Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
File: fgdwhBDMdkNEuM-k8-NopeJStlA.mft (raw, json)
Hash identifier: fxtZVmk3Ilm3a3QPskMZU49Gpm1G86dOzdaz7byxTWM=
Subject key identifier: AF:E0:DD:E5:7A:0F:6D:02:54:D6:47:14:AB:0A:B6:7E:8D:84:08:80
Authority key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Certificate issuer: /CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Certificate serial: 0196BE5CD910DD28D2C72F2AA0FA014D3728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
Manifest number: 095B
Signing time: Sun 11 May 2025 08:01:17 +0000
Manifest this update: Sun 11 May 2025 08:01:17 +0000
Manifest next update: Mon 12 May 2025 08:01:17 +0000
Files and hashes: 1: fgdwhBDMdkNEuM-k8-NopeJStlA.crl (hash: bi24B96dEp/kwe4QmTDhhcTnN3FmhQB1UyJYhhZYMk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:d9:10:dd:28:d2:c7:2f:2a:a0:fa:01:4d:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Validity
Not Before: May 11 08:01:17 2025 GMT
Not After : May 12 08:01:17 2025 GMT
Subject: CN=afe0dde57a0f6d0254d64714ab0ab67e8d840880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:a2:7a:98:e7:ab:cd:e6:35:22:41:77:db:
e8:4b:9f:37:2b:6f:c3:92:2f:4e:2b:4a:62:6f:3f:
aa:d3:fc:b6:54:7b:80:50:2c:c1:a4:35:a2:70:ca:
08:26:7b:39:71:3c:31:4e:10:70:c6:7b:14:aa:02:
2f:51:e4:31:4a:df:0c:c9:0a:09:18:e9:1c:b4:b3:
cb:be:28:a9:23:80:bf:47:a5:a0:7b:20:a9:54:58:
71:66:43:15:7d:ab:7c:25:dc:48:80:f5:bc:13:e9:
44:f3:24:bd:f7:fd:e6:19:df:f9:3b:1d:69:b4:ae:
27:5d:98:fb:01:41:39:b4:a7:eb:c7:66:17:f4:25:
01:4e:9e:26:10:05:8e:fc:c4:60:4e:c1:86:1b:b3:
86:c4:f5:93:2f:f1:ab:53:fb:39:21:e5:f1:8b:f9:
d4:ab:9b:42:07:97:71:59:9a:56:3d:e5:73:15:34:
35:e8:27:dd:eb:d4:dc:ad:c3:b1:b4:45:9b:a9:a5:
e5:d5:08:75:5b:b5:8f:8a:cd:d8:8a:58:00:4e:6b:
54:d2:b7:48:3c:15:ba:8a:89:d9:6f:75:fc:8a:06:
a0:cd:90:9f:4c:3d:3e:e3:bb:30:59:b2:16:a2:60:
6c:ca:9d:5f:cf:df:85:e7:0d:36:b1:6b:38:7b:f2:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:DD:E5:7A:0F:6D:02:54:D6:47:14:AB:0A:B6:7E:8D:84:08:80
X509v3 Authority Key Identifier:
keyid:7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a2:a2:31:d2:32:8f:04:f4:05:ae:55:e3:b1:cf:cc:05:d3:
ae:3f:e5:a4:4e:0c:e5:7d:25:b2:33:92:5b:69:21:c7:a1:80:
a0:88:93:b6:83:31:b8:ca:2b:a8:ba:c6:25:86:9c:1a:5d:32:
2d:e8:98:c2:88:d4:8d:f3:a4:2f:8a:98:e8:e5:4d:51:dc:3f:
66:b9:ce:a5:14:5e:10:63:19:71:de:a7:73:40:cb:94:09:e3:
dd:69:e9:a0:ef:a8:3b:88:ca:b4:ff:99:2f:99:5f:d1:ff:1a:
b7:bf:c6:11:0b:66:e8:3a:c6:80:e2:f5:4d:38:a5:ad:20:cf:
b1:80:cf:15:2b:ca:98:89:25:ab:5e:96:c9:c2:a5:8e:4d:50:
b6:02:9b:b6:28:11:fa:a5:10:22:3f:bb:b7:32:f6:3e:71:42:
e3:a5:24:25:75:b6:2a:16:aa:e8:bd:ee:6d:13:f9:34:7a:a7:
5b:74:bd:bf:35:e4:2d:88:2e:2c:ec:7f:e3:7d:15:13:1e:b2:
a4:72:24:1a:82:e2:a6:46:83:89:96:9d:a7:46:e6:f2:9d:c2:
f8:c9:dd:46:62:c5:ec:90:b2:51:a2:76:1e:43:f8:30:4c:9e:
70:d9:e5:31:c3:82:2a:2a:a1:64:41:95:6c:86:22:83:6b:fa:
b8:bc:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:22:25 2025 by rpki-client