Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: FFIkl606Uv+xD/xS/uQhcqdpBcUcn+MTyCqiqfNmofA=
Subject key identifier: 6B:9C:2E:28:64:DD:73:60:76:AF:F4:6C:2E:1C:33:C6:CA:B6:0B:AF
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 0196BFDC89E3045F537742875FB4E89BBDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 151F
Signing time: Sun 11 May 2025 15:00:23 +0000
Manifest this update: Sun 11 May 2025 15:00:23 +0000
Manifest next update: Mon 12 May 2025 15:00:23 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: aYOPKC9K+RPoEknnT1KoLtPhBAJFsU5ZOOMqkszCaRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:89:e3:04:5f:53:77:42:87:5f:b4:e8:9b:bd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: May 11 15:00:23 2025 GMT
Not After : May 12 15:00:23 2025 GMT
Subject: CN=6b9c2e2864dd736076aff46c2e1c33c6cab60baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:65:4a:fa:c9:c8:2a:e2:84:49:e2:a7:a1:5a:
be:01:fd:2e:96:4e:79:a5:e1:c2:11:c0:e8:d7:a5:
d2:a4:e5:46:07:2a:72:00:60:f4:00:88:38:b2:f5:
51:3d:45:51:26:81:cf:26:b8:c8:4e:19:6e:fc:6c:
5b:38:d1:54:cc:c0:46:53:80:9c:17:45:e1:8d:af:
e6:57:51:86:58:43:58:34:ec:75:9b:1b:4c:63:49:
72:81:ad:e0:68:57:f8:08:75:54:4c:92:d5:d2:f7:
9c:5c:a6:af:a3:b9:7f:00:7b:fb:2c:1d:9a:6f:e2:
e9:ac:be:10:14:22:61:7a:d3:4f:13:6e:50:8d:8e:
a8:44:60:ed:28:87:51:53:ad:51:46:01:a9:b4:83:
d8:29:89:66:fb:1a:b7:1a:41:7d:76:5a:2a:d4:33:
88:a5:b7:36:a5:9d:9d:14:11:45:57:20:c7:ee:ce:
89:87:5d:a4:55:1a:c5:02:1c:50:d3:df:2d:94:db:
cf:02:33:0b:93:2b:a4:97:be:b4:72:45:f9:68:86:
31:2c:d3:49:15:36:b0:01:6c:e3:bc:86:35:e1:76:
8b:f7:16:37:e4:78:fe:09:80:50:4d:8b:00:ff:98:
20:76:a9:85:eb:09:b3:32:1a:35:63:02:c0:43:0e:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9C:2E:28:64:DD:73:60:76:AF:F4:6C:2E:1C:33:C6:CA:B6:0B:AF
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e9:f0:d5:9a:10:f2:cf:49:06:c5:e0:d6:b9:23:9a:94:b4:
ae:1d:a1:ee:18:f4:30:ca:a6:5d:70:f0:1e:b6:45:80:ce:89:
79:17:8f:38:1e:30:c8:bd:02:f2:ca:2a:90:d3:52:9a:bd:81:
bb:8f:69:90:67:7c:32:b0:73:44:df:7a:87:ea:1d:bb:8d:06:
cf:c8:29:26:f1:31:0f:70:60:57:a6:2e:f9:25:f8:56:31:26:
d4:e9:47:9c:34:f2:d3:68:89:df:5d:81:ff:87:03:a2:44:69:
97:f0:6e:a8:d1:34:50:5e:62:22:8b:fb:21:59:2b:e9:2b:4a:
e9:87:0e:6f:62:2a:68:1d:ab:a0:96:5c:af:db:21:51:27:68:
15:2f:94:44:be:26:91:17:96:c1:59:b9:2c:f9:57:43:8b:75:
ef:41:19:c0:13:23:8e:fc:d2:32:52:2f:d3:ac:ca:59:a2:fa:
6a:d6:15:69:29:49:1b:05:da:b2:2b:56:d5:99:8f:c8:6a:4d:
19:ab:e3:ec:8d:78:8d:1e:9d:a1:a7:cb:ac:34:5c:e8:13:55:
a1:39:4a:a9:e1:9f:d2:53:c9:cd:0d:5f:c9:57:cc:ea:7d:95:
82:b6:12:7a:5c:d4:97:27:60:d0:95:a1:cd:50:f9:12:f1:76:
74:f2:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:42:59 2025 by rpki-client