Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: vRoHfg3uCrIoLTDZAlUZXIalzPT9YnTiNjAeiSmVvA0=
Subject key identifier: EC:94:77:9B:7C:CF:ED:1D:A5:B4:30:63:11:EB:1B:76:C4:48:73:FD
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 0196C539E5514BF03D5E9D453CF10F5FD0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 08C8
Signing time: Mon 12 May 2025 16:00:27 +0000
Manifest this update: Mon 12 May 2025 16:00:27 +0000
Manifest next update: Tue 13 May 2025 16:00:27 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: RiGGW45zdYXoSBKKqKOFTDrixEnn4GuMUuTpxwbOPNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:e5:51:4b:f0:3d:5e:9d:45:3c:f1:0f:5f:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: May 12 16:00:27 2025 GMT
Not After : May 13 16:00:27 2025 GMT
Subject: CN=ec94779b7ccfed1da5b4306311eb1b76c44873fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:1e:6f:a8:57:22:10:10:ba:db:37:e5:f7:
86:7e:3c:62:20:67:4d:60:6b:76:ab:4e:36:d0:76:
61:c8:38:57:82:a1:ee:0c:7c:04:8b:2b:27:e7:5a:
cc:42:20:73:a5:10:89:0b:22:a8:a4:4c:e7:45:fd:
9b:1b:6d:06:bd:7b:71:01:b2:f8:0f:bc:af:02:4c:
48:37:b1:a6:41:9b:87:1b:ea:46:80:55:3f:9a:9a:
d4:ba:03:90:47:c0:68:5b:3d:ef:e1:04:d5:79:24:
12:d9:6d:04:3f:1b:4e:e6:af:52:a8:08:00:f9:f2:
a0:94:53:14:2b:65:2e:8b:9e:d0:8c:5e:bc:40:52:
9f:6b:e5:de:99:36:1e:a4:e6:f1:b1:02:69:38:cc:
d7:6f:27:4b:5d:ab:13:e8:1f:ef:15:84:62:9d:fd:
50:4e:1a:f5:3c:24:e2:98:53:9b:5c:95:ac:39:81:
5c:e2:84:0c:e3:36:4a:b2:5f:96:11:e6:b6:b1:61:
b5:06:5a:46:39:02:04:5e:e5:2b:fa:77:84:41:50:
7c:b0:a5:53:f4:e4:ef:69:ac:65:63:36:c2:e3:e0:
e3:5c:6b:ec:26:de:1e:f4:0f:f9:b6:39:a6:8a:09:
0a:a1:0e:1e:c7:ca:c2:1e:d6:e7:db:b6:ee:fd:2f:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:94:77:9B:7C:CF:ED:1D:A5:B4:30:63:11:EB:1B:76:C4:48:73:FD
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:4c:af:53:f2:a5:98:b3:87:6f:20:cc:6b:c7:5f:38:c7:
eb:75:10:b9:e6:51:ca:54:ed:dd:e1:98:20:d0:7e:5f:40:c4:
56:3b:47:cc:b7:fb:5f:fd:7b:ac:fc:08:6c:5d:62:a0:9c:31:
2b:c8:00:88:16:ed:b1:4e:47:22:d5:48:28:5b:e8:ce:65:21:
db:a9:bf:eb:a4:ff:ce:d8:83:d0:b2:79:c6:43:e8:4e:02:83:
b1:d1:59:4e:0a:12:5e:f4:db:05:21:7e:5f:d8:d3:b0:f7:b8:
2b:e6:e8:e1:64:ef:48:14:9d:97:4c:d6:4e:09:18:c0:9a:94:
42:f8:83:bb:f8:d2:cc:1b:d4:cd:ce:5c:34:7b:00:d4:24:a7:
00:78:9a:5f:c0:ae:26:c9:1f:8a:77:60:ee:04:74:9e:b9:6f:
87:ff:7c:01:1c:df:f3:4d:ac:46:b7:6e:0f:61:4b:b6:a2:3e:
c8:85:03:4f:d9:81:15:4e:e4:f6:26:c1:fa:3f:4e:38:c9:15:
ed:73:6a:2b:58:d3:9d:d1:1c:1a:24:0c:e2:b7:37:6b:40:6e:
5b:ed:c7:ac:9f:23:9a:b7:f7:43:de:f4:5d:75:02:b0:ca:0f:
a5:41:98:2f:05:2a:be:95:97:a4:08:b1:92:7c:65:4f:69:ea:
39:58:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:21:05 2025 by rpki-client