Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: 2TuB0ol0cDWI15WxR2l/VrFytdp6MVnHSB1GcXgjamc=
Subject key identifier: DE:A7:2F:56:08:AD:AF:D1:32:2F:4C:BF:AD:A5:7E:C4:5D:D0:DD:F1
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 0196B3D8AB8A514C57B2E83C4911AD8E34B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 0233
Signing time: Fri 09 May 2025 07:00:43 +0000
Manifest this update: Fri 09 May 2025 07:00:43 +0000
Manifest next update: Sat 10 May 2025 07:00:43 +0000
Files and hashes: 1: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: OxJpDfhbcee1TmOD50isD17h1HpVyc3i5hAzrHf7ZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:ab:8a:51:4c:57:b2:e8:3c:49:11:ad:8e:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: May 9 07:00:43 2025 GMT
Not After : May 10 07:00:43 2025 GMT
Subject: CN=dea72f5608adafd1322f4cbfada57ec45dd0ddf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:ab:ca:23:b3:f6:64:5c:a2:20:c7:9a:18:
81:76:b8:da:60:e1:72:ad:92:e4:b0:87:7c:fc:19:
59:4e:73:43:ed:7d:96:48:9c:b4:bb:0a:2e:d5:1e:
e6:60:02:9f:7f:fb:ce:65:24:6e:b1:da:01:e3:04:
d7:fc:07:32:41:3a:81:94:e1:87:ee:93:9c:52:e5:
c6:39:66:fe:f3:09:27:60:e4:3c:22:66:cf:76:58:
44:72:d2:01:2b:48:a0:20:df:16:b3:8a:42:c1:dc:
3c:c8:79:a8:12:73:a8:ee:a3:92:36:19:dc:0e:95:
37:28:ec:a6:1d:68:18:1e:3f:e6:98:b0:cc:d7:db:
c7:df:56:f1:26:99:d9:a2:86:66:a6:25:e6:dc:c8:
6c:c7:db:7f:d0:f8:b7:8c:07:e9:a7:5b:c1:6e:1e:
4d:7a:67:11:8d:83:8c:7a:e0:2d:0d:4a:90:fc:ac:
08:d7:c4:4a:50:f0:49:b5:2f:cc:7d:c5:bf:d0:30:
fa:9b:72:c8:bd:ab:18:88:e4:a6:31:74:9e:b5:f6:
72:7e:be:06:3e:50:7b:d0:ce:be:0c:2e:87:62:0d:
aa:5c:62:66:7a:e7:fc:84:7e:15:02:7b:8b:45:e9:
e0:0d:d2:d7:79:77:c4:d2:05:54:93:2d:9c:11:00:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A7:2F:56:08:AD:AF:D1:32:2F:4C:BF:AD:A5:7E:C4:5D:D0:DD:F1
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:bc:95:23:bf:a7:1d:35:2e:04:cc:cc:41:e0:e1:e5:54:
eb:f9:84:a4:fc:14:b2:ea:23:cf:4a:ec:a4:19:d3:46:a5:2e:
ab:45:a8:43:31:6d:57:e0:50:8f:91:c1:f8:90:cb:7f:d1:87:
c7:7c:4a:0b:0a:3f:07:8d:97:6d:5f:80:44:0a:cb:89:27:7b:
62:b7:5a:23:70:fc:7c:37:5e:73:37:fe:52:46:d3:a6:08:38:
c6:de:dd:a7:05:a1:dd:33:68:a0:45:10:dc:ca:d8:7d:b2:56:
39:e9:c3:06:9f:29:51:ce:ac:a9:82:f1:0b:15:e9:33:f5:04:
01:1e:3c:c7:a0:03:df:c9:31:47:0a:f1:c2:72:b8:0f:c5:9b:
71:ae:1a:d7:ee:d8:1f:f3:30:f8:c5:bd:eb:29:b0:b9:7c:c6:
7c:bd:7e:80:2e:5b:d0:47:ed:be:20:1f:8e:af:19:24:9c:4e:
f8:c3:70:08:02:74:a9:92:90:0b:a8:bf:63:ea:e0:0f:94:64:
a8:93:f8:6f:a6:20:cd:d0:f6:13:48:17:61:d7:17:e4:f6:40:
c0:56:4d:a3:77:2c:22:c1:c8:0c:ee:66:56:78:ed:52:16:85:
e4:21:5d:9d:58:c1:1a:cb:5a:07:44:2e:10:1d:4b:2f:9d:20:
f1:1e:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:23:31 2025 by rpki-client