Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
File: 1-75t-tXrSOmB5A0KS8VatHGuXdk.mft (raw, json)
Hash identifier: hvg8LDh+borSqWmCFcxMIprmjdS95J8AAfOAvp+XO7Q=
Subject key identifier: 5A:BF:99:51:27:8B:63:50:B0:B7:05:3A:44:B1:3F:0D:96:49:0B:BC
Authority key identifier: FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
Certificate issuer: /CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Certificate serial: 01963F54BEC012267F2AB5A89CBBC98ACFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
Manifest number: 077A
Signing time: Wed 16 Apr 2025 16:00:40 +0000
Manifest this update: Wed 16 Apr 2025 16:00:40 +0000
Manifest next update: Thu 17 Apr 2025 16:00:40 +0000
Files and hashes: 1: 1-75t-tXrSOmB5A0KS8VatHGuXdk.crl (hash: yTWBgoORm/bUU39AcaJsSropEVpGpRcGrLJE6kslGrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:be:c0:12:26:7f:2a:b5:a8:9c:bb:c9:8a:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Validity
Not Before: Apr 16 16:00:40 2025 GMT
Not After : Apr 17 16:00:40 2025 GMT
Subject: CN=5abf9951278b6350b0b7053a44b13f0d96490bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:bd:f7:c8:3c:4f:6b:8a:b4:b4:d4:5d:ba:
a3:3b:11:21:27:13:51:1d:81:e9:c1:1c:b2:8a:63:
3f:fe:ac:23:9a:5b:1b:4f:4e:f2:84:37:92:c0:e0:
da:d6:69:86:6c:68:9f:cc:59:b7:db:ff:34:74:b0:
17:44:f1:70:b7:22:a5:53:5a:ea:3d:38:72:bc:5e:
d3:aa:12:29:af:53:7c:de:d0:a5:12:64:41:c6:76:
66:61:05:bd:32:79:a6:31:ae:18:8f:0c:ab:f5:8d:
a1:5f:56:2a:0a:cf:1c:1a:01:7c:94:af:b1:63:81:
9c:73:79:f0:80:d2:a8:56:43:24:a7:86:fb:81:b1:
d2:27:0a:a6:95:13:12:6d:90:0c:7b:58:8d:64:1e:
d0:26:83:63:28:63:ac:e3:f9:90:38:f2:1e:03:a5:
66:90:9c:61:80:1a:0e:77:d2:0c:38:6d:a1:99:4b:
64:09:88:4c:f9:7b:ba:2b:60:da:cf:cf:9e:ac:3c:
67:0e:8e:db:6b:24:51:1b:6b:2a:f4:68:e9:31:9b:
b1:59:98:ab:e0:8a:d4:45:60:f2:4f:2c:c2:6b:57:
c3:29:09:a3:b6:a9:2b:05:08:e8:14:e1:48:59:e8:
4e:89:fb:71:04:1d:33:a9:8a:fa:f0:22:9c:03:49:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:99:51:27:8B:63:50:B0:B7:05:3A:44:B1:3F:0D:96:49:0B:BC
X509v3 Authority Key Identifier:
keyid:FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:8a:fc:a1:66:52:cc:a3:88:1b:af:8a:8d:03:c3:5d:d3:
67:e2:38:45:0f:da:d1:29:f4:fb:d2:eb:ca:8f:87:3f:b5:8b:
0b:7e:97:9e:9b:03:9f:6f:6c:85:64:17:33:8b:e5:d5:5b:0f:
6c:d8:f4:4e:b5:5d:46:a2:77:68:6b:f3:f8:a2:5f:c8:b9:e0:
de:8d:57:72:40:be:a6:a3:06:11:3f:ec:1d:5a:66:c8:21:8f:
32:c8:6c:49:d5:7d:b8:3d:9d:60:d5:ba:ae:58:ba:18:05:36:
96:62:1c:72:2c:69:f0:4f:43:91:c5:a6:ce:2b:d0:8a:af:9f:
7c:82:d8:a3:16:09:71:71:9e:d9:ad:47:fe:bf:8c:54:dc:fa:
b8:f9:45:8c:45:db:1b:eb:fe:e3:04:15:df:92:97:05:24:4f:
80:f6:ad:de:c8:a2:0c:65:c3:d8:ea:99:81:1d:1e:4f:cd:8d:
8f:94:d0:01:a6:3a:06:d5:d9:78:e0:a8:80:44:8c:43:a8:3e:
bb:be:60:a8:c4:73:ac:1d:c7:81:50:6a:70:a9:48:fd:20:03:
92:72:f9:fa:63:27:f9:1b:0c:e7:93:17:f3:48:bc:91:36:01:
65:ca:93:fd:65:5c:07:ce:1f:ce:f5:69:b9:0b:ad:7e:ef:8b:
83:e9:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:59 2025 by rpki-client