Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File: _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier: /C2Pc+ZR96ZRIcLD5G2JB4ZA9R+gFd1WtzzcLjznR5k=
Subject key identifier: C2:8A:29:60:1A:2E:70:BE:D0:29:19:BF:C1:0C:29:1E:0A:8F:3D:98
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer: /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial: 01969E635B31837E6B46B3B543AF33B3BAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number: 10
Signing time: Mon 05 May 2025 03:00:33 +0000
Manifest this update: Mon 05 May 2025 03:00:33 +0000
Manifest next update: Tue 06 May 2025 03:00:33 +0000
Files and hashes: 1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: DyPEYJGA9+MJxX/WiGYY3uaksy0O3TiYqkAn9swrQ8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:5b:31:83:7e:6b:46:b3:b5:43:af:33:b3:ba:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Validity
Not Before: May 5 03:00:33 2025 GMT
Not After : May 6 03:00:33 2025 GMT
Subject: CN=c28a29601a2e70bed02919bfc10c291e0a8f3d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:77:a1:04:38:80:88:af:9e:18:32:e2:52:
82:ed:52:05:78:a2:07:c4:32:0b:64:c4:ab:37:22:
c9:d0:41:7c:4d:46:fe:d6:d8:b0:8c:44:83:82:2b:
b7:d8:f4:9a:5f:e6:da:97:85:b8:22:ac:ac:cd:9a:
73:f6:15:cc:47:6b:9d:56:3c:96:54:8a:32:22:5c:
2e:5b:49:1f:71:05:68:70:e4:8a:16:b1:0c:9c:fc:
96:7a:d5:da:d0:ab:1e:a0:b3:62:fe:dc:ac:b2:82:
21:e9:3b:34:89:35:1c:03:43:41:c6:31:cd:93:df:
85:c8:30:47:9a:10:f3:be:5a:08:3c:6e:4b:86:ff:
dd:96:b3:79:c9:8f:bb:0b:22:c8:2c:63:eb:12:0d:
a3:02:28:dd:d4:d3:9d:d7:de:0e:f2:11:9b:c3:0b:
09:a0:b9:ba:45:f7:cb:de:be:13:d7:d8:b1:1f:c4:
1e:7f:8b:18:af:2c:78:28:eb:08:28:9e:c5:2d:18:
66:8d:12:57:a3:e1:49:86:33:b1:2a:30:09:12:f9:
a1:19:7b:30:6d:70:40:fa:4a:ed:e7:26:ff:78:db:
8d:e9:96:af:e6:94:0c:63:b9:fa:53:c1:f0:7a:3f:
85:d7:55:59:3c:5f:05:0b:bc:77:d8:5f:90:e7:f4:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8A:29:60:1A:2E:70:BE:D0:29:19:BF:C1:0C:29:1E:0A:8F:3D:98
X509v3 Authority Key Identifier:
keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:66:0a:55:d2:63:84:d7:39:84:68:c6:b1:94:c2:18:55:d1:
e5:f5:ab:a7:eb:aa:6a:85:18:c0:9b:e7:da:c6:56:cb:a4:03:
94:bf:69:2a:05:66:ad:90:1b:ea:e2:71:49:71:8d:4e:e4:89:
48:e0:08:2c:6c:b8:d1:33:67:43:31:e0:d7:95:64:96:78:af:
74:7e:49:e2:93:cc:6f:6f:da:1c:d1:5d:49:d0:7a:0a:d3:31:
af:28:a0:0c:57:74:fe:1c:51:61:f8:d0:40:e3:c8:5d:7b:03:
ec:46:7f:48:86:16:af:20:81:a2:40:86:38:86:18:32:88:07:
58:b3:9f:e2:59:10:96:84:5e:bf:66:bd:de:c4:a2:73:74:8d:
04:b5:87:98:b9:79:10:6d:4a:cf:30:1c:79:9f:ec:81:84:12:
de:3f:03:aa:2c:8d:ad:95:10:5e:d9:47:53:6e:76:42:e3:7a:
35:eb:3d:c4:93:26:17:f3:b0:67:ec:15:e8:57:09:20:13:2f:
5a:e6:ec:a9:e8:ba:b8:5c:3a:3f:8b:7b:c2:e3:77:86:38:91:
4b:93:3e:bb:72:db:fa:07:06:c6:1b:a8:6e:a7:7d:2b:bc:f1:
50:7a:e4:52:42:b2:88:5f:16:0e:d7:88:34:af:1c:eb:15:9b:
4f:c2:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:20:44 2025 by rpki-client