Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: CG04xg9vGoqBB1dVn/vCD85kNJBghIBhKGjX/kvMPco=
Subject key identifier: C4:58:60:D2:6F:7C:2E:F9:BA:9F:36:2E:2D:C5:23:B2:4E:E1:11:72
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 0196B5C70B5E4F42062A5B79880661EC7E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 14BF
Signing time: Fri 09 May 2025 16:00:42 +0000
Manifest this update: Fri 09 May 2025 16:00:42 +0000
Manifest next update: Sat 10 May 2025 16:00:42 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: zw2odcOEjDg9zVcUS4N27kt6NBj3svX7uSkQSWcw+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:0b:5e:4f:42:06:2a:5b:79:88:06:61:ec:7e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: May 9 16:00:42 2025 GMT
Not After : May 10 16:00:42 2025 GMT
Subject: CN=c45860d26f7c2ef9ba9f362e2dc523b24ee11172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:2c:84:49:c1:c9:93:18:de:cd:f9:15:6b:
6b:5a:c3:ad:8e:d1:16:a2:15:12:3d:68:c6:bc:d6:
fa:91:d1:9d:8c:3d:1d:be:20:a2:a2:ae:35:eb:e9:
65:9f:e2:31:56:4c:bc:57:d8:8a:9c:0f:38:aa:1d:
2d:84:28:07:3e:8f:f6:ec:48:42:aa:3e:63:51:bf:
7a:4b:20:f7:84:e7:40:75:6e:b2:45:35:5b:fb:9c:
df:30:81:d6:c4:15:1b:ae:5c:f3:23:23:b0:ce:90:
7d:c2:fb:e7:af:88:0c:56:23:66:2f:05:9b:44:de:
47:79:59:74:6b:b7:cd:2e:6f:bd:4b:8c:51:b7:91:
29:24:12:78:46:72:50:57:a3:64:78:95:a1:47:ac:
d0:b9:7a:50:75:99:d0:b6:49:61:38:2a:ef:b7:aa:
fc:33:43:3a:26:80:57:bf:c9:45:c9:0c:5e:52:35:
a7:40:37:dc:a4:a4:ef:c5:d4:e1:e8:85:b1:e3:44:
0c:4c:ef:ed:f8:5a:11:67:0e:56:4b:ad:b6:e7:ed:
23:6c:84:9c:14:8d:81:5c:b8:45:76:7f:a4:07:45:
5c:16:59:f2:87:67:9a:77:89:1c:7a:c2:36:46:ff:
c6:94:2a:49:96:8d:cf:a2:f5:5b:00:e0:b2:eb:b2:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:60:D2:6F:7C:2E:F9:BA:9F:36:2E:2D:C5:23:B2:4E:E1:11:72
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:95:f4:df:8b:1c:78:7d:4b:39:f5:cc:11:09:cc:69:b5:6a:
28:da:bb:3f:7d:43:b6:d0:3b:b6:7d:c9:08:ba:c3:ca:87:af:
a2:0f:81:7c:6e:83:11:5f:9e:0f:67:16:8c:40:46:cf:97:cf:
f5:58:55:fb:73:e6:a8:fa:d0:64:eb:05:4f:91:24:41:7c:2a:
0f:9f:94:b7:af:76:3d:70:ac:4e:05:d0:28:d2:8f:8f:8c:22:
bc:56:27:8d:e8:36:b7:bb:8c:25:0b:60:c1:24:bc:7f:6f:c7:
2e:b4:63:24:f8:fc:a2:f7:07:09:68:11:62:13:73:04:7e:ef:
ce:92:4b:a0:c4:45:b3:28:a6:4b:6b:fb:13:79:c0:d9:94:bb:
86:7f:3a:79:58:88:45:3b:58:52:b1:eb:9c:05:43:4c:c9:7c:
cd:56:89:6d:13:2c:80:6c:ff:8e:ed:df:82:87:24:d0:6c:ac:
2d:98:c6:93:cf:c2:48:e7:d0:7e:f6:fe:cf:2c:38:28:f7:16:
b7:0b:bf:ed:8f:61:93:98:d3:d6:34:eb:ab:5a:aa:d1:fb:3e:
e7:5e:34:11:80:07:b9:d0:76:17:66:a5:ab:6b:58:ea:d1:b9:
b3:89:2c:f0:ae:17:41:57:a3:e0:cf:5e:e0:56:94:a1:08:73:
ab:2d:27:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:11:22 2025 by rpki-client