Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: 1jrdQIu9yX0cAmpIXu1hlSf5mZyDusUDyqNZlQg3e3s=
Subject key identifier: 7B:33:FC:07:AB:76:5D:08:F3:DF:1F:9B:A8:F7:47:6E:BB:55:82:CF
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 0196767A6B37EAB6E98BAA8C2A81CC0182C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0988
Signing time: Sun 27 Apr 2025 09:00:56 +0000
Manifest this update: Sun 27 Apr 2025 09:00:56 +0000
Manifest next update: Mon 28 Apr 2025 09:00:56 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: R7GxEkaWPG2ZTdgAEI2LOCd+hVs9fpM/6D/faCXf3MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:6b:37:ea:b6:e9:8b:aa:8c:2a:81:cc:01:82:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Apr 27 09:00:56 2025 GMT
Not After : Apr 28 09:00:56 2025 GMT
Subject: CN=7b33fc07ab765d08f3df1f9ba8f7476ebb5582cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:72:a7:33:53:e3:e1:78:b3:ca:10:74:c6:
0c:7d:49:01:7d:1c:ce:61:2c:70:4a:3a:bb:d7:47:
04:2a:f6:e0:5e:6b:d7:ab:6f:eb:51:9b:54:23:91:
9c:e7:1f:2f:f6:b2:ee:0d:0d:ec:ed:a3:33:4a:25:
f6:3e:d6:51:47:40:e2:66:05:e7:05:fc:5c:22:88:
bd:34:66:e7:56:9c:51:67:22:33:29:1b:a6:f7:27:
4d:51:aa:81:aa:82:b8:55:20:cc:50:8f:30:5c:e0:
11:d9:9e:fd:d9:9f:02:c7:43:17:6a:26:4f:e6:c6:
80:4b:7b:7a:05:fd:e9:52:54:1a:22:25:09:20:03:
31:49:73:19:29:5a:3a:89:2b:bb:fc:42:61:3a:77:
55:c0:e6:de:90:25:39:e8:e9:d7:f7:f4:b1:dd:3f:
d9:44:ea:d3:4a:64:49:af:b3:05:f8:3a:79:e2:04:
32:25:83:ca:df:62:f1:45:73:59:45:4d:fd:72:a5:
f1:af:5d:46:a7:fe:7e:a5:59:f8:74:b6:40:dc:19:
ad:ea:de:c1:9c:26:9e:6b:d1:83:11:53:a6:ec:35:
18:32:df:2c:ec:52:a2:26:5f:97:ae:45:3e:5e:24:
24:02:0c:c7:f0:d4:dd:7a:f9:c1:bb:0d:53:16:d7:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:FC:07:AB:76:5D:08:F3:DF:1F:9B:A8:F7:47:6E:BB:55:82:CF
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:49:7a:8d:3c:ac:da:38:d9:91:08:67:22:dd:30:6b:51:7b:
e6:d8:8b:26:57:e0:ed:6d:ff:7a:c4:c1:74:78:7b:f4:7c:d1:
e9:8f:41:5f:9b:8f:33:ef:24:58:70:c4:c1:c2:37:7b:fb:1e:
30:72:f5:86:3b:6b:17:34:8c:21:52:1e:d5:1c:17:8f:1d:6b:
e8:ca:41:94:77:da:64:c2:ed:70:07:4a:f9:9d:5d:6d:3d:a6:
5b:9d:1d:3f:64:fb:88:6b:1b:a0:c4:74:59:79:7f:50:c7:ab:
58:94:bd:6f:49:5a:a8:4b:b2:c0:1e:c3:d5:28:d2:c1:aa:2b:
6f:29:7c:44:e7:04:de:2b:25:60:6e:8e:e5:fc:50:87:1f:63:
95:a9:cc:67:7a:d1:3c:28:30:b5:7c:7d:83:72:b7:41:09:cc:
33:9a:c4:0c:12:11:2f:09:81:24:1a:1b:4e:fb:78:ff:2c:4c:
63:e3:f3:60:7f:3e:ad:83:98:95:34:8f:e8:76:bc:7c:d0:a8:
08:10:26:9c:e6:0b:5b:3d:dc:68:d2:9b:80:ab:d9:e8:52:0b:
15:2a:cc:1f:23:f0:5e:5e:05:0d:1f:73:5e:f2:71:18:09:16:
ce:07:f4:68:10:a6:6e:a8:0d:10:01:8a:93:51:6c:14:07:fb:
ee:32:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:50 2025 by rpki-client