Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: Z0MkVQkSX2JGeJEOq9n66plYI3jp3k1Mx/CRiqUT7Gc=
Subject key identifier: 83:BB:FF:77:62:60:B3:7C:7F:BB:2B:94:A4:8E:77:EE:A3:30:C7:4D
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 0196865AB3AFC3698E01701A7DA2816BCC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 02F6
Signing time: Wed 30 Apr 2025 11:00:13 +0000
Manifest this update: Wed 30 Apr 2025 11:00:13 +0000
Manifest next update: Thu 01 May 2025 11:00:13 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: GT5qe46foL/rvy20/MAHundXgSSlSF2x2oU2DifDcx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:b3:af:c3:69:8e:01:70:1a:7d:a2:81:6b:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Apr 30 11:00:13 2025 GMT
Not After : May 1 11:00:13 2025 GMT
Subject: CN=83bbff776260b37c7fbb2b94a48e77eea330c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:37:aa:89:49:d9:74:a3:ea:4a:a9:99:37:
dd:4d:6f:9d:37:ba:de:e9:58:0e:37:45:96:08:94:
bd:87:7f:df:cc:91:b4:8d:72:18:46:4c:ea:15:fb:
fa:d1:bb:63:cc:e0:7d:58:8a:e6:7b:9e:f7:6c:e1:
ec:67:9c:4a:54:17:b1:4d:d3:17:a6:70:13:6b:be:
ef:69:79:d4:11:88:df:01:d3:33:c3:b7:16:97:59:
ef:2c:b9:48:fd:ac:5a:d0:99:c2:b0:65:70:1f:2a:
e0:3a:e7:3e:91:88:9a:0e:00:b8:23:ec:a3:9b:2a:
f3:9b:82:b3:50:58:61:87:28:26:f6:76:43:23:8a:
b4:d5:4a:fd:f6:99:5d:f6:eb:9e:9c:4f:5e:b2:9f:
37:8d:d9:7a:af:ca:58:57:6c:1b:30:88:bb:e5:03:
0a:63:8f:18:89:07:2a:75:b7:d5:cf:71:a4:37:2b:
10:cc:16:01:b9:09:92:e0:6d:ce:ec:bd:eb:6a:29:
0d:13:e1:b0:9d:77:cc:cf:a8:9c:b3:34:dc:91:99:
5f:42:b4:c2:a6:71:97:c6:3d:27:8a:7a:73:bb:c1:
94:81:b7:57:ba:cd:27:bc:dc:b3:af:d8:80:d6:58:
11:50:a7:8b:d3:e0:47:32:84:c8:cb:72:c3:e5:7c:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:FF:77:62:60:B3:7C:7F:BB:2B:94:A4:8E:77:EE:A3:30:C7:4D
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9e:8f:7e:4e:10:74:90:17:37:91:86:d4:3a:b6:bb:d3:36:
c8:42:0e:51:e4:58:83:d6:bd:6d:1e:fe:4d:6f:ba:1b:95:23:
f0:00:9d:c6:ea:e9:3e:5e:d4:1b:44:6b:3e:09:e0:10:0d:d7:
4a:35:bd:5f:64:f8:2a:70:9b:30:cd:70:7c:9b:c6:0e:26:4e:
b9:90:6c:32:c7:ff:83:ad:b5:00:15:8a:2e:4b:16:e8:7e:46:
1c:6e:1a:ae:5c:6e:bd:5e:ac:d1:22:d4:a7:23:c6:90:88:65:
25:51:46:ef:da:19:6a:c1:9b:7b:18:3f:08:dd:75:6d:fb:6a:
cb:4b:6a:68:73:8e:a3:8c:73:bd:64:45:2e:ba:a5:b3:1e:93:
61:72:5b:a4:3a:d2:6d:03:4d:bc:5c:0c:a8:03:0b:4e:a2:15:
f5:51:03:8e:c5:e2:8e:21:7f:16:6d:e5:0a:7e:71:e2:b8:f7:
53:44:45:53:a3:30:61:f8:d7:f9:27:03:e0:f9:c6:cf:db:35:
44:0e:77:27:af:b9:f4:78:07:4e:7f:08:90:11:31:bf:04:12:
95:d0:89:6d:d9:31:7a:87:4b:75:f0:35:b5:8f:68:be:b2:85:
3f:8e:86:42:39:de:9d:af:2e:22:ca:8d:2e:75:c8:13:75:ab:
2f:78:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:40:15 2025 by rpki-client