Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: v29O02xTJ4HZaa//VRUJQPWq3L/Lr1tFx8Wbtir/Y+8=
Subject key identifier: 07:E5:6A:E7:95:E0:D7:E9:A0:8F:0B:CF:F0:7C:42:75:B2:62:42:F0
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 01964F6D6D1C5427229BD832911CDFF7D84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 0DB7
Signing time: Sat 19 Apr 2025 19:01:33 +0000
Manifest this update: Sat 19 Apr 2025 19:01:33 +0000
Manifest next update: Sun 20 Apr 2025 19:01:33 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: NhWKBrcTMtGjehW3zoddifoPWm5uO6QZHZDkHep7bqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:6d:1c:54:27:22:9b:d8:32:91:1c:df:f7:d8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Apr 19 19:01:33 2025 GMT
Not After : Apr 20 19:01:33 2025 GMT
Subject: CN=07e56ae795e0d7e9a08f0bcff07c4275b26242f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:27:02:66:2c:c3:3a:f8:47:d1:5c:38:b2:
4c:12:d8:f3:3c:14:1c:27:aa:7a:31:e3:62:57:58:
8e:b5:dc:62:1f:9d:44:34:8f:00:2a:2a:45:1d:80:
e5:a2:20:f1:45:b7:63:da:22:a2:70:45:36:6e:07:
f2:d8:7c:83:40:13:c2:33:4d:6e:d0:41:e4:c8:9b:
5f:4e:3f:c1:cd:77:04:79:6b:fb:42:52:1c:c6:ff:
a5:4b:1b:27:52:42:5c:17:85:4a:df:e2:49:c7:1f:
55:e6:e4:00:24:c2:f9:07:0e:fd:97:95:fc:ed:73:
a5:7b:f7:b1:5e:cf:7e:ea:d1:9c:0a:91:71:1e:69:
3f:87:b6:3a:91:51:4a:e0:3a:a6:5d:9e:1c:f0:3b:
8f:d8:db:dd:1e:08:05:74:3c:8f:00:16:ea:6b:4c:
23:eb:b3:e9:ae:4b:a7:cd:7d:7a:15:59:34:f4:5c:
bc:5e:e4:bd:65:40:07:e6:79:85:d1:5c:4b:38:5f:
10:e2:b7:df:c6:6f:6b:f3:cd:ef:fd:7c:ce:d7:43:
57:b8:1d:40:dc:1c:c3:b1:32:c1:b5:39:3c:31:df:
a6:4e:81:f9:60:4e:7d:8e:42:db:0d:7c:44:6d:8c:
f0:00:f7:e8:c0:30:2a:0c:d9:01:15:c8:4b:5d:b4:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:6A:E7:95:E0:D7:E9:A0:8F:0B:CF:F0:7C:42:75:B2:62:42:F0
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:4d:bf:5f:77:0b:f6:e2:b8:c8:68:5f:51:2a:0c:4c:30:
f6:50:ae:0d:77:5c:75:ee:db:8d:66:2c:09:ef:01:7f:12:51:
dc:71:6d:5e:06:a4:88:57:73:37:9d:ec:c9:aa:e0:8f:0e:f3:
7c:2a:11:d4:c5:f3:30:a4:c5:67:b2:81:f6:f3:64:ac:f6:f4:
36:44:bd:ee:f8:0a:52:dc:c9:9b:f6:f1:28:f9:44:82:72:9f:
f6:61:c0:f4:c7:1e:72:f6:c4:fd:12:45:5b:24:98:b1:26:d3:
65:0c:4d:3d:e7:14:86:9d:cf:2a:64:2b:77:21:51:5d:c6:cc:
21:5c:4c:70:55:a9:b9:9d:b6:13:e3:9d:8d:dd:a9:d1:60:f8:
7f:81:c0:2d:86:a5:d6:7e:6b:1e:38:f5:7d:37:2b:5e:16:05:
fe:80:5a:6a:c5:53:b8:db:64:df:c9:5f:d8:af:65:f1:4f:24:
9c:d8:9e:37:39:b9:2c:28:da:64:82:56:ef:4f:a2:bf:c4:b0:
e6:f4:a3:6b:4e:90:29:3b:50:58:71:a1:58:0d:1a:6f:4e:04:
1d:b0:10:0d:28:64:15:29:6b:bf:4f:7d:bc:81:02:14:3f:0f:
b3:e7:ca:f0:1f:80:b1:a2:44:c3:db:c5:a9:53:89:04:92:d9:
38:4f:4b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:43 2025 by rpki-client