e2:6d:fb:b5:a4:4f:a2:5e:
e0:21:2f:84:4e:33:67:05:d5:ed:fe:b0:51:76:c1:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0B:33:31:3C:F9:78:85:E2:CA:4F:75:D1:48:A7:BE:51:FC:34:02
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8d:2c:50:7a:5a:79:2a:81:3b:07:5c:07:b1:fa:59:a4:e2:
0a:fd:37:20:c1:a8:63:c5:73:71:f2:30:3b:0a:87:96:e0:d1:
f4:0e:df:ae:fd:48:3f:9b:78:48:aa:02:03:4a:36:8c:a8:15:
a9:6e:00:85:f3:bf:b3:52:ee:f3:df:aa:2b:a3:57:8c:c4:72:
52:a5:99:59:6e:a9:69:a4:b5:ab:02:f4:95:45:6c:8c:83:8d:
8c:56:db:58:70:ca:91:a3:ed:69:01:97:aa:f0:7d:e8:12:6c:
9c:53:a0:26:61:9c:14:97:54:86:d1:2b:3a:a7:c9:8f:c2:4e:
e6:f8:8e:d7:a3:98:76:f2:4e:85:05:8f:07:4a:16:09:65:12:
61:50:c4:81:b3:f1:e5:dc:fb:3c:a0:c2:c4:70:d7:0e:d1:0d:
f7:ad:6b:27:29:52:79:2d:cc:92:ab:fc:fa:dd:d9:b1:8a:30:
65:e8:54:41:aa:ca:ee:29:0e:2c:5a:7a:b4:f9:5d:77:f3:49:
be:f1:d3:02:72:64:e8:c8:e2:3d:2b:dc:c8:24:03:7d:0a:c7:
7e:44:f9:43:19:48:78:90:e1:36:35:c5:33:4d:d1:90:3a:8f:
43:15:a5:9a:1d:40:0c:d2:e1:fb:7c:cf:eb:6a:db:ee:69:2a:
bf:9d:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:36:33 2025 by rpki-client