Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: 53ngCpSmC1s9Gd5EjICwzxBW/zt8Nhs94s9/rnDorTc=
Subject key identifier: C0:6B:0C:F9:5C:47:42:1C:FB:92:3D:CC:1D:F6:15:B1:91:43:08:56
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 01964D7DDC7315E51B85B0EA62240971E784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0896
Signing time: Sat 19 Apr 2025 10:00:16 +0000
Manifest this update: Sat 19 Apr 2025 10:00:16 +0000
Manifest next update: Sun 20 Apr 2025 10:00:16 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: yM3DFBy78Ec8q44vnD55m7rHppnxVBPK9NudU6BQwPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:dc:73:15:e5:1b:85:b0:ea:62:24:09:71:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Apr 19 10:00:16 2025 GMT
Not After : Apr 20 10:00:16 2025 GMT
Subject: CN=c06b0cf95c47421cfb923dcc1df615b191430856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:e6:42:cf:fe:60:87:2e:b3:99:65:f8:2f:
bb:b5:fe:da:8e:7e:ce:7f:8d:19:0d:28:c0:34:6e:
08:a8:74:89:90:9b:bb:7e:6c:c7:04:7d:a3:c5:8a:
cf:88:20:e4:c8:e9:aa:01:0a:07:55:fa:79:68:66:
ec:05:70:65:dd:2b:47:a6:d2:e0:53:3c:4f:59:9c:
83:e5:f7:36:fa:17:15:34:f6:d7:e6:13:3b:8b:e3:
7e:58:59:bd:ba:38:19:44:7c:dc:7e:26:50:53:94:
78:18:d8:88:b8:d0:50:7c:1a:e9:b3:15:a3:0d:e5:
a1:07:23:dc:03:2f:8c:ef:ae:84:83:f3:d4:17:2f:
49:10:3e:a7:0e:d5:f1:f4:73:ab:ce:bb:b4:d0:b2:
e4:df:ec:da:8b:92:6b:ff:ec:f1:f7:67:cd:32:7a:
ac:9d:82:f1:a4:00:2b:d9:7d:67:b8:94:d2:90:fb:
fa:c2:f8:2d:ca:3a:34:9e:f9:39:a9:f6:bb:63:de:
f2:ad:27:90:a0:c8:73:65:7c:58:57:48:16:b1:21:
7e:58:ae:6d:ec:ed:df:8e:1e:f6:50:a3:7d:c7:b7:
c2:c6:3e:d4:85:1f:b4:de:53:79:74:3f:69:ac:df:
25:15:f2:26:a0:dd:fa:d7:f2:4e:eb:91:13:c1:13:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6B:0C:F9:5C:47:42:1C:FB:92:3D:CC:1D:F6:15:B1:91:43:08:56
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ae:da:7c:c2:47:73:05:4f:45:fd:30:90:36:ec:c4:0b:23:
66:5f:23:a6:2f:5e:16:01:56:83:86:5c:80:5a:c0:0d:99:a7:
ea:23:ed:a6:cc:45:0c:3d:f0:24:a2:ba:83:b3:2e:d0:b4:a9:
0e:d1:f9:3d:4c:01:0b:3a:c5:42:a8:b9:57:e8:ff:c2:e1:f8:
ef:d7:e2:29:6f:94:4a:19:23:dd:80:47:44:75:f8:d7:c6:90:
c5:89:55:32:86:99:1a:54:58:31:cc:93:b2:21:b2:7b:ab:9e:
d4:c2:ed:9f:3f:46:50:4f:bd:2f:63:17:b8:cd:42:10:69:45:
e1:6e:b9:c4:ee:f0:3f:70:94:86:47:57:59:06:b1:4a:f3:78:
57:e7:32:ed:87:72:d1:45:6b:58:83:46:eb:08:6d:b9:e4:25:
2f:ad:23:b3:b5:77:31:c9:fd:39:ce:5e:4b:3e:f0:7c:6a:0a:
66:f5:e2:87:92:09:48:57:fe:ad:b0:47:b2:ff:67:7d:10:63:
4c:ea:40:94:da:9a:e1:0e:98:7f:63:3c:33:17:7a:8a:b1:bf:
2e:53:6d:aa:2a:67:d0:7f:c9:37:b5:c2:72:1a:8b:1b:96:8c:
f4:6f:d4:cb:5e:26:4d:33:7f:a4:6b:44:6f:40:fb:71:c8:58:
5f:6b:d5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:18 2025 by rpki-client