Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: NTu6zvPz6Ed4aJ5oj9UyN9HnPcJQlyUSqyaqkXVmmy0=
Subject key identifier: 23:3D:30:16:4C:67:E9:04:BC:A7:2A:48:9C:E4:0E:A2:70:DA:05:6D
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 0196C1CB02D9EB6D8C1BA3A5E7F5F9D473F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 0304
Signing time: Mon 12 May 2025 00:00:29 +0000
Manifest this update: Mon 12 May 2025 00:00:29 +0000
Manifest next update: Tue 13 May 2025 00:00:29 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: zGEmwIHGHdT6ypbJgstgr6ZB0qJUpHLl2blWWr0BMdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:02:d9:eb:6d:8c:1b:a3:a5:e7:f5:f9:d4:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: May 12 00:00:29 2025 GMT
Not After : May 13 00:00:29 2025 GMT
Subject: CN=233d30164c67e904bca72a489ce40ea270da056d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:d7:65:d4:0b:b1:b8:24:63:8d:06:0c:10:
a3:42:e0:2e:b8:67:e8:12:fd:95:24:18:f2:bf:25:
99:fa:42:28:5c:75:7d:96:71:00:07:9c:2e:a2:c1:
d6:6b:0c:51:e5:4f:3f:b1:f9:a7:c3:4c:de:2e:08:
e9:3e:a3:65:b3:5c:ff:94:c3:db:41:b7:a5:7c:e0:
ab:39:61:ad:e1:a3:46:c1:e9:ac:62:5d:22:f2:cb:
b5:cc:27:95:94:09:96:6f:21:2a:b2:12:cb:4a:91:
14:78:d0:50:ad:93:6a:9d:28:32:f9:0c:e6:ec:76:
50:c3:7f:a1:f8:a5:c0:1a:e6:1d:0a:73:f6:1c:0d:
7d:31:e7:3f:fe:3c:f7:10:6f:83:df:db:7e:5d:a8:
7e:1a:05:0e:ec:67:54:f7:ab:9e:51:d2:99:71:fe:
0f:f5:b6:1e:89:bb:ee:8e:91:6f:6a:4e:fc:40:5e:
88:bc:2c:52:3b:41:70:24:a7:80:a4:b4:08:2d:e7:
13:8c:d8:3c:1b:84:be:46:d2:31:aa:39:94:b4:5e:
8f:69:5f:cf:c2:dd:23:c3:e6:e4:c4:df:35:fb:1b:
d8:fa:58:48:99:d4:82:0f:ac:50:c5:39:f7:57:11:
e0:b0:3f:79:43:1a:9c:ec:f3:55:3d:aa:70:70:e8:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:30:16:4C:67:E9:04:BC:A7:2A:48:9C:E4:0E:A2:70:DA:05:6D
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:60:e6:c1:aa:63:96:7c:e7:06:d2:08:cb:b0:00:e7:08:a9:
c9:cb:ea:0e:87:74:c5:45:ef:9a:ab:b0:6b:ea:37:0c:1d:19:
b4:40:bd:a3:d1:d5:36:43:34:dd:05:54:c2:22:9d:f0:c9:84:
69:f0:68:f4:23:c9:ed:17:9a:e7:7a:c0:81:8f:0a:15:a8:3a:
69:f7:b6:47:51:fc:fa:02:ce:cb:20:ba:2e:b0:59:72:76:b0:
e3:23:da:3e:4d:f3:f6:41:3b:7e:99:78:44:97:4c:a3:22:b2:
5c:7c:aa:d6:a1:a9:7a:23:80:c0:1a:e1:c3:4f:19:35:d5:14:
0d:db:16:8f:57:1a:df:5a:8d:ce:e3:b1:d3:27:4b:eb:76:31:
14:7f:9b:34:4a:50:69:e5:8e:51:cb:58:75:69:a4:88:e8:e9:
01:a6:18:cc:95:49:14:85:3d:64:53:34:3b:6e:3a:59:b5:c3:
94:c9:2b:54:52:cc:85:47:05:7d:44:0c:8f:3b:d0:d9:cf:5c:
62:0e:7c:f6:cb:e8:70:ae:ef:fa:b3:78:dc:eb:b7:20:de:50:
71:8d:94:6a:66:32:7c:5a:88:5d:cb:ab:1b:68:59:30:67:ed:
8f:3e:77:cd:de:81:27:54:5e:4b:3a:bb:11:f0:69:c8:8f:65:
63:15:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:09:34 2025 by rpki-client