Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json)
Hash identifier: 9tpC7LsF8cVfWm8V62yaqrQZ8wLk7PkJG7lu3Q9Ew9E=
Subject key identifier: 66:0E:F4:4A:24:6B:89:32:A5:2F:A5:40:69:98:ED:92:ED:60:4E:64
Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Certificate serial: 01968390BCAF802673DB69A5694D3E8AAB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
Manifest number: 09CD
Signing time: Tue 29 Apr 2025 22:00:22 +0000
Manifest this update: Tue 29 Apr 2025 22:00:22 +0000
Manifest next update: Wed 30 Apr 2025 22:00:22 +0000
Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: bMOg6QKIminSoypJxwx7rjoD/grWdpGbFBgxmjqvWTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:bc:af:80:26:73:db:69:a5:69:4d:3e:8a:ab:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Validity
Not Before: Apr 29 22:00:22 2025 GMT
Not After : Apr 30 22:00:22 2025 GMT
Subject: CN=660ef44a246b8932a52fa5406998ed92ed604e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:64:96:8e:20:80:e2:17:01:b7:80:99:d2:
5b:a6:d5:78:c4:87:54:fd:53:ed:cb:8d:23:9c:58:
49:38:96:f8:70:33:f7:2e:29:f2:c0:d5:ad:5a:8c:
b3:21:8c:b6:b7:7c:df:8e:73:c5:50:b0:d9:85:ae:
b2:b4:6a:6a:a7:5f:33:e6:67:94:23:5b:33:6c:2e:
02:c4:93:16:67:e6:74:9a:69:58:b2:59:49:7d:4d:
cc:cf:f9:4e:45:9f:d4:aa:1b:4a:bc:10:97:d9:02:
ae:e6:f8:8b:f2:cb:b5:34:e1:95:11:ff:0a:7b:81:
06:e8:e0:1c:ce:44:fb:d6:01:38:08:e7:45:bf:09:
50:84:a4:4e:3d:bb:31:f7:c0:51:a9:14:bc:d9:d9:
bf:a3:2b:18:06:6b:41:a0:90:f6:60:b5:85:95:58:
10:91:31:20:e3:5b:a2:2d:b1:7a:bd:ee:7c:72:47:
64:e0:b8:e3:45:01:d5:4f:af:0a:d9:50:f6:67:fb:
23:c7:1b:36:af:c9:aa:1c:c1:5a:b0:42:7f:96:6e:
71:f9:ec:b7:c9:cd:72:af:2e:89:64:44:e7:48:b7:
89:9e:4a:df:c6:0e:a2:9a:ec:60:b9:d1:f5:77:3b:
20:bd:e8:b8:6c:c6:31:21:30:09:96:a6:07:70:5d:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:F4:4A:24:6B:89:32:A5:2F:A5:40:69:98:ED:92:ED:60:4E:64
X509v3 Authority Key Identifier:
keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1b:cd:5f:21:29:12:ac:e3:4e:b9:ff:f3:34:50:b4:f2:fe:
a2:73:66:46:23:08:19:46:6d:f2:1b:67:6b:dd:99:5d:c9:af:
97:f5:25:d8:fe:26:ef:1c:fb:55:69:19:5b:de:a9:4c:8a:69:
3e:f5:c0:2d:61:48:e1:f2:9a:b1:db:d7:36:68:ab:22:8d:ee:
c3:dc:35:16:dd:60:75:62:94:a8:53:ee:89:2c:94:14:f6:32:
c8:26:57:5a:ff:b7:f5:6f:27:b9:33:9c:ca:11:80:42:c6:57:
a6:e6:d2:ec:fe:a8:52:67:fc:70:88:1f:4c:92:6c:96:e6:fd:
66:4a:12:b9:bc:01:30:f6:86:0e:13:31:7e:65:eb:ce:ec:fb:
13:31:33:88:eb:8a:4e:6c:ac:eb:f7:56:8e:55:e1:7a:51:1a:
21:4f:6a:11:80:9f:f1:3a:3a:a6:6e:f9:21:34:84:6c:f2:ea:
f2:5f:81:e6:9d:fa:74:66:64:67:52:42:00:3f:0a:ea:f9:a9:
2f:a4:33:53:4a:ee:6a:bb:63:98:1f:9c:b6:f5:70:0c:41:6f:
02:a0:ee:ba:1a:82:3b:13:b5:e0:64:d1:11:c5:29:40:29:06:
ad:4a:31:4f:1b:17:e6:51:cb:fc:d0:63:7a:ae:f6:be:84:f2:
8a:ef:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:36:25 2025 by rpki-client