Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier: 8M/TUUQPOVvRRKTibPcbb8hYBzG/mciRTmIaJUBn5rQ=
Subject key identifier: D6:E9:10:FF:3D:8B:8A:9F:76:C9:8D:80:3B:B4:C8:16:AA:BF:33:01
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial: 019510C7BA4586D8A340B9A7F9488281589D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number: 03CB
Signing time: Sun 16 Feb 2025 22:01:19 +0000
Manifest this update: Sun 16 Feb 2025 22:01:19 +0000
Manifest next update: Mon 17 Feb 2025 22:01:19 +0000
Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: dejNbITucFw1rEw6wqmcMgyE+1X0f42XnCnxldv8G3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ba:45:86:d8:a3:40:b9:a7:f9:48:82:81:58:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Validity
Not Before: Feb 16 22:01:19 2025 GMT
Not After : Feb 17 22:01:19 2025 GMT
Subject: CN=d6e910ff3d8b8a9f76c98d803bb4c816aabf3301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:18:80:15:88:c9:65:31:9d:61:f7:4b:eb:
6a:b4:bd:fc:40:21:36:84:23:13:eb:b2:d4:42:98:
9b:2f:0f:12:ce:6e:df:0e:1c:28:eb:93:de:38:26:
d8:a9:9e:53:61:0b:5f:65:89:fc:29:4c:5a:d6:4a:
1a:e4:a6:bf:af:5f:20:d6:7a:fe:16:4c:01:82:a0:
42:3e:c6:bf:c2:a9:54:3b:d7:2c:a8:42:26:52:67:
b1:20:37:24:cf:7f:18:f1:8d:67:b8:5b:28:13:e1:
86:26:5b:5d:56:66:95:9f:6a:b3:4e:4b:e1:14:93:
6e:72:92:78:86:fd:4e:05:4d:c0:f9:3c:50:a2:40:
2f:58:99:bc:11:f6:e9:18:9b:6a:f4:45:13:a5:46:
9f:b8:a0:45:0f:dd:97:4e:82:3c:af:33:e4:ab:5c:
5d:bf:db:57:a9:c8:ee:19:92:89:74:1f:50:f1:d8:
cc:10:40:40:79:e8:43:17:bf:51:44:1a:3b:65:f2:
fe:a9:07:49:6b:ee:ca:31:2c:73:e0:d5:8f:c5:9c:
85:2d:13:35:da:55:52:a0:71:91:5a:5e:6a:4b:e6:
bb:26:d2:94:0f:fc:ab:f5:9f:04:08:c9:56:35:a7:
dc:35:37:69:18:e9:56:fd:41:a5:bc:6a:ab:cc:97:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:10:FF:3D:8B:8A:9F:76:C9:8D:80:3B:B4:C8:16:AA:BF:33:01
X509v3 Authority Key Identifier:
keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c7:54:fc:ca:43:44:45:82:d3:bc:91:d2:0b:1b:c7:ff:95:
29:ce:5b:ea:ff:57:95:00:d8:0f:a7:08:11:c1:72:1a:dd:69:
53:ed:9f:97:87:6e:2b:0e:24:91:e3:88:c0:09:ca:56:4d:3a:
f8:cc:30:ac:50:d1:c5:98:97:67:a8:5b:dc:63:56:dd:17:a3:
20:eb:18:97:f6:8b:99:6e:f3:d2:1b:13:ec:17:4e:4e:a1:0f:
08:e8:f8:9e:32:36:77:00:47:bc:08:6a:32:54:a9:6f:7a:f8:
df:59:a9:e1:b8:28:85:be:16:2f:a5:7a:11:e6:d9:c4:44:8b:
de:37:27:32:f2:42:f0:16:53:49:54:cf:d7:5e:0e:da:22:9d:
b4:cd:b6:75:68:10:9b:77:64:42:4f:f3:35:f3:eb:1e:a7:87:
8a:a3:5a:56:bc:ee:5c:79:e0:30:cf:58:0d:ad:2e:43:02:de:
f6:f8:f2:4a:82:56:4d:e9:f8:c3:bb:b8:0d:74:97:f4:69:3b:
76:3b:68:a6:92:6f:23:ba:ec:2f:e0:8a:05:87:da:42:17:d7:
d4:95:6b:69:ee:89:67:35:f7:30:4b:54:c5:4f:e7:d3:0d:35:
23:59:a8:51:f5:3b:4f:22:79:98:98:ef:34:25:88:78:8f:58:
a3:3f:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:04 2025 by rpki-client