Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: Y94AmiWHTsQ8tNl1FKngrKAqORXzxUmwptudpHGEmCo=
Subject key identifier: E0:6B:7A:C7:70:39:5B:DA:D2:51:AA:16:77:96:69:D5:A0:B5:3C:02
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019675D51BC61CA1AE1DB75664B29D735794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 07E8
Signing time: Sun 27 Apr 2025 06:00:22 +0000
Manifest this update: Sun 27 Apr 2025 06:00:22 +0000
Manifest next update: Mon 28 Apr 2025 06:00:22 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: bUyEHMjowsLo+en29BuMAylwlqbM/Eu/GWUJl7yuIog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:1b:c6:1c:a1:ae:1d:b7:56:64:b2:9d:73:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Apr 27 06:00:22 2025 GMT
Not After : Apr 28 06:00:22 2025 GMT
Subject: CN=e06b7ac770395bdad251aa16779669d5a0b53c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:0c:ad:af:ed:29:fc:e7:f9:4f:96:0b:09:
80:ac:9d:14:c3:fc:8d:14:13:cc:26:4d:f5:30:7a:
0b:31:90:19:45:0e:32:87:77:19:d4:b5:cd:03:9e:
06:d9:c1:10:0e:4a:e8:5e:9f:22:3c:8d:76:13:be:
f3:1d:76:10:e4:04:9a:b1:d0:13:54:2f:b0:ec:e0:
44:3e:27:26:2d:5d:ff:36:0e:04:c0:76:4b:79:a0:
92:b7:d8:cf:27:3e:47:cf:d0:e7:a2:a0:2b:f1:d7:
e8:e8:1b:32:ec:b1:41:26:db:bf:b8:a7:ff:70:f8:
02:97:2d:17:bc:bc:44:2a:a5:7a:34:99:49:93:d9:
20:8c:40:02:98:7a:94:2e:c7:f5:0e:ed:93:47:67:
24:43:3c:de:1f:ea:51:f6:64:7e:b1:cd:ca:3f:cb:
5e:c2:1d:ac:25:ea:2b:0c:48:a4:59:42:6c:63:2e:
50:b0:d7:36:5b:45:70:7f:10:aa:8b:59:3c:22:9b:
e2:d5:1a:14:e5:6a:73:72:cf:cd:48:0e:d7:2b:52:
1f:12:3e:74:a8:59:a2:7a:2c:e6:fb:9a:32:05:8d:
8d:6d:39:3f:6e:21:52:2f:1a:f5:6f:cc:6c:9b:cf:
31:7f:92:26:44:94:c9:58:89:5b:67:a6:5f:ca:05:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:7A:C7:70:39:5B:DA:D2:51:AA:16:77:96:69:D5:A0:B5:3C:02
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:41:ca:d2:3f:f9:52:5a:e2:00:48:52:63:ca:9e:4d:62:4e:
70:9c:40:a2:93:0a:63:46:f2:4e:5f:ee:1f:34:0b:33:f6:ef:
17:cb:b4:02:ca:49:7f:c7:8a:1a:72:80:d5:23:40:ec:2e:96:
95:44:17:8e:70:5c:fc:b9:75:85:33:52:04:3a:ce:37:7d:d0:
aa:ac:10:c6:67:b0:b4:88:ba:eb:03:e8:48:91:1e:49:ef:8c:
e8:e6:24:84:6c:31:21:05:95:20:c1:f7:28:d4:5c:5c:2f:03:
8b:93:b5:df:10:48:b8:90:1d:eb:b2:39:8f:6d:1f:d6:83:f8:
7d:97:0a:c2:49:ab:23:eb:1c:dd:99:e9:d8:e7:28:88:e6:c0:
53:66:74:eb:25:6e:93:23:86:06:60:72:a5:cb:4c:71:61:58:
53:bf:7d:ce:d9:0b:d0:c0:52:ee:2f:c8:1f:a4:64:27:84:d4:
7c:33:cf:bd:90:3d:7d:81:78:3b:ae:70:a4:63:24:1b:16:4e:
30:17:4f:64:55:8b:90:87:63:5e:85:dd:ac:f1:8a:45:77:a7:
82:95:3d:7c:39:bc:8d:b7:02:e9:be:7f:f1:4e:89:a8:11:47:
a5:cb:3c:d7:e1:c3:9c:11:73:e6:51:e3:07:85:c9:5f:3e:89:
35:91:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:56 2025 by rpki-client