Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File: fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier: L2GGwxQUH6UojKpWAzmtlb10/Snki39IySXd/irKRBo=
Subject key identifier: C6:E9:15:E2:60:FF:1B:E1:4E:73:40:AB:58:9B:DF:A6:CE:6F:94:37
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial: 01964D7EA61C9D3644409038186A4FA14ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 10:01:07 +0000
Manifest this update: Sat 19 Apr 2025 10:01:07 +0000
Manifest next update: Sun 20 Apr 2025 10:01:07 +0000
Files and hashes: 1: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: 1xGO/JhzO8HEcJjRbYWyszgLTEmS7Hp3h4EeiZ3KS/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:a6:1c:9d:36:44:40:90:38:18:6a:4f:a1:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Validity
Not Before: Apr 19 10:01:07 2025 GMT
Not After : Apr 20 10:01:07 2025 GMT
Subject: CN=c6e915e260ff1be14e7340ab589bdfa6ce6f9437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:03:99:db:c6:ef:0e:5d:33:fa:d9:7d:64:
95:58:78:43:dd:21:d7:72:0d:5a:ed:8b:22:7a:4b:
81:3c:b2:84:30:8a:1d:c3:63:d1:63:65:7a:f8:95:
5c:13:d9:8f:56:7c:db:53:d6:d9:a8:78:a7:62:13:
37:89:8d:c9:03:ac:14:c2:83:e8:6c:48:d5:f1:29:
c9:e9:d6:a4:6d:df:de:dc:7a:da:cf:63:3f:ab:05:
88:b8:fc:4f:49:43:70:7f:12:ee:04:be:b6:d0:e4:
7f:c2:26:16:45:12:46:e6:18:00:00:9a:e4:12:48:
30:52:44:ab:6f:72:83:4b:02:45:5b:37:45:f5:f9:
ee:f8:5c:91:0e:45:18:ad:0a:1e:cd:49:3f:c7:55:
c0:03:a9:22:09:0a:26:7c:5c:b4:b9:71:a7:ec:7b:
d5:86:b1:5c:88:e7:e6:67:72:65:76:82:51:0b:1f:
af:73:cb:db:29:d6:6a:29:46:5f:62:82:c4:4e:43:
69:8a:81:f3:04:66:1c:ce:bd:a7:81:00:59:23:89:
f0:5c:3d:5d:9e:ce:6a:e2:83:98:cb:63:27:15:5f:
7a:6c:7e:f2:3a:8b:57:cb:ef:61:85:5b:d5:b4:2e:
3c:81:9b:85:57:8f:b1:05:48:70:c4:e7:3d:45:3b:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:15:E2:60:FF:1B:E1:4E:73:40:AB:58:9B:DF:A6:CE:6F:94:37
X509v3 Authority Key Identifier:
keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ac:0f:d5:b9:a2:0c:d0:86:cc:76:fd:21:74:d9:12:4c:2f:
fa:fc:c2:48:9b:3d:e4:c5:b6:bb:55:6c:e7:53:3c:fb:2e:d8:
6a:1c:c1:10:be:da:32:1e:c8:e6:05:30:e0:33:db:ee:19:4a:
fb:47:3f:5b:c6:d6:b3:42:2a:3c:2e:8f:58:49:4f:f8:37:e1:
d6:50:9a:eb:38:8a:00:07:ab:59:74:86:26:ad:61:38:ca:82:
89:de:b2:9e:bb:57:31:96:0f:11:9d:e8:ac:1e:ad:9f:f8:9f:
96:d2:a4:6e:50:89:fa:1c:2a:5b:db:1f:bd:fc:5b:88:cb:8b:
92:c8:23:5e:58:e3:72:eb:7a:da:a8:a4:2c:06:f7:d4:9e:03:
21:8a:16:87:3a:26:8f:cb:64:8b:84:97:e1:ea:5b:fd:94:1a:
8f:57:d4:ff:7a:b6:b2:d6:ed:0c:d8:9b:f4:14:20:4c:4b:21:
af:76:88:bc:ea:b9:25:82:df:80:3e:3d:2b:29:d8:e1:4a:1f:
08:09:fa:59:5a:a6:f8:9b:8c:10:03:33:f1:6d:af:85:04:3f:
5b:97:62:1d:f5:13:9b:05:06:99:c1:11:35:9d:99:f3:dc:80:
3d:20:95:99:fb:36:84:e4:2c:ee:a3:e1:09:68:bb:ef:d9:57:
9f:e4:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:37 2025 by rpki-client