Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: 3rB4mzucep10uSQXmdjD4LsSQRdfHd2qwxOYgGkjUsI=
Subject key identifier: E8:95:DD:AC:5F:05:3A:A9:BF:E6:CD:79:E5:05:D9:63:1B:EF:B3:89
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 01964FDAD98DE8F08DF37F7C5CEAD300732E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0989
Signing time: Sat 19 Apr 2025 21:01:04 +0000
Manifest this update: Sat 19 Apr 2025 21:01:04 +0000
Manifest next update: Sun 20 Apr 2025 21:01:04 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: OWv6D23jgqtldX25lW60l9YsGU1gffBnr5Z8YLugrMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:d9:8d:e8:f0:8d:f3:7f:7c:5c:ea:d3:00:73:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Apr 19 21:01:04 2025 GMT
Not After : Apr 20 21:01:04 2025 GMT
Subject: CN=e895ddac5f053aa9bfe6cd79e505d9631befb389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:52:41:16:c6:86:87:32:bc:d7:99:a4:9d:
b0:93:65:95:f4:e4:b3:65:e7:1b:8a:52:a9:dc:26:
64:25:a7:b0:fb:fe:7a:06:e4:b1:c1:d8:e8:7f:4c:
df:bd:8c:d8:93:51:f8:60:92:04:30:e2:67:90:15:
28:86:fe:b1:69:33:5f:37:2a:73:91:29:fa:2b:ba:
7c:da:94:00:d5:34:85:70:81:da:fa:09:02:73:19:
42:ba:17:5d:32:3e:a4:31:d4:9b:ef:87:97:ea:ed:
d4:80:51:6d:2f:db:93:ee:91:82:0a:d3:42:e3:af:
5a:ee:a1:05:45:31:03:96:2b:6d:5b:5b:22:75:b5:
74:aa:ce:5c:39:23:d4:a8:8c:72:b3:45:53:b2:95:
6d:8c:d5:78:85:52:3f:d3:8a:c1:ba:c7:9a:47:74:
9c:7e:34:fc:91:cd:cc:68:9e:df:da:3e:8f:36:89:
eb:98:dd:ee:3b:59:f6:62:70:a1:ce:e2:1d:c0:fa:
af:b5:07:a9:18:fc:37:76:fb:8f:7d:67:24:e4:59:
a7:b7:e3:79:f9:e3:7f:d2:26:20:5e:df:13:2e:a9:
9a:71:2b:84:c3:5d:40:2b:c3:37:d1:fb:4e:b9:c5:
e0:b8:3a:54:d5:75:d0:25:f1:b2:a0:51:c1:72:1b:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:95:DD:AC:5F:05:3A:A9:BF:E6:CD:79:E5:05:D9:63:1B:EF:B3:89
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:92:d3:92:dd:70:d1:89:68:b9:c7:44:04:56:ae:62:89:3a:
9e:67:7c:93:c7:e6:53:e2:df:36:ec:0c:80:01:43:0b:92:62:
fc:16:2e:74:02:45:4d:76:af:8e:ca:6a:ae:ee:f5:eb:4a:48:
8f:e8:15:50:cd:91:a1:09:8f:fe:6e:00:1f:30:ed:0c:bb:07:
23:a3:2c:29:1e:a3:83:38:6e:20:82:25:ba:b2:1d:0e:b1:b1:
60:3f:f9:e2:8b:40:b8:53:25:6f:f0:d3:0a:f4:97:f5:c1:d4:
47:b0:be:a4:80:cf:6c:5a:b2:0f:c2:15:9a:b5:79:67:a8:ac:
3c:ae:a0:d9:c9:66:64:28:b2:0d:d1:b5:23:90:19:6f:b5:56:
0d:f9:a1:23:5f:13:af:9e:f3:b1:c9:07:d8:ca:ff:ac:a2:3f:
69:2f:d3:05:5b:0a:bb:55:a2:67:69:70:17:59:b2:62:b1:d9:
5e:5e:4e:58:92:85:0f:3a:40:34:4a:c6:1b:1c:6c:97:79:86:
52:b1:5f:0e:ed:b4:0d:cc:b6:b3:d1:45:f2:af:7d:2b:ce:44:
90:bb:af:36:51:31:87:f4:0c:e8:73:c7:33:33:30:5b:7a:50:
47:3c:80:29:7c:58:28:9d:80:d9:ad:91:74:3e:46:92:83:53:
c7:70:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:34:39 2025 by rpki-client