Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: AIkgnU3EW7jJpHioEyt+qALBVZgKiUT02zMrHMZwPec=
Subject key identifier: 97:82:75:A9:B2:C8:CA:0A:30:94:9B:47:73:69:80:17:16:DF:01:1E
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 0196C04AEACDD55CDEB6B5CE0FA8AF366812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 0484
Signing time: Sun 11 May 2025 17:00:57 +0000
Manifest this update: Sun 11 May 2025 17:00:57 +0000
Manifest next update: Mon 12 May 2025 17:00:57 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: RbhOrzyCtAwAaRdcP6u4xrogqrNz2j6GK1acrGnDpRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:ea:cd:d5:5c:de:b6:b5:ce:0f:a8:af:36:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: May 11 17:00:57 2025 GMT
Not After : May 12 17:00:57 2025 GMT
Subject: CN=978275a9b2c8ca0a30949b477369801716df011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:c2:6f:b7:00:ac:c3:2c:4c:b2:51:43:3f:
59:a9:25:a0:c8:8c:55:d8:0d:5a:82:b0:43:67:09:
f2:1a:06:13:8a:3a:ec:87:ca:d7:22:3d:0f:b6:62:
6d:36:90:5d:71:c4:0c:f9:30:98:37:5c:26:d7:b0:
45:ff:57:bf:49:8d:cc:5c:09:d3:47:5e:bd:c5:90:
7f:a1:56:54:1a:a8:33:67:0f:a1:de:d3:7e:8a:01:
da:88:67:81:fe:fa:e4:7f:b8:b4:4d:49:9e:f2:71:
1c:37:00:d3:04:99:3d:80:ac:0f:4a:5a:8e:52:a8:
af:87:23:2a:c7:0e:2e:96:c2:a3:fb:6d:57:00:7e:
2c:46:3a:cd:d3:a3:36:10:36:27:94:7d:af:95:22:
9a:44:86:a9:dd:40:1c:a6:8c:cc:c9:12:c9:0a:3b:
ac:42:02:ee:9f:03:0a:b4:77:05:04:58:bf:37:39:
cc:ec:17:b6:7d:ec:e7:7d:df:db:a7:dd:06:7b:4d:
41:38:d6:43:82:e8:57:53:15:b0:7e:ed:95:a7:38:
9f:f8:5d:31:7e:60:a1:2c:66:aa:0e:ae:dc:8d:2d:
7d:1b:85:49:17:af:23:cd:05:18:03:25:35:1f:51:
8e:fa:e5:9e:72:f8:2e:52:bb:36:28:fb:69:ab:99:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:75:A9:B2:C8:CA:0A:30:94:9B:47:73:69:80:17:16:DF:01:1E
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:93:23:8f:36:2c:a8:e6:99:d0:ea:1f:e7:7b:b1:8b:1c:82:
50:56:43:65:ff:03:b1:7c:3c:b0:98:f6:f5:97:ff:be:62:b3:
a2:1e:64:3e:d0:bb:03:ae:9b:5d:31:a2:75:38:47:9c:e1:b0:
b7:11:a3:9e:2f:83:5c:5a:0c:41:53:f0:75:d4:18:64:5f:95:
76:92:e9:5e:4b:4f:86:e7:01:f6:6e:59:f6:ce:4a:00:7f:4a:
8f:6b:85:cb:0f:ac:e9:84:6e:dd:4d:0b:2d:80:ce:8c:8e:78:
c2:3e:26:80:81:14:0d:00:a2:e7:a3:d6:0b:ba:c4:77:8e:4c:
b2:5f:3e:91:88:26:20:04:41:55:a2:e4:4c:b4:5e:52:c2:da:
08:56:74:b3:54:d5:8f:20:41:39:bd:e4:fc:34:61:54:c5:8a:
cc:f7:e7:bf:48:c6:88:07:42:c5:ad:79:e4:50:4e:75:4d:4c:
e5:4a:6a:3b:0c:40:d3:c9:ba:1d:94:cf:be:bd:86:30:13:1b:
8c:7f:15:75:5f:f2:9d:3b:27:83:5b:b4:77:b8:ad:12:a6:d0:
8c:03:d9:37:0b:51:63:82:98:07:a3:15:46:f8:5c:0b:be:4f:
c6:95:29:cb:9f:67:a6:e6:40:bf:65:ce:cb:60:4f:8d:c9:a4:
29:68:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:12:28 2025 by rpki-client