Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier: my0sUnAIRU4pRs4cX17Qk/FBzoSkaoq3JDzTy9ur3Hg=
Subject key identifier: FE:C4:56:70:B4:27:B8:B2:D5:69:C9:73:CC:7C:C0:E3:35:7B:AD:0B
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer: /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial: 019679E8E9A6B32B8E5BD6AD0479EDFEFDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number: 150D
Signing time: Mon 28 Apr 2025 01:00:29 +0000
Manifest this update: Mon 28 Apr 2025 01:00:29 +0000
Manifest next update: Tue 29 Apr 2025 01:00:29 +0000
Files and hashes: 1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: BmdNJ/jClR8GqXFePfAzlwpIkSTP5iXDZwKxpFtrGfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:e9:a6:b3:2b:8e:5b:d6:ad:04:79:ed:fe:fd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
Validity
Not Before: Apr 28 01:00:29 2025 GMT
Not After : Apr 29 01:00:29 2025 GMT
Subject: CN=fec45670b427b8b2d569c973cc7cc0e3357bad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:e4:36:02:c6:b5:51:d0:d0:45:96:ca:9c:
59:4f:eb:bb:16:2e:67:d2:51:58:23:c6:2c:b3:58:
cf:62:45:db:5a:e9:61:ab:6b:41:78:66:c3:ec:ff:
fc:80:17:ca:f5:ae:6b:f1:2c:3d:28:12:bd:96:e8:
26:c8:c9:f5:fe:b5:5c:30:52:6e:ff:b5:da:ef:d5:
4d:17:ab:77:a0:90:11:5e:75:bd:af:0c:65:7c:47:
a9:32:de:dd:9d:4a:1a:0b:a1:c2:d3:cc:fd:5e:c0:
d9:15:26:55:c7:c5:07:d4:9d:30:8f:47:e8:6b:5f:
ec:c1:51:73:9c:4e:70:2d:e6:42:a0:1b:8f:b4:36:
fd:d7:a1:a4:73:7d:c4:cd:6c:13:b7:d6:ba:20:c2:
d2:43:7e:30:19:15:a7:10:b8:e1:f7:8c:c6:ce:0f:
d3:d1:03:ca:aa:3c:9c:ff:b2:fa:d3:87:9b:5e:98:
08:e8:f0:9a:f7:91:c3:1b:90:6c:3e:d6:e0:5f:0f:
6b:2b:28:16:cc:09:8d:9d:f4:06:d1:6e:83:a3:4a:
ab:8f:d6:06:cb:d0:cb:b9:4d:36:65:fb:ea:5c:b5:
74:3e:4f:7e:61:c6:82:c1:33:67:97:61:39:aa:e6:
03:ef:b4:d4:e1:f4:4d:86:19:58:53:92:b0:35:02:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:56:70:B4:27:B8:B2:D5:69:C9:73:CC:7C:C0:E3:35:7B:AD:0B
X509v3 Authority Key Identifier:
keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:41:d3:03:df:63:f6:f7:51:5e:68:10:1c:cd:e1:18:ef:2b:
94:ca:25:86:34:da:07:90:0f:6c:37:61:11:8f:2c:af:45:fc:
52:96:2a:35:bf:b6:ca:b0:3a:19:0a:3c:ed:b7:ca:41:8b:d5:
87:e8:b2:35:b1:c5:dd:bd:ba:41:7d:4b:15:dc:d7:d8:58:d8:
e7:d2:65:25:11:33:4a:2d:aa:7f:e7:41:06:76:cf:91:c7:b1:
1e:d1:19:06:a9:23:5c:20:a0:73:7b:a4:92:67:34:d8:1f:fd:
37:8c:54:e2:6c:a2:c2:bb:ce:2e:af:76:32:c3:1e:89:70:ff:
c0:e5:ef:b3:65:28:32:5c:87:dd:1a:f3:73:fa:44:e2:ba:a2:
8b:ad:45:35:da:0c:dd:1c:6b:21:51:b0:da:53:e1:ec:e1:21:
31:02:81:c0:1b:1f:3f:b8:ec:21:0e:c4:65:62:ed:1b:1d:25:
50:fd:ce:a0:79:95:8c:40:7f:9e:a8:ee:61:57:5e:09:c1:51:
16:2d:0c:fe:aa:fe:6b:a8:2a:11:1e:1d:d5:1f:18:30:f4:44:
97:92:c0:87:53:05:79:de:6d:92:cc:95:fa:f7:d5:47:87:8c:
ec:9a:c8:cf:b1:34:1e:d8:47:7c:47:b9:5d:7a:3d:5d:dc:1f:
0f:00:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:22:20 2025 by rpki-client