Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: VnyDR/bUmsAaiyY2zBnhg1gmFBCdlWeZjDOpwuMpWdg=
Subject key identifier: 0C:E4:2F:23:72:C0:E0:3F:34:E4:F1:2E:2C:2B:65:B8:B0:8B:28:5E
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 0195903D0A624BE58B54232591C0654D0D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 059F
Signing time: Thu 13 Mar 2025 16:01:14 +0000
Manifest this update: Thu 13 Mar 2025 16:01:14 +0000
Manifest next update: Fri 14 Mar 2025 16:01:14 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: hU00UcyD1Kej214FtNlaJkyMsMqhc0nOtCcxlUMEUVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:0a:62:4b:e5:8b:54:23:25:91:c0:65:4d:0d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Mar 13 16:01:14 2025 GMT
Not After : Mar 14 16:01:14 2025 GMT
Subject: CN=0ce42f2372c0e03f34e4f12e2c2b65b8b08b285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:b3:41:f4:6a:3d:08:42:97:d7:7d:b7:80:
95:cf:30:30:fa:43:b3:fe:46:08:ec:68:1e:d8:9d:
a3:85:60:53:1d:fe:14:31:44:5f:0d:ac:78:a1:05:
5b:07:6a:e2:d8:e1:54:3b:8e:31:57:16:9b:0e:5f:
b6:8d:6c:5c:a6:fc:27:32:af:cb:1d:be:76:53:e9:
6e:6d:d1:17:54:1c:23:2b:c0:ad:af:4c:54:b1:24:
13:ff:aa:db:1a:c8:ab:60:b1:cc:4a:a8:68:31:1c:
f5:a7:c6:b0:cd:d8:00:34:42:da:a9:6b:21:a2:b4:
9b:f1:0d:77:88:b4:69:f3:ad:5d:b9:87:3e:5b:4f:
62:e1:8e:06:da:de:72:b3:ab:0d:a2:b9:24:81:83:
91:2e:77:2c:66:46:dd:6f:77:d2:ea:93:60:2f:2c:
33:f0:ba:2c:a8:d9:9a:cd:f2:8b:ca:0e:ab:35:17:
77:81:98:93:c1:e8:89:d6:12:c3:3c:d5:af:e0:03:
7b:ca:c9:4b:d8:fe:58:ee:db:8a:a5:cc:3d:cf:43:
2a:28:fb:23:11:b7:f1:8f:91:33:5b:67:db:b6:be:
3e:a3:0f:83:fe:8e:7c:a6:9b:70:62:80:a1:ed:15:
82:58:bc:50:58:f1:fb:d2:b4:c2:53:63:73:ab:54:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:2F:23:72:C0:E0:3F:34:E4:F1:2E:2C:2B:65:B8:B0:8B:28:5E
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:94:e3:a3:a1:e3:db:52:fa:c0:e2:09:31:88:e8:eb:9c:6e:
da:f3:bb:09:e9:22:bc:44:80:85:0f:5f:87:03:b7:d6:d7:2d:
76:ac:87:5f:30:53:73:c0:cd:f9:6f:ea:2f:cb:4a:1b:df:f5:
2b:7b:ba:8a:79:4f:3a:e8:1b:d8:da:20:07:10:46:cc:1f:fa:
1d:85:43:6b:12:c9:16:42:09:ff:91:d9:db:6f:67:37:2b:8b:
b6:66:80:26:22:6e:61:6c:48:c0:02:00:e5:4e:32:c7:1f:37:
f3:1a:bb:24:83:36:00:c0:d7:90:1f:1c:36:6a:76:f6:2d:6a:
bd:04:cd:51:31:54:b0:29:d0:1d:72:7d:18:f8:fb:0c:7b:e1:
a4:08:93:b0:00:e6:37:83:04:d9:fb:50:ab:75:72:cf:17:92:
a8:98:ea:c5:6f:31:19:c7:58:7f:df:e4:c5:5a:92:22:34:e8:
34:a3:bd:3e:82:d4:f7:d4:68:79:44:fe:21:d3:b8:c3:5a:fb:
69:23:16:1e:a5:a2:65:d8:ab:53:6d:48:37:7e:08:31:49:fd:
e2:8e:c9:c2:ef:b0:70:76:44:ea:c2:af:f8:fd:b5:c0:03:ab:
af:b6:86:31:c1:ab:ba:81:a2:a6:1d:7a:eb:cb:72:5b:91:23:
3a:b9:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:10 2025 by rpki-client