Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: L8a5SFKn9OyeNsh1/At5o/1aNhgEcQIOq/9JQrwypxk=
Subject key identifier: 88:A7:BF:BA:E2:A0:1B:E9:AF:D8:89:4B:2F:58:38:5D:57:FE:27:6E
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 0196741E85E448A62065DE1C0570B7062622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 05A5
Signing time: Sat 26 Apr 2025 22:01:19 +0000
Manifest this update: Sat 26 Apr 2025 22:01:19 +0000
Manifest next update: Sun 27 Apr 2025 22:01:19 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: mzamDBgZW3GwtYPYTNNZY/WI2u4oXSj74klKqna5HoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:85:e4:48:a6:20:65:de:1c:05:70:b7:06:26:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Apr 26 22:01:19 2025 GMT
Not After : Apr 27 22:01:19 2025 GMT
Subject: CN=88a7bfbae2a01be9afd8894b2f58385d57fe276e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:d2:6d:d3:80:1f:e9:30:3b:af:88:ee:50:
ec:ab:50:4d:97:85:c6:68:91:9d:12:6a:42:e4:e3:
bf:22:26:b9:c2:3b:1c:87:f4:1a:17:de:04:89:8b:
c1:ec:61:95:84:d9:2e:cd:85:b7:2c:bb:cd:8e:25:
1d:59:8b:e4:c7:29:ba:f5:25:af:e5:ac:cf:46:6d:
a0:b3:f0:0a:0b:9d:d5:f3:82:ec:8d:df:d9:5a:12:
bb:1d:09:98:18:28:5b:87:76:4d:d2:bc:0a:aa:89:
c7:42:ab:83:6f:38:60:21:7a:a7:c5:f0:1f:16:ce:
ab:09:ac:f6:8e:ab:97:0d:8c:8d:40:d9:43:2d:5e:
23:61:d7:1f:08:a4:2f:1d:27:3f:63:8c:e4:cf:3a:
a8:8a:43:56:2a:94:77:fc:3a:45:a3:98:1f:46:b8:
28:9e:e9:0b:23:e7:4a:f9:f1:0e:f6:4c:b1:bd:c4:
8c:ae:8c:92:86:0a:e0:3b:8c:36:ed:b0:d1:63:84:
42:91:64:d2:88:02:a0:eb:a4:40:0c:9a:cf:17:96:
98:0d:e4:cc:a6:06:70:9b:35:a1:2f:86:b9:94:90:
c7:55:49:a8:7d:32:b5:9c:ea:f0:b3:00:39:a9:15:
14:88:fb:9a:8b:8f:1e:c1:20:3f:c3:74:3f:f6:b5:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:BF:BA:E2:A0:1B:E9:AF:D8:89:4B:2F:58:38:5D:57:FE:27:6E
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:26:44:b7:34:2c:68:ce:d9:26:30:6b:27:7f:20:57:75:5d:
a6:5c:44:f6:13:a6:91:5a:64:d6:e6:cb:2a:f0:0d:fe:9b:df:
a3:a9:b5:5e:69:7e:13:c0:25:0c:e9:04:d6:36:92:2d:aa:9d:
71:1a:14:0a:d7:7a:6d:33:27:69:2d:62:d3:35:e3:2f:de:e5:
2d:e6:37:f0:7c:43:cc:a5:9e:8b:5a:b3:4f:9f:b1:4a:08:38:
bb:64:30:81:dd:16:4e:85:96:81:98:38:06:a6:7a:b5:82:ff:
96:2d:83:95:3d:b8:76:b4:db:c5:d0:ad:85:23:94:05:7a:32:
1f:a4:78:5a:bd:4a:ff:0f:91:12:e7:4e:4f:a9:5a:b8:9d:9e:
4b:b7:81:3a:7c:eb:b5:f6:35:0a:41:b9:68:55:53:f2:08:1d:
f8:b3:67:40:95:56:22:e5:42:15:0a:1c:e0:6a:0f:40:85:57:
b4:4c:9a:62:d7:20:96:b5:bc:c4:b0:be:75:ec:14:76:20:b2:
40:8b:f8:f4:af:06:93:7f:ab:c6:fa:1b:2c:92:6f:af:e8:ce:
a6:51:38:c7:25:74:34:6f:34:b0:ed:c2:f5:5a:6e:c6:dd:9f:
88:d9:81:2c:ce:e2:2b:66:2d:f0:6c:d5:c8:b1:c2:03:40:aa:
44:54:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:04:24 2025 by rpki-client