Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier: pMM6jn/QVQtbKujAcWUL29bRv3Mytz0rRp9m4TcCr0I=
Subject key identifier: 87:A4:C6:01:69:F7:F8:48:E1:72:57:87:54:E9:B7:A2:18:73:D4:05
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial: 0196120E81B0257B351E4C2D0A7DB03B0B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number: 0969
Signing time: Mon 07 Apr 2025 21:01:02 +0000
Manifest this update: Mon 07 Apr 2025 21:01:02 +0000
Manifest next update: Tue 08 Apr 2025 21:01:02 +0000
Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: KtaSrQUBPgVCRNOtaZpi3E+05sfKKxEQBYon34NJLVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:81:b0:25:7b:35:1e:4c:2d:0a:7d:b0:3b:0b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Validity
Not Before: Apr 7 21:01:02 2025 GMT
Not After : Apr 8 21:01:02 2025 GMT
Subject: CN=87a4c60169f7f848e172578754e9b7a21873d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:3e:60:d8:db:13:ef:a0:80:36:5c:f4:d0:
8d:04:5d:6a:d9:2a:29:37:d9:dc:09:96:7c:d9:49:
67:cf:93:53:5d:e6:c1:6e:67:ff:a9:eb:1e:41:7f:
a4:fe:3a:d5:2b:e0:76:02:d1:5f:ef:c7:f0:98:b7:
f5:2f:d2:19:e3:28:f1:b2:b4:33:71:fe:f4:ae:4f:
9e:e9:ad:b3:ef:3d:a9:c4:6b:11:93:3d:61:34:28:
b7:76:5f:48:93:b3:70:0e:f1:ed:39:af:0b:7e:d6:
81:a5:0a:d6:c8:f8:28:f0:be:dc:75:0f:50:06:ba:
18:ae:83:d2:8a:3d:45:3f:2a:2a:34:6a:60:a4:d1:
0f:b1:62:57:3c:39:79:79:5d:bf:18:d9:e4:a7:99:
7d:ea:d7:dc:9f:4c:44:50:ec:d4:92:09:c5:a5:e1:
0b:b4:46:98:e1:11:cf:15:e2:1e:41:53:67:a9:e5:
2f:88:4a:61:7f:a5:ae:27:ea:da:df:bb:92:18:74:
89:29:4b:fa:65:7e:73:c4:98:13:55:90:09:a4:80:
6a:8a:2c:65:47:c6:a9:8e:2f:cf:1f:66:88:06:ac:
ef:fe:12:ea:5d:17:c3:d1:5d:77:d6:31:a3:cd:4b:
68:fc:91:11:7c:1f:4a:d4:43:08:44:41:7d:08:22:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:C6:01:69:F7:F8:48:E1:72:57:87:54:E9:B7:A2:18:73:D4:05
X509v3 Authority Key Identifier:
keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:33:71:2e:42:70:91:a6:2a:75:2c:e0:2b:82:6e:3e:d7:c6:
87:10:c3:40:3e:fe:45:df:ac:e7:68:c2:2c:79:58:0e:31:25:
94:0d:c3:f8:2f:4f:05:33:2f:4c:ff:d5:54:73:d1:b8:f6:7e:
83:28:2a:f8:09:ea:30:f6:8a:d9:c4:5a:21:04:ce:e8:4c:84:
88:36:84:95:38:6c:a4:bc:bc:2b:9a:99:ec:13:fe:1c:91:24:
66:11:e6:a9:cf:24:28:b0:b7:00:5d:5f:f2:25:b0:50:55:0c:
fd:e7:a8:cb:ce:19:10:3f:9b:dd:b3:7f:44:b5:9a:64:38:49:
72:94:8a:3f:b7:dd:15:79:54:7b:23:54:55:27:9e:e3:67:a1:
6c:4a:58:6c:11:12:d5:c4:04:93:80:a2:f1:ee:87:38:4f:06:
53:3f:fd:4f:fa:84:eb:1e:7f:e6:0a:bb:69:0e:ee:1d:4a:eb:
2f:0a:e9:95:7d:92:62:67:c7:a9:9d:01:ab:30:f2:62:96:a0:
8e:68:90:28:dd:6f:f0:ea:cd:e4:ca:93:0b:2a:f9:43:1e:4b:
d6:8c:08:1b:bc:95:82:a7:29:b4:c2:08:93:9c:b5:1c:04:63:
36:87:b5:71:88:ef:15:d5:12:c6:c3:3a:9f:a5:76:8f:b2:d7:
d4:3a:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:44:21 2025 by rpki-client