Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: XxAzV0S4G2175DOWGLD1EBSwH78EQPoHOIVhZf7+x3Y=
Subject key identifier: CA:97:A6:95:FB:6A:A6:A8:01:D0:04:37:0D:26:2D:AC:E8:A0:83:45
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 019652A4A43D89A14034E745E66674AC28E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 116F
Signing time: Sun 20 Apr 2025 10:00:43 +0000
Manifest this update: Sun 20 Apr 2025 10:00:43 +0000
Manifest next update: Mon 21 Apr 2025 10:00:43 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: 7k2pcv8YZsUPUiLqhAlVjvELGUMQobnOXZpoHrcmWHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:a4:3d:89:a1:40:34:e7:45:e6:66:74:ac:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Apr 20 10:00:43 2025 GMT
Not After : Apr 21 10:00:43 2025 GMT
Subject: CN=ca97a695fb6aa6a801d004370d262dace8a08345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:16:9e:06:c1:04:a7:3e:d4:0b:c8:d6:ec:
67:d1:5c:8e:eb:76:bf:f4:27:0a:3f:c2:12:a4:83:
61:fe:6d:fe:d0:7b:bd:d0:2e:37:97:8a:2d:9d:67:
53:b4:58:71:ef:12:4c:8e:a7:ee:9c:d9:36:a7:6c:
16:c0:ff:85:55:50:c1:24:81:71:33:55:68:6e:3a:
17:22:cb:d6:9d:83:7f:a2:90:60:63:17:3f:4a:b3:
1c:c5:c1:43:41:25:2c:b4:ed:44:cf:9c:0b:5a:cc:
88:6f:ea:95:35:ff:88:71:70:f0:39:a5:a4:52:e6:
bf:45:75:83:3a:4a:e6:90:c9:3d:f2:dd:0c:c5:c9:
0b:39:9f:a1:b1:d3:cb:6d:6f:c7:7e:2b:39:c2:a9:
59:87:68:11:55:94:4b:dc:20:11:bc:42:3a:d1:a0:
dd:16:c2:37:dc:ff:bb:8c:0b:a4:c0:bc:1a:88:00:
72:0b:50:fd:43:f3:63:b3:b4:a2:8e:dc:c8:9d:48:
11:4f:91:74:30:eb:f8:bd:a0:d4:55:b4:8a:b6:6a:
d8:7d:05:08:6d:1c:95:4f:63:aa:74:eb:58:15:8e:
3c:8c:af:d5:33:82:41:ad:f5:ba:5b:c6:43:a6:6b:
63:da:54:07:9c:7e:1a:02:de:86:9e:a8:1a:ee:91:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:A6:95:FB:6A:A6:A8:01:D0:04:37:0D:26:2D:AC:E8:A0:83:45
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e4:4c:74:6b:01:4f:fa:1b:4c:a3:e2:1a:a2:09:7f:16:07:
bc:4c:73:8a:d9:ac:0a:35:d4:7d:a3:f5:4b:e1:61:bd:94:ab:
ed:16:c0:2c:87:fc:4a:53:85:91:7f:d1:f6:66:4e:34:7d:2a:
b4:08:e7:cb:75:81:84:f4:2f:57:d0:bd:73:14:98:e3:af:c0:
05:0a:bc:d7:b2:4a:fa:a6:29:e2:19:65:7b:a5:7f:2e:29:ca:
27:e8:1c:8c:16:92:0f:13:ec:1c:25:58:85:96:08:aa:53:04:
cc:45:84:4a:f1:f5:ed:cb:ba:e9:26:0e:59:87:ea:94:82:70:
aa:3c:f1:64:4e:f8:25:dc:eb:3a:09:d1:91:c2:e2:c6:d1:3d:
84:50:ff:bc:fb:13:48:61:2c:ea:6a:32:6c:5c:f8:a5:02:a5:
4f:a6:17:ee:62:fb:b9:ea:93:b8:8c:33:bf:17:f2:36:0c:ad:
77:a7:cb:e2:10:04:14:85:cb:69:36:0c:a0:5e:4e:18:2f:81:
33:9d:70:c2:df:d9:5f:0b:06:d0:b4:ee:4d:aa:7a:4d:ca:28:
db:9d:9c:1e:b6:89:5b:95:86:0a:fa:db:69:d7:37:6e:4b:a9:
a1:69:0f:62:00:a3:28:8f:83:1a:44:9c:88:33:df:7e:f8:a7:
e0:de:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:06 2025 by rpki-client