Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File: fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier: As+0j0s2mIezSB4j+o7HM5+Ah2/UtNVmb/3dy5Xbyqs=
Subject key identifier: E3:71:2D:45:11:67:D7:7D:9D:67:66:43:35:F1:3F:79:E1:54:4F:89
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial: 0196B9A3DFD2D873069B69C39A8BE6C0EBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 10:00:46 +0000
Manifest this update: Sat 10 May 2025 10:00:46 +0000
Manifest next update: Sun 11 May 2025 10:00:46 +0000
Files and hashes: 1: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: MspkNFhwbgR9GoXcL4YTxD9B7tFLBpMI6w+6+b2NTC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:df:d2:d8:73:06:9b:69:c3:9a:8b:e6:c0:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Validity
Not Before: May 10 10:00:46 2025 GMT
Not After : May 11 10:00:46 2025 GMT
Subject: CN=e3712d451167d77d9d67664335f13f79e1544f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:32:3a:dc:44:b6:98:be:92:54:fe:05:17:
cd:a2:54:a1:d4:ff:ef:a1:66:ac:cb:d1:f9:a4:64:
71:b9:55:21:ed:98:b9:63:fe:51:be:34:59:66:39:
7a:40:08:87:55:52:c7:84:29:c5:c2:ce:83:80:c5:
ff:e3:f2:63:16:83:68:81:2e:eb:c7:be:90:f2:88:
12:3b:3a:49:97:72:90:a0:b0:ca:83:56:98:bb:06:
af:99:29:5f:6c:1b:08:34:1f:6f:2a:e7:2f:aa:f3:
07:9b:b5:0b:9a:03:e7:b1:0a:4c:6c:8e:c8:a0:09:
d3:96:79:b1:e1:f2:fe:a2:97:bf:26:83:2b:a0:cd:
ca:f9:26:d7:2c:8e:02:fb:7f:47:01:43:3b:9c:dd:
41:34:57:88:79:5c:51:ac:08:ef:4b:3a:41:e0:01:
a2:f1:11:df:36:8d:2c:ae:d1:f4:45:76:ee:22:a3:
60:7a:2d:79:41:96:95:b1:1c:77:75:48:ff:03:41:
5a:96:d6:d5:65:97:1e:a5:f3:6f:76:99:7a:72:b7:
38:ba:61:e1:6e:09:60:47:ad:8c:05:49:f9:f5:22:
96:2f:a2:70:aa:f8:97:22:6f:e0:a9:20:8b:cc:c0:
67:cf:06:95:46:c1:49:cd:f8:57:e1:30:6a:cb:d1:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:2D:45:11:67:D7:7D:9D:67:66:43:35:F1:3F:79:E1:54:4F:89
X509v3 Authority Key Identifier:
keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:65:c7:d8:ea:eb:e6:d7:7d:7f:45:21:cd:87:30:44:c6:
8c:a4:62:54:1e:b3:fc:79:f8:c6:7a:c5:3e:f5:ee:f5:57:3f:
06:e6:27:2a:e9:6b:07:4d:b2:de:92:23:e0:b8:d3:f2:19:30:
81:7b:80:e0:2c:22:10:e9:b3:43:fd:45:96:c3:ba:d9:6a:ab:
27:63:54:84:5c:32:a3:9d:7d:3c:94:36:aa:11:e0:23:ce:dd:
9a:c1:38:a2:a9:93:82:2f:12:b6:9c:2c:7f:d5:05:fa:cd:93:
c9:0c:07:a7:8f:23:56:d9:34:60:fa:a7:fd:d9:fa:e5:9f:91:
12:82:58:d1:f6:87:1a:5f:5a:ad:85:a2:93:ad:af:d5:81:8d:
a8:43:a3:c1:0a:14:49:fe:13:c1:bb:c8:9b:6e:9d:3c:e4:9a:
b0:57:49:93:ad:3c:be:6c:f4:8b:c2:1c:a2:47:30:b5:7c:54:
c3:18:92:3e:2a:f4:31:8f:70:cc:cc:a0:9a:d9:ad:8f:ed:22:
e2:54:65:5e:25:33:e7:8c:55:47:d1:8c:cc:b0:0b:0e:9f:08:
07:13:ed:02:d8:80:35:82:4a:30:6c:f5:f8:01:9b:3a:be:c4:
97:b9:df:cf:75:70:bc:54:41:ea:30:63:97:3d:73:12:4f:5d:
bb:97:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:16:16 2025 by rpki-client