Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: 75jnvZx0xhRZkWAuEdogt2FpCvZvevZ0cHK+69gDecE=
Subject key identifier: 73:14:62:F4:34:B3:CD:9E:73:FD:15:DF:90:69:D5:A5:B8:85:4B:02
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 0196BDEE050CEBCFC06B7797F78F7B70A8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 09C2
Signing time: Sun 11 May 2025 06:00:14 +0000
Manifest this update: Sun 11 May 2025 06:00:14 +0000
Manifest next update: Mon 12 May 2025 06:00:14 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: x3s1jYQnsfC5TDJIbNVZEtRtskqtK1MgbgSDDHHKIaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:05:0c:eb:cf:c0:6b:77:97:f7:8f:7b:70:a8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: May 11 06:00:14 2025 GMT
Not After : May 12 06:00:14 2025 GMT
Subject: CN=731462f434b3cd9e73fd15df9069d5a5b8854b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:11:c3:19:1b:e7:73:19:44:fe:7e:f7:38:
9a:7c:0b:0c:44:db:64:92:86:5b:d8:24:46:b3:74:
c8:e1:0b:ce:23:e8:f0:ff:a0:f4:6b:32:88:95:d3:
8d:aa:f2:49:da:0f:9c:d2:9d:3c:ca:48:94:0d:45:
27:cc:10:2e:cf:17:7d:a0:cc:4b:59:ac:6c:e1:7d:
ab:92:dc:d5:05:51:0a:32:a2:1e:40:ce:65:af:7a:
ac:7a:7b:1f:dc:fa:52:c0:d2:39:05:3b:1d:71:c2:
92:f0:c9:08:ca:99:2e:0b:6c:b3:41:aa:1d:ed:6c:
69:47:2c:28:4a:8d:ba:ff:26:4c:ce:ef:46:4c:40:
86:f7:a0:24:0a:7b:a2:06:c4:52:13:76:4d:f6:a9:
f8:c8:b3:61:7e:39:db:f6:3d:60:92:d0:ca:69:c9:
7c:c5:fc:c1:56:8e:bd:2d:31:d5:80:53:8f:09:34:
f4:af:50:da:dc:c7:44:2f:e2:5d:2a:cb:1c:33:9c:
97:fe:3d:65:f6:07:4f:43:f9:fc:2c:6a:a7:38:ee:
01:7b:eb:87:09:76:a3:54:c3:4d:70:a8:72:6a:bb:
c0:2a:4a:bd:a7:ce:b9:fb:58:03:df:fd:b7:0c:60:
44:bb:b1:2c:d0:c6:02:af:82:45:72:bd:b2:91:a2:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:14:62:F4:34:B3:CD:9E:73:FD:15:DF:90:69:D5:A5:B8:85:4B:02
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:90:18:4e:01:05:28:e5:fe:23:d3:a8:ca:c5:8d:32:78:46:
b5:e8:fd:4c:6d:0e:14:cf:ec:4e:71:b8:90:91:72:22:56:6a:
63:d2:a1:f5:68:c0:d6:82:21:ed:7c:a4:a3:2a:ae:c5:da:94:
b1:57:03:d7:0c:f4:7d:2b:17:5d:5e:4c:b1:01:3d:0b:e3:2b:
bc:45:b8:57:1f:1b:12:6a:dc:58:89:e9:73:72:ba:88:c8:75:
9d:87:36:b1:8b:b7:ac:e4:06:af:c7:1e:29:e7:5d:f1:f3:a5:
81:4b:bf:51:cb:8e:37:f2:60:2d:84:e9:f5:b1:43:60:36:f0:
1b:10:53:ea:f9:4d:b5:47:06:4c:a2:88:59:19:b9:8e:86:ec:
20:24:f9:f2:95:ea:76:3e:3b:26:9a:e4:4d:ed:f2:13:25:9e:
28:0e:fd:7d:cc:97:72:04:20:55:4c:d9:9e:94:62:0a:12:12:
15:f6:66:13:ca:0b:95:dc:ff:1b:0e:a1:ad:2f:4f:4b:e4:86:
77:8a:97:fa:21:1c:dd:61:a7:f3:21:aa:12:ef:dc:f8:15:36:
55:a0:21:a0:0e:20:7d:12:18:7f:02:b7:59:03:43:04:3b:d1:
0d:ad:77:61:5d:37:fe:c6:97:0f:97:87:75:67:9c:8e:3c:ed:
97:c6:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:26:48 2025 by rpki-client