Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: U50Y3Zza77penhGnoQ+AK7XZJhhpneGtMWhSf6iEPV4=
Subject key identifier: B4:43:CD:B5:B6:27:8D:C7:DA:D3:14:C5:9A:FC:09:9A:A9:E6:93:EF
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 0196789F795813406F6403A90CB40E408FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 03DB
Signing time: Sun 27 Apr 2025 19:00:39 +0000
Manifest this update: Sun 27 Apr 2025 19:00:39 +0000
Manifest next update: Mon 28 Apr 2025 19:00:39 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: vK6PcLK2duM+n8wWRs94/UZk5lfWLtK0Ty8IuqVGJyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:79:58:13:40:6f:64:03:a9:0c:b4:0e:40:8f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Apr 27 19:00:39 2025 GMT
Not After : Apr 28 19:00:39 2025 GMT
Subject: CN=b443cdb5b6278dc7dad314c59afc099aa9e693ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:82:3e:b0:d4:76:62:fd:7c:02:5b:a9:af:
1c:fd:c9:19:f7:d0:1c:0a:27:08:7f:c4:b7:dd:2a:
00:6a:94:74:29:29:93:bb:b0:f3:44:20:57:46:8b:
05:ce:9e:ee:fd:4d:9d:f3:d7:58:39:98:0e:7b:1d:
3f:b2:5b:99:ea:68:fa:a6:3f:e8:f9:48:52:a7:0c:
79:08:65:f7:f1:93:5b:a4:f3:2f:e6:bb:5f:cc:2f:
81:61:dd:44:2a:55:60:f5:9b:ab:89:7f:54:97:96:
86:72:86:c8:f3:7d:fc:51:3b:4e:7f:e1:dc:ee:d9:
0e:fe:09:62:ae:81:b9:19:72:68:ce:7d:6b:05:a2:
93:38:db:62:c2:1c:ae:01:d0:10:73:05:08:a4:e3:
55:5c:f5:df:6f:78:d1:68:15:3a:19:47:fc:fe:8d:
56:95:9b:2d:97:66:1d:1d:ea:5f:98:2a:4a:c8:6e:
78:83:2d:5a:82:71:a0:4a:29:57:d7:b8:f6:24:8d:
65:6d:9c:b0:1d:d3:f0:e8:04:09:8b:36:7a:05:fd:
b0:31:93:6f:68:c8:2d:53:bf:f0:64:32:16:1e:b1:
dc:3f:fc:a3:83:38:d5:91:27:be:c4:81:b6:6d:bf:
d3:7a:fc:f0:df:5b:e6:28:dd:90:af:99:c0:ac:1f:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:43:CD:B5:B6:27:8D:C7:DA:D3:14:C5:9A:FC:09:9A:A9:E6:93:EF
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:05:5d:ad:f3:69:47:05:b2:aa:48:af:92:3a:5e:6f:88:03:
fd:e8:dc:a2:c0:6b:e6:2f:c2:3a:8c:fb:a2:33:a4:db:7d:64:
0c:4a:a1:bb:9f:02:0b:40:09:3e:4e:41:fc:59:e1:8d:a0:3d:
1c:b6:97:b7:1a:ea:b8:76:7a:09:d4:5f:2c:c0:c7:8e:5c:48:
73:02:d2:d4:54:2c:cc:f8:9a:86:08:1d:94:6d:da:16:86:74:
c9:ca:4b:d5:37:b8:af:9a:98:80:3c:58:f3:f0:95:0b:43:fc:
65:d5:16:99:65:fc:f3:25:12:47:66:8f:16:d0:60:88:0f:ef:
d2:4a:6a:47:19:e9:45:f6:cf:de:07:4d:ab:f4:7d:1e:05:88:
88:7c:c6:8f:a4:62:c1:22:f7:e2:34:d7:8c:ae:8e:e4:9c:29:
f0:ad:2f:8f:71:45:bb:5b:a9:5c:be:98:6d:cf:e5:66:b1:0e:
72:72:72:44:fa:17:03:81:e8:bc:67:c8:64:79:bb:15:d1:93:
5a:b4:de:46:27:35:64:14:44:7e:1e:88:93:dc:40:09:a1:f4:
b6:e8:8d:6a:31:06:fb:2a:e8:6d:ed:29:0c:0c:67:b0:fd:74:
c5:30:1d:88:5b:16:cb:e6:e8:0a:3e:7f:b0:64:ff:bc:bc:32:
8f:fb:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:18:07 2025 by rpki-client