Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: bPGVqy4PVRHKZCX/HxmN3gmpUs/SsXYpYJnmWSWq7vk=
Subject key identifier: 6C:97:AF:EA:BF:7F:B7:10:DC:01:9F:9A:7E:54:1D:06:23:46:4B:79
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 0196BECA3EDED87ED404E3EB36F8B3120F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 10:00:47 +0000
Manifest this update: Sun 11 May 2025 10:00:47 +0000
Manifest next update: Mon 12 May 2025 10:00:47 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: 3JUaDB7RSFTVrBaK/GNEIpaEQ8GIRIsTlDskwclMNBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:3e:de:d8:7e:d4:04:e3:eb:36:f8:b3:12:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: May 11 10:00:47 2025 GMT
Not After : May 12 10:00:47 2025 GMT
Subject: CN=6c97afeabf7fb710dc019f9a7e541d0623464b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:b8:f7:d4:19:83:de:20:d1:19:eb:cb:6e:
5f:d6:30:4d:30:64:1f:1e:8f:d6:84:15:57:c4:ec:
bb:99:88:df:66:e5:4c:ee:8d:d5:7a:49:c9:87:ab:
87:e2:43:9a:1d:cc:d9:c4:6f:61:1e:62:33:dc:7f:
b1:07:77:d1:70:a4:79:b4:24:1d:7e:3a:76:f3:09:
46:53:b0:c6:5b:b1:46:5d:1c:08:d0:7f:79:ee:44:
d8:7e:1f:7e:4d:2f:73:2e:07:42:25:6b:b4:69:78:
6d:b7:62:95:5c:b5:0a:cf:4d:9f:1a:95:20:cc:9a:
7a:57:6b:b1:87:a1:44:08:d6:60:91:65:1b:f1:ff:
11:ce:72:a2:0c:56:52:74:89:a3:cc:b5:58:bd:55:
fe:97:17:f1:40:c4:92:fa:09:38:c7:58:76:7e:d6:
41:9c:e7:83:ae:e3:75:93:63:20:a8:81:f8:c9:86:
0e:ae:66:28:fe:e7:b3:79:a3:38:84:50:92:e1:4e:
98:f0:db:35:39:80:98:42:f9:c0:54:c4:e9:d6:0d:
ae:97:d8:e2:8e:70:63:a4:35:2b:c5:98:89:e4:c1:
25:cd:aa:8d:a2:55:c0:c4:6c:dc:3b:ee:4b:36:ba:
ef:d5:1b:03:2c:bc:ab:65:4f:77:c7:92:e2:64:c9:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:AF:EA:BF:7F:B7:10:DC:01:9F:9A:7E:54:1D:06:23:46:4B:79
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:98:c0:fe:54:68:26:7c:13:60:90:aa:55:a9:22:1a:94:
d4:57:19:63:ba:6b:e9:03:38:68:6b:8e:12:37:09:91:68:17:
42:0e:71:65:3a:f5:eb:fd:63:b6:ea:b5:f0:6b:03:10:e1:59:
1f:71:1d:d1:dd:48:4c:e9:f0:9f:6a:7f:66:5a:43:45:e8:dd:
6e:97:1e:f0:6d:bb:40:73:e7:da:60:29:84:ae:d3:dd:a2:b6:
29:1f:bc:be:c7:76:a3:14:5f:83:c6:dd:09:8c:42:d0:0c:17:
af:fc:29:94:f0:25:61:41:64:f2:dc:df:20:88:0a:ed:38:da:
0f:66:2d:dd:c5:9f:42:e2:0d:7e:98:9c:ad:3d:35:8d:e7:65:
e5:5d:64:9a:cb:a0:28:26:f0:20:a7:f4:54:8e:dd:0b:ff:7a:
49:b6:5c:9d:ab:4c:6c:46:19:6a:ee:53:26:59:0b:2d:63:ea:
0b:3d:38:fc:03:23:d0:59:4b:e5:39:2c:b2:f2:a3:3f:73:17:
24:63:92:f7:25:76:d6:0f:e4:c7:86:06:9f:f5:c8:62:15:08:
4d:78:71:81:4a:c5:ed:37:5c:3e:26:2d:cd:a1:95:14:eb:1c:
25:09:53:61:64:95:53:61:cf:98:0c:f5:c3:bd:42:ea:e1:3e:
0c:a9:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:55:34 2025 by rpki-client