Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File: FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier: QcnRbrrQOIx8V1xVh+OWlMePnYhId3AgPhlzfpiYEIY=
Subject key identifier: 9E:28:E5:18:4A:5C:DC:83:80:0E:43:AC:45:DC:F3:4C:77:60:C7:EF
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer: /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial: 019511A2DD5CE0AF0EAD58AC3D7296674EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number: 07B5
Signing time: Mon 17 Feb 2025 02:00:40 +0000
Manifest this update: Mon 17 Feb 2025 02:00:40 +0000
Manifest next update: Tue 18 Feb 2025 02:00:40 +0000
Files and hashes: 1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: 0e9mZMl+cBaLjBOX5IWzqbQ+LVcFO6fa+QkfxmxY2T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:dd:5c:e0:af:0e:ad:58:ac:3d:72:96:67:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Validity
Not Before: Feb 17 02:00:40 2025 GMT
Not After : Feb 18 02:00:40 2025 GMT
Subject: CN=9e28e5184a5cdc83800e43ac45dcf34c7760c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:62:f3:33:8d:68:12:71:a1:29:1a:42:cd:
96:75:de:05:61:33:4d:2c:8d:b8:7d:13:c6:17:5d:
1d:b9:b4:a1:08:6b:3e:b7:08:97:03:72:18:a7:d9:
ac:bb:50:85:92:4e:8e:63:87:c9:81:fd:ef:46:ed:
be:05:64:be:ff:5d:d0:01:b5:9f:b0:08:16:07:ff:
3e:ea:0c:eb:d0:01:78:77:f6:9f:85:ef:d6:3f:39:
2a:fe:88:80:00:18:5c:c6:9a:79:ef:c8:a4:b9:58:
5b:93:8b:10:2f:4b:6c:72:e3:be:b9:4c:5b:66:83:
86:c6:d3:80:3f:07:36:8d:a0:00:7b:64:5a:24:e5:
3d:a9:94:57:29:5a:e5:c2:6f:07:5e:9d:e3:46:fe:
ba:c2:35:d9:f6:98:f1:40:5c:96:6a:53:b4:07:e1:
90:1e:9d:f9:21:f5:af:3c:a3:79:94:ea:b8:07:0f:
39:68:c5:36:e4:fc:88:92:e6:1d:32:6f:dc:6c:ea:
af:08:13:ef:43:87:e5:6c:52:0b:32:4f:f7:58:a0:
3c:3e:e0:49:1a:c2:8a:ef:e9:4d:57:a1:16:85:03:
5e:7d:78:cd:bb:76:47:81:a0:e6:a9:cb:93:96:e3:
d0:d4:4c:34:fe:b1:7a:35:fc:ca:6b:27:7c:fc:72:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:E5:18:4A:5C:DC:83:80:0E:43:AC:45:DC:F3:4C:77:60:C7:EF
X509v3 Authority Key Identifier:
keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:31:78:37:37:07:52:68:2a:19:0d:91:9d:86:e2:67:72:62:
6a:fd:e5:82:c2:a3:8e:e5:13:05:2e:4b:ff:ea:00:7d:e0:5e:
8b:d6:03:9a:01:74:58:b9:2e:8e:c0:42:47:05:66:bc:1e:c1:
f2:8c:fb:de:27:fe:bb:93:78:2e:7f:50:18:15:f4:3e:0e:b1:
39:8e:d6:f0:38:3a:d3:5b:d0:33:8c:fc:02:0f:e1:8b:b3:2f:
e7:73:05:94:9c:e6:72:4e:9d:31:49:5d:d2:8f:c2:0d:0b:14:
d3:fa:7e:1a:05:7e:e6:69:f9:33:3f:10:46:82:bc:a1:be:95:
77:c3:68:ff:40:05:3a:ae:5f:21:95:20:58:0f:70:39:7d:5f:
88:79:f0:35:47:98:f5:66:d9:40:26:85:17:43:37:d3:22:13:
8e:50:fb:60:1f:2e:e2:dc:cf:41:c1:8a:a7:d6:42:2c:13:16:
f7:73:b0:01:10:fb:61:79:70:26:9b:7b:51:15:a1:80:24:09:
21:2d:da:c7:b0:cc:d4:72:bd:2e:56:b1:2a:f0:e9:6c:f3:8e:
a7:2c:f8:21:35:f7:70:e4:be:59:48:d9:eb:84:f4:ee:85:0c:
18:59:b2:7c:59:8d:34:e7:31:bc:32:a8:d5:f0:5e:1b:42:4d:
55:f2:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:13 2025 by rpki-client