Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft
File: fnHOoonCLKhp05CCVc1Op2Yhk7I.mft (raw, json)
Hash identifier: CYPPDgl09DA6gJpr0dGat44GrVEGmrBi0kBTOyNCAhI=
Subject key identifier: 81:B3:CC:3D:22:04:79:E5:48:6C:E9:BD:B9:86:60:67:B1:BF:68:54
Authority key identifier: 7E:71:CE:A2:89:C2:2C:A8:69:D3:90:82:55:CD:4E:A7:66:21:93:B2
Certificate issuer: /CN=7e71cea289c22ca869d3908255cd4ea7662193b2
Certificate serial: 01958C611BC78CC5A5ABD0D159EF9229C4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnHOoonCLKhp05CCVc1Op2Yhk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft
Manifest number: 0A7D
Signing time: Wed 12 Mar 2025 22:02:09 +0000
Manifest this update: Wed 12 Mar 2025 22:02:09 +0000
Manifest next update: Thu 13 Mar 2025 22:02:09 +0000
Files and hashes: 1: fnHOoonCLKhp05CCVc1Op2Yhk7I.crl (hash: PJ0oQcwiV2UFn/yPIs8GnWr3Sije7wxBeQIaC/g4HQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnHOoonCLKhp05CCVc1Op2Yhk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:1b:c7:8c:c5:a5:ab:d0:d1:59:ef:92:29:c4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e71cea289c22ca869d3908255cd4ea7662193b2
Validity
Not Before: Mar 12 22:02:09 2025 GMT
Not After : Mar 13 22:02:09 2025 GMT
Subject: CN=81b3cc3d220479e5486ce9bdb9866067b1bf6854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:66:3a:0d:65:56:ef:12:cf:94:ce:f9:e6:
2b:be:7a:16:5f:d1:8e:85:2c:e8:f4:87:44:0c:db:
d8:24:7d:ee:b0:39:ed:d2:4a:e9:e9:b2:aa:81:77:
79:2b:73:46:c1:49:d9:5c:08:4b:7c:fb:c6:b0:c2:
30:51:4b:89:42:5a:47:cf:54:7f:9b:41:d7:3a:0d:
9b:9d:50:37:d1:fa:04:94:c8:c1:63:cf:dd:3a:d2:
c3:a4:00:84:be:9d:c5:57:17:bf:22:4b:e8:47:41:
f4:67:c2:64:a5:d1:ba:70:c2:7b:d2:1d:22:1f:2a:
ca:b8:13:3b:1f:f6:e0:e0:ad:0a:13:b6:2e:d9:cc:
1f:7e:f5:f3:24:66:e0:52:01:4f:93:62:c6:a5:7a:
ee:a5:ad:4a:ce:a6:7b:ae:46:7e:1d:27:52:4b:11:
0c:b6:8d:bc:b9:5b:75:a6:f2:25:6a:59:a8:26:53:
a0:f6:1e:30:78:52:41:22:23:0d:10:62:1f:40:31:
2a:67:6c:48:12:a1:ef:0a:20:d2:2b:49:65:86:aa:
20:e5:3a:0d:4f:aa:e1:c8:45:0c:30:9b:53:4f:c3:
9b:e7:b3:bb:1e:6b:a4:4e:0b:90:a8:c0:75:da:e9:
19:b1:3f:be:54:f9:36:8e:32:58:73:d1:d6:d9:37:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:CC:3D:22:04:79:E5:48:6C:E9:BD:B9:86:60:67:B1:BF:68:54
X509v3 Authority Key Identifier:
keyid:7E:71:CE:A2:89:C2:2C:A8:69:D3:90:82:55:CD:4E:A7:66:21:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnHOoonCLKhp05CCVc1Op2Yhk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:25:ac:fd:3f:f8:6f:53:35:bb:cc:55:12:27:a8:41:f3:c8:
1e:6a:97:b6:67:6c:34:d7:03:f8:99:bb:47:0d:1f:a9:30:22:
f2:79:9b:a9:f3:2c:69:68:21:cc:34:6b:43:97:3a:cf:35:26:
be:08:48:2f:0b:41:93:ff:84:ff:f0:be:0f:31:59:2c:5a:07:
bf:49:2e:90:e3:c5:2f:17:a2:37:00:b1:3c:bd:a5:c7:5a:71:
78:b2:1b:e2:a3:6e:fa:0e:75:56:e6:69:31:40:83:32:94:04:
63:d1:46:bf:da:d8:38:67:23:8d:e3:a2:33:ec:c6:d5:e1:a6:
30:49:dc:3e:5b:b3:69:21:40:9a:c1:66:39:7c:0f:ff:8c:76:
69:d6:53:45:33:74:b7:27:26:62:c4:1c:ab:26:5a:55:96:97:
fd:d5:87:ad:9b:39:0d:e1:fd:77:21:dc:47:81:24:29:3f:c2:
9b:65:a3:f7:64:82:ec:37:47:9e:82:89:ec:4d:64:48:36:84:
c6:24:4b:e4:78:74:7c:00:b1:1a:d0:54:83:1f:1a:74:24:d1:
de:9a:73:50:d4:06:31:f9:d6:d6:88:e7:40:c4:76:50:76:14:
47:f8:81:d5:12:6c:24:42:5c:45:a0:2f:e5:b0:2c:dd:9f:c2:
0f:d8:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:54:03 2025 by rpki-client