Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json)
Hash identifier: 7MZtLRl6snouFXo6bLmkVXVsxiDl5awUFSP2EhNHkno=
Subject key identifier: 64:A3:8E:DA:A8:73:A9:73:45:FD:8F:79:DE:D8:B7:16:2F:C1:AC:99
Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Certificate serial: 0196D2BEA64ECD7690F7C183A96B82445942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
Manifest number: 0811
Signing time: Thu 15 May 2025 07:00:31 +0000
Manifest this update: Thu 15 May 2025 07:00:31 +0000
Manifest next update: Fri 16 May 2025 07:00:31 +0000
Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: zD8IM13jUwOarCuu7/WycTITRbxIHW7d+eQwYYDIJe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:a6:4e:cd:76:90:f7:c1:83:a9:6b:82:44:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Validity
Not Before: May 15 07:00:31 2025 GMT
Not After : May 16 07:00:31 2025 GMT
Subject: CN=64a38edaa873a97345fd8f79ded8b7162fc1ac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:54:64:49:9a:20:e3:1c:c2:6b:73:56:fc:
70:23:70:2d:61:51:d6:07:39:b4:bd:43:aa:76:17:
27:69:dc:b7:ea:9f:c3:a4:35:36:1b:8e:31:6e:e2:
d3:bc:b7:80:f9:ab:97:44:6c:88:f0:f7:85:b8:2c:
d3:0c:34:bf:02:84:83:da:df:d8:bc:43:6a:59:b5:
21:bc:43:06:28:67:46:c2:78:85:71:34:fb:dc:9d:
5f:7e:8a:6a:80:76:b7:90:13:97:55:e7:3c:47:4b:
22:a5:95:0c:fe:45:c9:cb:57:58:45:13:87:c9:db:
c0:6f:33:d3:92:62:ca:59:ae:94:4e:b1:d8:55:b5:
2b:14:f3:1a:d4:67:e6:98:f6:13:4c:49:60:d0:19:
db:41:a1:d5:39:d3:23:11:9d:79:19:c5:07:32:9b:
ab:8b:e2:b6:3a:0a:88:95:b0:36:5d:c7:cc:1c:9c:
d9:cc:06:2d:c5:68:7b:11:71:88:7b:52:16:55:db:
fc:9b:bf:a4:18:3d:eb:82:30:3b:21:a7:eb:ea:f3:
20:30:29:f2:ce:30:95:4c:e6:44:28:e9:a3:2b:ff:
f1:ec:ac:2c:73:a2:44:20:df:55:e0:4d:85:b2:39:
bf:49:40:3b:f0:f2:a0:21:24:b0:a4:cc:b2:41:56:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:8E:DA:A8:73:A9:73:45:FD:8F:79:DE:D8:B7:16:2F:C1:AC:99
X509v3 Authority Key Identifier:
keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:65:36:15:2c:ca:40:96:f0:cd:86:db:fe:9e:7e:ae:e7:
35:9f:d9:1d:53:64:18:c2:02:4e:75:ba:f8:1e:c2:fa:1b:8f:
25:90:5a:d1:e9:af:df:ea:3b:4f:87:cf:60:22:b3:2a:43:a4:
27:d6:9f:4b:32:e2:d7:f9:01:c3:01:63:a4:54:0a:fa:1d:b9:
9b:14:9c:b3:67:cd:61:c0:83:3e:7c:bd:ea:8c:6b:f4:da:ff:
fb:1e:30:fe:5e:96:a3:c7:20:3a:a1:2a:55:34:62:9d:66:c6:
37:38:c3:d5:a0:fb:ff:5e:e3:c1:aa:ea:ab:ac:1f:cc:ca:d1:
c3:92:25:3c:5a:61:42:17:ac:7f:00:37:4c:41:ff:72:fd:32:
8b:00:6b:46:2c:72:06:0f:80:ab:2a:49:94:10:b3:94:b6:78:
6c:1c:27:4f:bb:df:54:09:a9:b7:be:b9:77:9a:6b:7a:8f:f8:
eb:c3:c2:74:1c:15:ac:37:03:7a:ff:db:e9:1b:cb:33:61:c6:
5f:ee:01:8e:82:ba:1d:96:c3:e0:9f:65:27:60:17:18:ec:04:
55:27:fc:84:db:42:c2:12:87:ec:39:83:cd:e5:1a:98:21:51:
cc:7a:3a:02:4c:cb:92:d3:55:6e:a1:f1:36:dc:a8:7a:39:0b:
18:d9:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:07:45 2025 by rpki-client