Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier: swn0ORUNbqqaW7zLvTPnoyBLHM6CKa5FgRvWnZSuoS8=
Subject key identifier: 64:34:5F:17:42:27:39:FA:DA:88:F6:24:7C:D4:B4:B4:63:D6:49:59
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial: 0196BFDCD40E7DB8D943FD350E110C5D57CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 15:00:42 +0000
Manifest this update: Sun 11 May 2025 15:00:42 +0000
Manifest next update: Mon 12 May 2025 15:00:42 +0000
Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: 6UnUSlRzPTxgI4J01T3JYksmh7OZ1o6bMIsRpQ1ZSo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:d4:0e:7d:b8:d9:43:fd:35:0e:11:0c:5d:57:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Validity
Not Before: May 11 15:00:42 2025 GMT
Not After : May 12 15:00:42 2025 GMT
Subject: CN=64345f17422739fada88f6247cd4b4b463d64959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:e9:2d:e1:6c:ba:c9:c3:aa:94:b9:d6:1a:
be:f2:da:85:2b:86:be:9b:3c:2c:f7:9b:d5:6e:81:
b4:c3:c0:89:a0:23:99:80:dd:df:4e:89:55:a3:06:
77:0b:e0:3a:d3:4a:f5:6c:bc:69:20:0e:9a:fd:60:
3a:82:83:16:ae:ec:9a:7f:e5:5d:69:9b:52:50:39:
9d:06:fe:5c:90:74:b9:b1:10:74:c3:f5:aa:f4:b6:
d7:49:c7:5e:8b:dd:d2:b7:7c:af:a1:a5:54:d8:47:
8d:99:85:e1:28:99:f7:d8:45:0e:db:60:25:10:21:
a2:55:03:0c:3c:de:de:77:d9:70:01:2c:ed:90:df:
40:ed:de:51:92:11:48:b0:55:e6:63:f3:03:cd:9e:
ee:20:18:46:c5:9d:ad:be:fd:e2:be:29:a4:a5:7f:
ab:78:1b:dc:82:1e:3b:c9:85:dd:ef:1c:f6:62:3d:
93:b1:b1:e3:18:8d:b0:b4:48:f2:a2:83:bc:1e:fb:
08:1c:ca:9e:20:bd:4c:db:e8:b6:6e:50:92:30:25:
df:06:eb:2a:d9:7f:24:94:5d:26:d8:b2:a9:23:3b:
d8:94:63:73:4d:be:d6:6e:81:7f:18:5a:85:82:f3:
76:dc:c2:4a:8a:6d:4b:a9:b9:01:ea:b4:2f:85:17:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:34:5F:17:42:27:39:FA:DA:88:F6:24:7C:D4:B4:B4:63:D6:49:59
X509v3 Authority Key Identifier:
keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:e5:cb:31:dd:44:67:9b:c1:d7:fb:0e:fc:df:d8:c1:90:
b4:9f:73:cb:fe:2c:71:1e:01:55:18:f7:25:50:66:36:cb:d4:
6d:c0:b5:a8:f5:a9:9c:f2:69:07:33:03:41:2b:b1:1e:19:cc:
ea:fc:e8:7e:10:47:2e:0b:52:a8:65:3b:63:69:c0:a7:9c:a6:
68:77:c5:6f:be:7f:de:c9:38:52:c1:1f:c6:e9:bc:5f:99:77:
4b:87:19:75:88:82:8f:4c:fc:0b:59:56:01:df:ae:e0:75:83:
b5:90:c0:fa:29:44:70:06:6c:ca:e6:fa:2f:d8:28:22:54:99:
34:0d:64:f2:15:0a:6c:b3:21:76:66:01:23:5d:fe:ef:64:2f:
d7:0e:5b:c6:b1:09:ed:3e:16:9f:8f:50:a8:3f:f8:c8:30:56:
fc:6e:23:d8:35:83:f6:62:77:be:6c:bf:fd:13:7a:c9:40:60:
6e:2d:fc:bc:83:79:ac:98:bc:fd:00:58:4f:4e:9c:0f:40:2f:
6c:e1:e9:e8:15:93:cb:7e:b1:68:82:b2:21:1f:7f:d9:5a:a7:
ee:09:20:4a:2d:24:b9:f2:c1:b6:77:ab:d5:0d:e7:62:6a:4a:
41:f0:0e:64:52:b1:1e:60:2a:93:42:5d:6c:0a:56:53:c4:f3:
87:81:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:32:13 2025 by rpki-client