Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
File: F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft (raw, json)
Hash identifier: hgsOiar01FUuya0YD/yqtlr2bP9HFxh2IPHk2Lun1hs=
Subject key identifier: D4:A2:08:BD:78:1A:38:BB:A6:05:F0:6E:8D:BD:22:58:7D:73:BD:90
Authority key identifier: 17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
Certificate issuer: /CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Certificate serial: 019677FAD41B568DD73178DB9A5D4E49D437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
Manifest number: 0CB1
Signing time: Sun 27 Apr 2025 16:00:49 +0000
Manifest this update: Sun 27 Apr 2025 16:00:49 +0000
Manifest next update: Mon 28 Apr 2025 16:00:49 +0000
Files and hashes: 1: F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl (hash: wlxKTDyG9ug6ovxQ2oyj7u8oEdty+j1JM0EmM43ExyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:d4:1b:56:8d:d7:31:78:db:9a:5d:4e:49:d4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Validity
Not Before: Apr 27 16:00:49 2025 GMT
Not After : Apr 28 16:00:49 2025 GMT
Subject: CN=d4a208bd781a38bba605f06e8dbd22587d73bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:4e:22:26:08:71:30:69:b7:ce:55:45:b1:
33:eb:e7:ff:13:b8:23:3a:a8:48:3c:99:09:6d:bd:
5e:ce:cb:1b:d5:1e:2c:67:06:bb:c6:c7:ae:9e:c1:
de:7b:1b:80:b8:d8:42:19:68:9f:d2:f2:e5:82:c2:
12:c2:c1:dc:5f:e9:07:ac:c3:3e:5e:9f:78:a8:19:
e9:81:66:3e:20:46:25:93:60:73:34:78:c3:99:ef:
c5:6a:ca:6f:60:76:9d:73:70:00:4f:3e:eb:01:81:
16:ea:8e:d0:84:d2:c8:d3:ce:3f:3f:9a:71:cf:b9:
7b:97:7d:77:78:74:d3:a0:fe:f5:aa:13:9f:70:2e:
96:b9:e4:5f:62:98:de:98:76:e8:30:4b:30:a2:d3:
8a:a3:c8:d6:2a:5c:8e:14:0c:a6:08:6a:53:e7:12:
4c:a1:15:b0:84:5f:fc:a0:5b:2f:04:5e:45:a5:f9:
65:96:86:b1:54:20:e1:db:38:d4:10:9c:4c:45:f1:
17:2a:82:ac:a4:b5:40:14:84:ab:5a:74:df:1a:a7:
d9:f2:91:bb:9f:d8:d1:51:f4:b6:a3:45:7f:24:db:
6c:43:4d:03:5e:b5:b3:38:b0:28:9e:5d:e2:5a:f0:
2d:2a:38:3e:dc:9e:73:eb:bd:bb:8f:4e:18:63:1e:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:08:BD:78:1A:38:BB:A6:05:F0:6E:8D:BD:22:58:7D:73:BD:90
X509v3 Authority Key Identifier:
keyid:17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:08:6f:db:d3:bf:ce:e5:1a:41:7e:70:e4:19:e5:55:04:3a:
a3:17:fa:eb:64:97:4e:7c:a8:eb:25:89:45:b9:8a:88:ed:b0:
f7:3c:01:ea:63:51:94:aa:52:4d:5f:60:9c:22:be:80:02:c5:
a7:a7:b3:80:3f:1b:df:a5:07:e3:9c:96:57:02:c5:aa:87:a6:
b1:01:25:45:51:64:17:8a:f0:30:53:23:d0:ef:39:39:23:c8:
38:74:b7:42:fd:54:f4:3c:43:62:02:e4:b9:b6:68:38:07:22:
21:7f:3a:33:f5:09:b7:17:b4:19:6a:71:81:40:c2:ef:aa:ae:
b7:e3:1d:ac:52:93:21:fd:86:98:ff:6d:d8:61:e9:2d:1f:4a:
7a:dc:d2:10:8e:a4:80:ee:fc:4e:3f:a7:11:ad:19:67:a4:27:
cb:b7:71:dd:1c:96:13:87:df:af:e3:f9:ee:f4:c4:47:38:22:
38:ff:6d:47:cb:c5:77:db:4a:4a:54:d1:60:86:bd:89:b6:3a:
ab:3b:a9:21:de:90:a1:7d:f4:4f:f0:db:30:92:89:10:d2:c8:
f0:e2:ae:e1:30:73:aa:41:08:19:89:7e:4c:6b:af:51:eb:10:
8c:99:d2:e0:44:5c:bd:ea:6e:23:9e:82:a3:72:68:67:d9:7e:
a8:51:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:40 2025 by rpki-client