Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: zomDGKtY88zZ59V54bHsCCuYSQ3VwAAJQ9tBdlRY/Ro=
Subject key identifier: 55:70:19:E5:73:AC:8F:6C:BA:D4:2C:ED:89:1E:3D:C0:77:0A:D7:71
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 0196BF6F4B32BE1F27EAF312D5D3FB4FFD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 0CC2
Signing time: Sun 11 May 2025 13:01:04 +0000
Manifest this update: Sun 11 May 2025 13:01:04 +0000
Manifest next update: Mon 12 May 2025 13:01:04 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: O3ec95/8MszbbEJ4hh+efgSKUFeJoBKBlKtL2d2+iPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:4b:32:be:1f:27:ea:f3:12:d5:d3:fb:4f:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: May 11 13:01:04 2025 GMT
Not After : May 12 13:01:04 2025 GMT
Subject: CN=557019e573ac8f6cbad42ced891e3dc0770ad771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:a4:ea:cf:96:50:97:68:3c:2b:6f:30:6e:
e0:3d:17:ec:1f:8a:9e:a0:d5:ec:82:1c:45:56:4a:
55:ef:6c:2b:e6:36:6e:43:c4:ce:d6:5a:af:bd:88:
48:a1:7b:f5:21:3e:a2:a3:f7:e6:16:5b:5a:80:ad:
d2:0a:ed:9b:75:ca:63:23:7d:a0:6f:2a:e1:c4:65:
86:72:4e:43:62:ad:20:6a:70:0a:51:48:e8:b4:98:
c8:5e:38:9d:7d:36:de:70:29:82:1c:f8:8e:95:ff:
3c:85:eb:4a:5f:c0:6a:9c:0f:1b:68:a9:28:68:26:
e1:3d:a4:6d:03:be:d2:55:39:44:f8:b5:f6:f2:49:
44:12:50:92:a4:55:b3:0c:4d:10:c2:f1:1f:ea:7d:
75:38:d2:5f:74:8e:6f:6e:55:98:9f:fd:17:f7:6b:
e8:ff:b4:5b:6f:8b:36:5b:dd:4a:46:d6:03:ac:26:
89:3b:cc:10:69:7a:9f:fd:f5:67:13:84:a9:d2:df:
3a:0f:5a:d8:49:62:bf:16:32:9a:32:1f:c5:df:dd:
9a:02:0b:e3:f8:5c:d0:d4:f8:45:01:d2:25:80:30:
79:43:74:eb:2a:31:a5:2d:e9:18:68:27:7c:9b:59:
96:0e:f5:29:aa:e3:a6:e4:17:7d:98:f7:48:ed:7a:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:70:19:E5:73:AC:8F:6C:BA:D4:2C:ED:89:1E:3D:C0:77:0A:D7:71
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:6d:a1:70:14:c1:35:5e:b2:80:37:dd:c0:d4:e0:a4:02:
45:10:05:72:f0:55:f4:4a:31:c2:92:20:45:ea:3b:4b:cd:de:
01:e1:65:e0:93:4e:29:06:78:fc:01:24:e7:c8:44:be:d8:f5:
68:88:0e:fd:05:e6:bc:11:10:81:13:d7:e2:1f:88:47:0d:f0:
79:b8:18:ed:cd:ad:14:84:ed:e1:06:c5:89:92:24:de:28:da:
dd:2e:5f:b0:cb:97:28:0b:38:02:c4:5d:6f:59:aa:76:71:f1:
e1:0d:65:fa:53:67:14:ef:83:96:8f:96:7a:77:fd:fc:16:c3:
28:1a:2c:e9:12:3e:9d:f5:6d:9a:47:26:43:16:a0:fe:75:d3:
2b:91:bb:78:c0:be:e3:e5:25:bd:d2:51:71:56:7d:3e:75:b4:
69:ef:37:d3:ac:65:f9:d2:de:de:ec:b4:cb:d9:7d:bd:2b:1f:
72:bd:fc:a7:d2:57:06:ff:9c:de:48:c5:60:1a:5a:3d:43:08:
30:8b:8b:64:e2:fa:a7:66:ca:b7:96:c3:76:94:d6:e0:3c:64:
cc:6a:f9:2d:08:17:5f:0f:30:85:de:4a:8a:3b:89:67:7f:4a:
10:0a:a9:5c:c2:7a:60:07:d8:fd:cc:ea:90:fc:4c:2b:c5:a0:
fe:b5:4d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:02:52 2025 by rpki-client