Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
File: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft (raw, json)
Hash identifier: j06cVovV93J0HkMIYrjni0CiX/XC++RdMQiySRS2nSc=
Subject key identifier: 20:02:3C:CC:DB:AD:E5:4A:8B:DF:CC:67:54:59:7D:08:10:0B:99:FB
Authority key identifier: 16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
Certificate issuer: /CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Certificate serial: 0196C20266DA4DFDCCD82BC8FCFEBEE6AC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
Manifest number: 0BC9
Signing time: Mon 12 May 2025 01:00:59 +0000
Manifest this update: Mon 12 May 2025 01:00:59 +0000
Manifest next update: Tue 13 May 2025 01:00:59 +0000
Files and hashes: 1: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl (hash: rf1dk7ugqIjoA4xTccpLr2+Hpb0dsduC4ckoI7dzbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:66:da:4d:fd:cc:d8:2b:c8:fc:fe:be:e6:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Validity
Not Before: May 12 01:00:59 2025 GMT
Not After : May 13 01:00:59 2025 GMT
Subject: CN=20023cccdbade54a8bdfcc6754597d08100b99fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:59:39:d1:ca:1f:ef:6b:97:8e:4f:83:44:
43:57:b7:66:60:9e:f2:da:ea:17:6c:17:84:38:ee:
2d:f8:4d:7a:1a:ce:7b:87:a9:30:4a:87:54:a2:67:
94:41:a4:e7:d1:bd:d4:3e:0a:4c:c5:57:c1:29:4c:
fc:1a:77:4f:56:89:28:25:e2:9c:95:ee:fe:25:8b:
81:95:9d:86:dd:83:e6:b8:eb:3b:73:3f:8e:59:30:
90:91:53:bc:b5:c1:53:e2:39:ce:12:45:21:45:20:
f3:3f:3d:f3:43:5d:97:c6:8b:a7:dd:82:81:26:9f:
3b:c7:01:83:9f:d4:83:55:6f:01:6b:23:ec:bc:a9:
e6:1c:a1:8f:3a:24:e5:d9:bb:ae:a5:e7:7b:bc:0c:
83:f2:53:64:d7:97:d2:96:e3:1e:30:75:bf:90:a4:
b8:c3:3e:7d:96:44:3a:52:40:c2:30:60:16:b0:d5:
66:b8:c9:a6:16:a8:39:88:9c:97:a0:91:eb:9b:1a:
81:83:c9:c9:91:4e:2a:3e:64:83:2a:8b:61:77:df:
c9:62:c8:8a:e4:a1:3e:52:4d:11:c7:43:b3:cb:41:
b5:3e:4a:f2:b5:65:26:2e:ec:bf:43:68:10:39:a6:
85:dc:ec:2b:f5:be:40:10:f2:86:36:ff:c6:25:8a:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:02:3C:CC:DB:AD:E5:4A:8B:DF:CC:67:54:59:7D:08:10:0B:99:FB
X509v3 Authority Key Identifier:
keyid:16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1e:9b:c8:5d:0e:52:48:59:27:d3:35:6c:1b:d4:86:a3:36:
b5:04:e5:c6:6d:82:3d:46:bc:68:d9:c8:c1:82:80:ea:39:77:
b2:72:09:f6:ce:74:1a:e6:16:0b:c7:85:b2:a2:bb:bc:74:34:
2c:6d:c9:ba:4c:e7:12:e5:ce:8c:83:61:cb:80:bb:c1:43:ec:
50:70:dc:01:5a:58:6b:4c:3d:ed:04:ad:2d:97:c6:83:6d:dc:
c2:e6:e4:14:a8:db:f3:69:1f:5a:ad:96:ab:01:38:5f:d9:11:
48:2e:e4:1a:24:87:21:9c:3d:30:8e:f3:53:e5:e4:20:0f:56:
df:6c:85:80:8d:8f:8e:47:e5:ba:9c:24:77:80:8e:2c:72:24:
5b:68:23:1a:84:e2:8a:31:0c:4f:56:14:9f:e3:8c:e8:f0:52:
7e:bc:13:7e:08:72:ec:43:ac:11:04:a9:81:8d:15:47:6b:6a:
b7:3b:da:d0:0e:4a:8f:94:d8:4e:b9:35:72:8a:a6:c3:69:c3:
b7:fa:1e:07:3d:5b:5e:42:da:30:c1:72:cc:ea:b3:e5:9b:84:
cb:36:6d:a6:73:71:12:6a:d7:7b:c0:72:9d:96:08:14:48:a2:
b8:21:a8:ae:f2:bd:d2:f5:b8:13:7c:6c:53:21:bc:1c:e7:e7:
ef:6a:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:22:07 2025 by rpki-client