Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
File: FW-pMchet5jGgtwy5CkJ1xySOyM.mft (raw, json)
Hash identifier: gmIqDOPoiJUejLgvBd05cFvvQY3TcH7xPPBMAft8yQA=
Subject key identifier: 73:C5:70:78:96:E7:42:D4:B3:A5:74:6D:5D:A0:56:0C:D3:BF:AC:83
Authority key identifier: 15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
Certificate issuer: /CN=156fa931c85eb798c682dc32e42909d71c923b23
Certificate serial: 0196C0818BB2A0A7B46CD76074290E5C29DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
Manifest number: 041F
Signing time: Sun 11 May 2025 18:00:37 +0000
Manifest this update: Sun 11 May 2025 18:00:37 +0000
Manifest next update: Mon 12 May 2025 18:00:37 +0000
Files and hashes: 1: FW-pMchet5jGgtwy5CkJ1xySOyM.crl (hash: R1p+rDgizHTx05fbs0ZWEaaTta0ttNFEmyW8yyvLaZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:8b:b2:a0:a7:b4:6c:d7:60:74:29:0e:5c:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156fa931c85eb798c682dc32e42909d71c923b23
Validity
Not Before: May 11 18:00:37 2025 GMT
Not After : May 12 18:00:37 2025 GMT
Subject: CN=73c5707896e742d4b3a5746d5da0560cd3bfac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:de:da:24:d7:ff:f7:76:49:f7:32:e4:3b:
b6:04:f2:4f:05:62:64:a2:40:9e:6b:bb:0c:22:7e:
26:bb:b6:b3:30:3f:88:88:50:8b:5c:e7:a5:81:18:
7e:d6:f2:2d:bd:7c:de:b7:b0:ef:84:75:69:1f:55:
55:af:98:10:6e:0d:f0:52:2a:2e:95:ec:9f:0e:cb:
45:89:cd:52:d4:07:0b:b0:db:bd:f5:69:76:97:d9:
75:fc:f1:52:0b:f1:76:58:2f:7b:1c:fe:69:e3:1b:
12:d8:3a:d4:98:2c:af:6e:3b:ff:fd:d8:93:b0:ca:
fd:25:e4:40:c8:a5:a1:92:09:07:59:3b:95:a6:7a:
23:44:da:76:e1:33:a9:78:33:ba:1b:33:fb:6c:77:
ca:35:fe:ce:82:66:ab:ca:8a:d8:6a:e4:8e:97:84:
f8:4b:f9:39:15:6e:06:8e:2e:28:1e:41:f9:03:0a:
41:f1:4d:89:6b:15:c8:7b:3e:e0:ce:26:cb:17:17:
de:67:ca:5e:a8:80:8b:c9:84:12:31:ad:ec:e2:b6:
5e:d1:db:0a:ce:13:22:a7:12:38:f8:ca:4d:13:61:
6d:f5:e6:73:2a:34:53:e0:35:c8:23:f4:9e:9d:1f:
1e:63:4a:59:25:84:ef:45:7b:99:fc:11:93:2e:81:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:70:78:96:E7:42:D4:B3:A5:74:6D:5D:A0:56:0C:D3:BF:AC:83
X509v3 Authority Key Identifier:
keyid:15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c0:bb:b6:c8:91:d4:45:f5:5e:6a:a8:5a:c7:1f:11:b0:b7:
0a:54:f4:72:69:f2:72:14:28:80:74:28:e0:37:8d:78:dd:46:
a5:1f:7b:aa:ec:e8:e2:a7:ed:5c:26:34:52:54:bd:83:b6:95:
b3:5c:8c:28:32:d1:63:df:3f:60:f9:06:09:32:d5:c1:2b:0d:
b1:b5:74:9a:4e:f0:dd:ff:97:26:d4:23:54:b5:d4:43:64:95:
c5:5e:91:1c:f9:c0:a6:5d:8c:41:30:b8:47:9c:fe:d1:dd:58:
c8:11:f1:74:43:80:47:e2:8f:a9:37:0a:da:24:f5:47:ee:1b:
de:eb:2c:8c:1d:5c:bd:d0:e5:f6:a6:98:5a:85:35:3f:9d:0b:
37:83:68:a3:95:69:04:85:c3:c3:ce:23:5c:c7:ac:d4:37:dc:
38:ff:0f:4e:2a:31:7f:e8:e9:9f:33:a0:86:fc:fc:fd:07:04:
12:a4:6c:59:fe:ff:59:1b:b6:b7:fb:33:0e:38:a9:88:b5:5e:
ad:0e:27:03:d1:7a:f1:68:ac:e0:38:a6:67:cf:bc:02:c3:3d:
39:61:1e:53:bc:36:60:aa:23:7a:17:d8:0f:57:41:1c:c5:dc:
0c:ae:12:fa:eb:51:62:a4:90:9a:05:76:e6:7d:0e:16:a2:e4:
fe:b9:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:21:30 2025 by rpki-client