Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File: FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier: 2mjFlddg38vBVGbCOvbnHs7F2eeYm2AODk5gS2JEiXs=
Subject key identifier: 3A:36:A8:F5:A0:CC:D0:1C:7C:B2:64:4E:86:D4:58:4D:D3:21:31:04
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer: /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial: 019681A241A3C002AF5D980FE878C3ACA334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 13:00:16 +0000
Manifest this update: Tue 29 Apr 2025 13:00:16 +0000
Manifest next update: Wed 30 Apr 2025 13:00:16 +0000
Files and hashes: 1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: c7AafJC77rG+4uUElTsVWZexGGZiqDJ3aXtT7/1v9YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:41:a3:c0:02:af:5d:98:0f:e8:78:c3:ac:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Validity
Not Before: Apr 29 13:00:16 2025 GMT
Not After : Apr 30 13:00:16 2025 GMT
Subject: CN=3a36a8f5a0ccd01c7cb2644e86d4584dd3213104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:10:aa:44:c6:e4:cd:31:14:ca:28:f4:87:
44:e4:6e:1d:56:75:16:92:df:75:bd:30:d0:36:62:
d4:cf:3b:a4:e3:c6:a3:28:0d:40:50:d7:8b:26:d2:
d8:c0:cf:aa:e9:f3:ac:fa:2c:7f:d6:52:a6:04:c3:
82:e3:8a:5c:fd:52:1b:1d:dd:e8:c3:fe:2e:2e:cb:
ca:6c:ed:06:05:5c:3b:92:41:96:b6:a2:a1:84:9c:
db:6e:96:42:11:43:70:e5:4c:58:d1:2c:e5:49:e6:
95:30:60:8d:70:2e:35:3a:0b:ac:36:d1:47:73:4d:
7e:6c:80:ce:67:7d:07:bf:a4:2f:bb:13:fe:71:36:
f0:72:89:c4:5f:8f:e6:e2:18:e4:fb:1d:05:10:68:
09:37:77:40:9b:37:64:49:4e:6e:96:c9:81:ce:28:
b3:26:ec:e9:6a:01:83:5e:9f:34:22:e2:7d:2e:41:
04:b5:53:73:98:cf:a5:67:90:7f:14:13:9b:65:f3:
2c:51:77:6c:25:7d:9c:1c:91:e0:97:bd:67:ad:c6:
7b:64:14:63:a6:9b:c3:22:4c:23:d8:48:9b:96:f3:
4a:d8:a0:fc:d9:48:30:9f:e3:96:54:b3:a8:08:a4:
ee:78:71:58:67:2f:a4:e3:24:b6:e8:48:c1:c7:a7:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:36:A8:F5:A0:CC:D0:1C:7C:B2:64:4E:86:D4:58:4D:D3:21:31:04
X509v3 Authority Key Identifier:
keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fd:04:b6:88:06:e4:10:f4:79:8c:b8:82:d3:8d:72:7f:88:
e2:0f:d5:a7:70:3f:a0:3b:66:f2:c2:b0:df:85:24:cb:ff:d4:
3c:4c:d0:34:d4:b7:a9:59:2e:97:62:e2:6f:e2:c5:75:eb:42:
c9:b8:0f:a1:58:40:d1:f5:b6:50:74:f3:1b:ea:62:34:72:65:
3a:2b:9c:84:06:90:de:15:be:a5:d6:52:42:fb:a9:29:a1:5b:
36:44:c5:03:23:f5:9e:c7:b1:e6:37:56:48:08:52:fe:8a:88:
32:17:cf:d4:a6:60:ea:9b:b3:7c:75:61:4f:25:2d:7c:a4:84:
88:96:87:7a:34:1b:e4:95:74:c8:6b:f1:66:b1:8a:f3:9f:8e:
3b:bc:4a:46:d8:26:86:d1:b3:9c:7f:dc:6d:33:06:10:fb:ea:
72:44:82:1a:50:2b:ef:db:42:9b:45:02:43:b2:1d:6d:47:4c:
c4:48:0d:7d:24:09:c1:99:66:d2:db:e9:9c:d1:12:a4:85:d2:
b6:11:59:35:55:3d:8f:d3:7d:90:52:ad:af:de:0e:3d:2f:7c:
b1:9d:03:8a:16:93:ca:d3:92:00:88:73:fb:41:88:54:9b:6e:
a5:28:62:56:93:78:b4:71:ee:4e:3a:50:31:e9:c5:31:13:c1:
1a:5d:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:38:05 2025 by rpki-client