Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: AKlLuqTZLwLG0S8INB2oODy6JCRjWZxv/NuioADSRH4=
Subject key identifier: D8:96:81:45:00:F3:16:6E:11:97:C6:DA:40:7F:5A:DF:03:D7:47:E7
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 0196A842E7FF05731ED71977E2389CAB9A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 0709
Signing time: Wed 07 May 2025 01:01:18 +0000
Manifest this update: Wed 07 May 2025 01:01:18 +0000
Manifest next update: Thu 08 May 2025 01:01:18 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: PCd4qmAVFisjQYJxMuUbVOhVemF05vN13NY/uIdprxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:e7:ff:05:73:1e:d7:19:77:e2:38:9c:ab:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: May 7 01:01:18 2025 GMT
Not After : May 8 01:01:18 2025 GMT
Subject: CN=d896814500f3166e1197c6da407f5adf03d747e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:76:8e:32:05:73:bb:18:f6:a4:c1:2c:1c:
98:4d:fa:99:41:45:a0:f3:2d:a6:14:16:f6:0b:64:
d4:6a:af:5c:b3:c1:0e:34:2e:16:fe:91:3f:0d:59:
be:0b:c8:83:e6:53:26:38:70:82:8b:1a:66:3b:b6:
30:6f:ce:4f:c4:95:7f:25:ee:62:94:c9:45:a9:48:
af:4c:39:ca:11:7a:37:17:19:93:73:ee:01:41:de:
ff:d5:60:67:82:2f:71:20:dc:59:2c:89:15:d9:97:
cd:69:0f:2d:84:36:31:80:a0:80:08:d2:6f:8b:d2:
32:93:a3:3e:61:86:17:5a:92:c9:c6:1d:e5:3e:a6:
38:e4:5a:0b:f3:b3:00:64:fe:d8:f2:a1:3c:9f:07:
39:26:1a:51:fe:69:28:67:e1:57:b5:49:7b:cf:a6:
9c:cb:b6:a6:3e:09:f5:c8:8a:07:ae:87:8e:a0:77:
9d:fd:88:9d:6a:ca:00:9d:89:c2:15:e4:4c:0e:bd:
e6:98:4e:e8:39:ac:9c:18:78:a7:63:a2:bd:6b:6d:
5e:ac:a5:3f:cb:24:d5:cb:83:ec:47:a6:5b:8b:8f:
65:e2:4a:79:94:1e:28:f4:19:57:21:78:52:40:4c:
12:99:85:a7:8c:94:b9:68:21:4f:b5:b6:3a:4c:d6:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:96:81:45:00:F3:16:6E:11:97:C6:DA:40:7F:5A:DF:03:D7:47:E7
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:37:77:d4:1b:ba:39:b9:35:69:75:df:70:60:b3:5b:84:cb:
78:f8:e1:58:0f:32:2f:92:6c:52:0d:fc:c5:3a:2b:ae:a3:8f:
6a:5d:aa:92:01:86:25:5b:47:34:57:2e:e4:28:5c:ad:e2:5b:
87:24:49:97:f9:cb:59:db:85:41:5a:23:a7:ad:60:e2:af:e1:
4e:27:ee:03:23:7c:e9:5c:b0:f1:a7:dc:46:23:81:06:fd:8f:
a6:5c:c9:bd:78:4a:43:33:ab:01:c4:e1:24:b3:7d:38:b7:fa:
b7:49:8d:fe:8f:93:86:8b:3e:f4:8d:3f:ae:64:a0:5c:2d:54:
c9:a2:a1:dc:31:90:92:59:2c:04:07:e9:d9:d0:db:37:bd:e8:
e6:9d:4d:fb:93:2a:15:1c:29:8a:dc:05:c8:b6:6e:1c:27:91:
5f:d8:b5:6c:04:07:f5:7e:51:a7:7b:50:3b:5a:58:66:ec:b7:
c8:30:c5:95:29:9c:e9:df:16:cc:d0:c2:af:88:1d:85:50:93:
69:37:81:81:46:0c:a6:ee:05:8d:ba:0d:76:53:c0:2e:5c:ae:
14:4d:c0:61:98:c7:d8:75:8d:5e:bc:35:a1:ba:20:61:42:ad:
19:01:43:2b:8f:f7:75:c8:6b:c2:e7:64:01:db:25:bf:f5:9f:
d2:1b:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:17:17 2025 by rpki-client