Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: MChfD3YO2/M/BMGgqFHudS6D43Z14tTAaNlS24nahBc=
Subject key identifier: 4B:63:5A:1E:BA:CF:5A:29:57:35:0F:E5:41:05:97:71:09:9D:DE:E0
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 01967E340683B703995615BD0ABEC52656D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 02E1
Signing time: Mon 28 Apr 2025 21:01:00 +0000
Manifest this update: Mon 28 Apr 2025 21:01:00 +0000
Manifest next update: Tue 29 Apr 2025 21:01:00 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: 5J/ft2usw+r0Pxx9jWtbItXyvY0swfRc93wA0JScG9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:06:83:b7:03:99:56:15:bd:0a:be:c5:26:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Apr 28 21:01:00 2025 GMT
Not After : Apr 29 21:01:00 2025 GMT
Subject: CN=4b635a1ebacf5a2957350fe541059771099ddee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:5f:a3:7b:64:ff:06:d7:4a:77:c3:c5:5f:
85:ae:73:1c:b7:8b:a3:00:45:9c:4f:5e:a4:cd:70:
e2:e1:a4:0b:40:1b:7a:6e:19:ab:6c:71:3b:fe:3d:
f8:08:74:61:98:56:6f:c0:83:83:dd:19:17:f0:07:
26:79:36:5d:94:e0:21:7f:7f:7a:e3:aa:41:f5:e6:
93:04:82:e2:52:95:b5:f8:74:9a:cf:40:85:e3:36:
f8:bc:cb:ad:b3:02:34:77:2b:e4:8e:7c:18:80:d1:
39:7a:a7:93:07:95:6f:90:dd:7a:00:51:69:49:d3:
c3:34:eb:17:ba:cf:04:19:4c:41:22:a1:21:c7:79:
a1:42:41:36:4d:de:ba:d3:f2:0c:cd:03:ca:9b:df:
12:45:60:0b:24:44:63:ad:da:ef:a0:76:15:ba:41:
74:0e:e0:a5:bd:53:78:bf:47:c1:02:42:4b:f6:6e:
8f:a0:d1:a9:a7:ee:37:d3:81:85:08:36:ee:27:c0:
a0:39:3e:aa:bb:d7:30:a3:ef:8c:74:43:5b:80:ba:
07:28:cc:bf:e5:8d:8e:af:e3:07:72:b2:0a:42:07:
1f:82:66:cc:db:69:e2:3e:a3:d6:e7:e5:f6:dc:e9:
49:6d:ec:84:d6:7a:44:c8:0f:67:82:e0:81:74:6e:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:5A:1E:BA:CF:5A:29:57:35:0F:E5:41:05:97:71:09:9D:DE:E0
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:92:77:e8:b0:0b:bd:41:8b:2f:e1:b6:64:cb:03:8b:df:10:
26:41:a7:50:04:9b:56:64:10:d0:95:a7:44:45:6c:97:7f:20:
49:4e:63:4e:04:97:e5:87:c6:ce:9e:4d:99:e4:8d:bd:15:f5:
5c:3b:6b:4c:fa:87:cb:61:93:00:c8:b5:0a:8d:1e:00:b8:ab:
bd:a6:0a:3c:0c:4e:bc:1a:12:ca:f0:f9:cc:d9:f5:25:83:b5:
ee:56:12:d4:fa:ea:3b:a6:56:6b:9d:e7:f6:0e:d9:5a:98:1c:
64:83:b3:37:4e:d8:16:11:e7:c0:3e:a6:48:e4:7d:1f:c4:09:
db:d3:e5:a7:ec:a2:c9:2b:d8:bf:64:67:69:ee:fc:8d:8a:80:
1e:e7:3a:44:83:a3:27:34:19:78:3e:e9:c2:37:4b:a0:76:90:
62:f3:a6:6d:03:cb:a7:a6:6d:9d:74:0b:0a:fc:0f:ad:c7:99:
cf:0c:7a:55:b0:3a:97:70:2f:59:c5:df:48:b7:33:7f:07:f8:
08:95:c5:f4:ad:8a:ec:ac:7a:51:be:9d:19:be:95:24:7f:ac:
c5:7d:ce:72:5d:1b:2a:4f:a3:3d:4a:b6:e8:94:ae:b8:d5:41:
6e:f8:c5:4c:ea:e8:51:15:b4:ee:9d:9f:d2:15:88:fb:27:e2:
7b:57:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:23 2025 by rpki-client