Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft
File: Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft (raw, json)
Hash identifier: MqAhfCj9LBg+N5NRBqlNJvQg36qD0Z7WfqHipCbSJFE=
Subject key identifier: 12:5E:72:27:FE:8C:6D:DA:5F:08:B2:E1:C6:F8:CE:91:76:FE:C6:84
Authority key identifier: 16:5F:A9:3C:AD:23:82:D9:39:A6:E3:82:8D:03:D0:6B:6A:8A:D6:F7
Certificate issuer: /CN=165fa93cad2382d939a6e3828d03d06b6a8ad6f7
Certificate serial: 01958CCE4B6C246BD2F9A467532F375A3BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-pPK0jgtk5puOCjQPQa2qK1vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft
Manifest number: 11BA
Signing time: Thu 13 Mar 2025 00:01:24 +0000
Manifest this update: Thu 13 Mar 2025 00:01:24 +0000
Manifest next update: Fri 14 Mar 2025 00:01:24 +0000
Files and hashes: 1: Fl-pPK0jgtk5puOCjQPQa2qK1vc.crl (hash: kbZ3c3UAVeBo9KVwUYKTu+uIWoAw2Yc5wv76VFsVqPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-pPK0jgtk5puOCjQPQa2qK1vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:4b:6c:24:6b:d2:f9:a4:67:53:2f:37:5a:3b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fa93cad2382d939a6e3828d03d06b6a8ad6f7
Validity
Not Before: Mar 13 00:01:24 2025 GMT
Not After : Mar 14 00:01:24 2025 GMT
Subject: CN=125e7227fe8c6dda5f08b2e1c6f8ce9176fec684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:c9:cc:ad:f9:c0:96:19:a4:5d:92:70:1c:
45:02:2f:a8:3e:1d:b5:54:45:2a:1f:86:92:a9:98:
70:5d:10:90:4c:a5:ff:d4:55:63:b6:0d:37:f3:a1:
6c:e7:fa:26:04:b6:3d:03:23:3f:25:8a:55:49:ee:
cd:ca:4f:cf:57:2b:2c:20:32:55:68:cb:5c:b8:f6:
36:f0:d6:bd:8b:c5:a4:3e:11:bf:bb:f6:99:97:5f:
26:61:6f:d9:6d:49:a8:ca:ef:46:6b:1b:e4:64:69:
97:b1:18:81:e6:07:32:b8:36:9c:ef:8d:fa:e5:49:
a5:32:7f:1f:11:e6:da:1f:ee:2c:ed:b2:05:02:fd:
0b:c9:4d:3e:a6:22:f3:89:0b:4b:58:30:0b:ab:3b:
a6:c3:10:5d:42:7c:76:c2:6f:88:9a:ae:55:17:98:
ea:ec:a5:eb:a8:28:d1:be:7b:dd:7d:21:1c:a2:52:
8e:50:da:b7:4e:cf:66:d1:fb:63:81:0f:25:84:0c:
f2:dd:d3:e5:b8:6f:2f:bd:49:10:4c:aa:30:cd:ac:
25:05:ca:a3:6a:08:da:cc:2e:db:8f:64:aa:b6:ee:
93:01:ea:34:f3:7b:09:2b:28:27:88:9c:7d:a4:65:
c9:a6:f5:23:98:aa:5e:33:3b:30:d2:8e:11:90:9d:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5E:72:27:FE:8C:6D:DA:5F:08:B2:E1:C6:F8:CE:91:76:FE:C6:84
X509v3 Authority Key Identifier:
keyid:16:5F:A9:3C:AD:23:82:D9:39:A6:E3:82:8D:03:D0:6B:6A:8A:D6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-pPK0jgtk5puOCjQPQa2qK1vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:40:ce:71:af:21:ac:63:1b:ee:21:15:0f:1c:23:c5:df:92:
ed:b8:3e:03:9c:5b:57:d0:c9:5a:9b:d6:bd:08:2c:5a:4d:ec:
fb:39:c3:41:ec:f0:0a:fd:50:9f:62:41:87:70:2f:5e:69:2d:
e4:7f:7e:17:3f:f5:6d:c2:dd:0e:09:5d:7d:75:95:2e:d7:0f:
dd:52:3e:46:9c:04:04:db:b9:f8:ef:66:54:80:cc:7e:b5:f9:
14:9c:c4:1a:78:03:1d:4d:eb:42:0f:d8:47:71:77:4c:cc:b3:
29:1b:07:f5:af:9f:4a:f5:21:60:9a:4b:ce:2f:9e:69:02:ae:
4a:8e:73:74:52:2d:99:3b:a2:89:65:b0:b1:20:71:75:c6:58:
89:ae:d8:57:8a:ca:5d:13:70:e3:1c:9e:1e:6a:dc:c3:a6:50:
b8:ac:a0:c1:22:c0:2e:3b:11:53:70:71:27:59:e9:80:6d:6f:
f4:14:3f:87:d9:3c:78:08:1c:7d:4f:2b:86:5b:14:fa:95:18:
41:a9:70:d8:e5:2d:eb:12:38:0c:d3:86:f1:a3:45:4b:71:99:
9b:8d:0b:9a:26:c0:3d:10:df:77:ba:b1:d7:bd:21:48:34:2a:
71:dd:bf:22:44:f9:31:ab:d5:52:65:c0:51:34:fc:bc:82:29:
8a:b6:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:11 2025 by rpki-client