Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: 83EeGOch+YlLQLt9AtDAmaVABzx1ADyQRmqibx0rhY0=
Subject key identifier: 66:C3:92:6D:BA:1B:2A:A2:76:90:59:34:A9:72:EC:98:93:06:3E:A8
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 0196A2E53A60B2EBC5ACD55BC431086F4B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 1522
Signing time: Tue 06 May 2025 00:00:53 +0000
Manifest this update: Tue 06 May 2025 00:00:53 +0000
Manifest next update: Wed 07 May 2025 00:00:53 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: GBRRyTK65MUH258faWE4MqAjragYj+55U43vqc1GIeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:3a:60:b2:eb:c5:ac:d5:5b:c4:31:08:6f:4b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: May 6 00:00:53 2025 GMT
Not After : May 7 00:00:53 2025 GMT
Subject: CN=66c3926dba1b2aa276905934a972ec9893063ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:ae:ff:55:d2:87:f0:f1:53:75:7a:60:e3:
b2:13:d8:e7:9b:f2:d0:76:79:7f:d5:4e:74:09:28:
fd:80:ba:0e:17:40:65:4b:5a:3a:fb:fd:92:c6:74:
8c:ff:14:b4:b5:6c:52:5c:b1:10:46:8a:4b:01:31:
7b:cb:b2:f7:47:35:29:c4:b4:42:51:fa:08:fb:60:
49:73:2e:72:30:3d:37:be:4d:f1:3b:d6:d1:3c:e1:
b2:cf:92:63:50:f1:44:81:70:ad:ec:85:97:97:df:
ec:10:fb:f7:60:ec:3b:20:d8:dc:80:d2:d2:77:ac:
b6:02:fe:2e:52:a7:77:79:20:3a:9a:5e:7a:54:e3:
07:c5:57:4d:ff:6f:dd:99:b6:5e:42:85:6b:e3:6c:
88:d6:08:3f:53:85:93:22:77:da:57:24:f7:f1:ca:
dd:dd:5a:f8:96:ef:eb:ac:55:b9:08:54:56:c3:f3:
82:0c:60:53:25:0d:61:d7:42:cf:d2:4f:c3:93:ba:
b5:ca:55:59:7f:e0:a2:57:8d:f0:57:c3:69:d4:01:
50:93:ac:52:df:8a:ea:79:4e:d2:db:c9:ef:4e:15:
0e:58:4d:db:15:29:b4:bd:92:10:c5:11:80:98:f6:
0c:d2:b8:ba:7f:d4:57:8f:24:ac:28:81:83:8a:cc:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C3:92:6D:BA:1B:2A:A2:76:90:59:34:A9:72:EC:98:93:06:3E:A8
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:39:32:98:9d:01:f0:26:78:ff:9b:41:b4:71:de:9b:67:a4:
85:8b:79:06:dd:4f:29:3d:1d:22:3c:60:75:5c:dc:a1:66:39:
f0:c2:13:cf:de:1b:54:10:d3:bd:02:2c:22:2d:51:16:cd:01:
ef:61:44:48:83:23:a7:e2:71:df:90:77:a5:c6:dc:9f:5c:b8:
43:3a:f8:c5:57:56:85:cd:27:f9:e7:3a:fc:6a:61:33:d0:98:
00:4a:eb:11:67:3e:3a:6a:45:e9:64:8c:c0:27:4d:59:f9:ff:
61:53:d6:2f:1e:6f:2a:1e:b8:07:9a:13:29:21:33:0f:34:23:
16:ce:33:82:92:4e:6e:ff:e9:4c:09:83:d9:4b:15:0a:be:87:
20:ac:d9:5f:9d:30:61:f5:7d:53:2f:a2:2d:a6:8c:6c:ae:02:
09:60:1c:f4:75:92:ff:10:2e:10:d5:43:6d:e7:d1:7e:a4:5a:
9d:27:d4:99:4b:c3:61:a2:87:a4:f2:8b:58:a9:f5:78:f7:83:
cb:cc:fc:c6:96:81:02:d5:87:8d:0f:43:23:b9:a6:3c:8c:2d:
1d:23:37:5e:db:2a:9d:b5:60:22:cf:d7:c6:41:dc:5d:e4:0f:
78:cd:0c:9b:d5:83:65:ee:18:76:ca:dd:2f:2c:5b:2d:26:61:
cf:4d:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:16:47 2025 by rpki-client