Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier: aAJFfqe66M/g6t16pIIHfirQtPKAWAYZ0jSBpw40UV8=
Subject key identifier: 7A:AB:F4:68:F4:B5:10:BA:2B:C2:D0:2E:35:92:53:28:E5:8B:55:D0
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial: 0196496A64DA9FCB5592741084BB03DD8070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number: 0236
Signing time: Fri 18 Apr 2025 15:00:31 +0000
Manifest this update: Fri 18 Apr 2025 15:00:31 +0000
Manifest next update: Sat 19 Apr 2025 15:00:31 +0000
Files and hashes: 1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: CuDeOxcJS3Z/NQJ9SWPTvfxMOoOq6T7ewDE+jKHqaOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:64:da:9f:cb:55:92:74:10:84:bb:03:dd:80:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Validity
Not Before: Apr 18 15:00:31 2025 GMT
Not After : Apr 19 15:00:31 2025 GMT
Subject: CN=7aabf468f4b510ba2bc2d02e35925328e58b55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:51:3e:3f:75:11:65:5b:de:54:a8:1f:9e:
b4:f9:f6:46:5d:aa:a7:40:52:7f:63:ff:69:ed:d9:
36:e5:c4:48:5f:82:ae:ca:41:14:8b:65:10:1e:ba:
df:5f:ce:91:9c:79:0e:e9:03:b7:b3:bf:8c:b2:c9:
49:d7:9b:cd:2d:d6:01:26:d9:35:fc:0a:cb:06:3e:
51:37:a6:25:a8:e8:c2:7c:54:9e:c6:45:54:a8:eb:
4d:a4:64:e5:20:9f:13:89:71:88:1d:8a:ee:fc:ad:
49:46:f5:40:93:e3:53:33:39:fb:39:15:7d:7d:3a:
c9:8b:b6:4a:80:46:3a:0b:e5:f2:61:a5:07:74:66:
81:56:2c:c8:9f:39:bb:13:bd:00:55:c0:9d:1d:d4:
81:4c:3a:b7:09:35:e8:a4:49:c7:e3:10:38:cd:72:
ef:8f:22:45:2d:8a:69:ee:bc:1d:9f:ab:8f:40:f8:
e9:95:a0:80:6e:a6:50:ee:2d:2b:64:5a:5d:f8:c4:
8c:9d:4b:d7:29:43:f3:a1:d0:54:41:c1:0f:aa:2f:
f9:a0:f0:c6:0a:95:a0:79:7a:e4:10:51:73:ae:00:
25:4f:7b:2c:41:82:35:7b:d2:97:e2:48:2d:84:8d:
c4:a3:46:49:05:87:47:c8:e2:1c:36:5f:4e:11:c7:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:F4:68:F4:B5:10:BA:2B:C2:D0:2E:35:92:53:28:E5:8B:55:D0
X509v3 Authority Key Identifier:
keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:aa:34:28:d4:db:95:0d:11:9c:6b:23:05:84:58:52:90:b4:
4f:5e:7b:8e:12:a2:df:19:96:7f:53:a1:b2:0d:5d:63:d0:e8:
ad:89:7f:b9:0e:61:eb:36:12:f7:99:bc:c8:5c:19:b8:8e:16:
36:b4:04:a9:5a:3b:cd:2c:4f:a2:a0:c3:8a:67:b3:28:9b:08:
db:f7:38:83:c8:cc:fa:a2:58:8e:b9:8e:1b:5e:c0:6b:51:6d:
e6:9a:38:49:32:5b:9f:a3:69:f1:36:16:b3:59:02:5a:a3:17:
d1:15:9d:db:28:8f:85:2c:ba:aa:fc:b3:15:11:db:a6:04:08:
53:09:e7:8a:5a:ec:92:b5:23:6c:47:fc:2e:ce:0e:77:4c:e7:
3b:7d:81:d0:c9:4f:4f:ba:e3:df:33:e2:d9:26:5b:f9:52:50:
0a:b5:a3:76:0d:e9:9a:1d:c1:6d:dc:c1:f7:12:d7:fd:bb:8b:
04:cf:bb:1b:16:04:e3:24:b1:24:2f:25:9a:25:80:1f:17:90:
8f:e2:bb:75:52:f7:6a:7a:ae:67:fd:df:9f:2b:1f:19:1c:15:
3b:99:9a:22:de:e1:3e:7d:b8:bb:b8:aa:c8:17:a8:0e:b5:4d:
84:0e:a8:0e:66:61:a2:b3:97:04:51:b1:b9:5f:8a:58:4b:85:
70:32:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:11 2025 by rpki-client