Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier: S43X6Lgh2DfP47ZvD+z81nfuqmTtZlJRdnMvyGgN32A=
Subject key identifier: 50:4B:E0:81:F7:D6:CE:94:92:DB:6C:F1:78:E4:6C:19:5F:C9:F3:F1
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial: 01967567338588F30C75D7BF94EAA81EC620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number: 0C17
Signing time: Sun 27 Apr 2025 04:00:19 +0000
Manifest this update: Sun 27 Apr 2025 04:00:19 +0000
Manifest next update: Mon 28 Apr 2025 04:00:19 +0000
Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: l02YTo3IGAThROJ6g7y5m8KI8Jx8hqbQJpH0+WSUCmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:33:85:88:f3:0c:75:d7:bf:94:ea:a8:1e:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Validity
Not Before: Apr 27 04:00:19 2025 GMT
Not After : Apr 28 04:00:19 2025 GMT
Subject: CN=504be081f7d6ce9492db6cf178e46c195fc9f3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:72:37:7c:0c:be:98:b9:ca:e1:fc:cb:0e:
04:4c:3a:b5:60:79:66:a0:7c:ba:24:2f:a0:ae:50:
f8:3d:9b:8f:da:63:c2:b8:fc:ff:63:c7:bb:45:8e:
2a:ac:57:ba:9b:ab:cd:fe:16:b8:60:db:26:13:2d:
70:44:4a:1c:1f:9c:53:ae:aa:df:7d:53:4c:07:ea:
28:35:35:aa:f6:d3:3e:f6:b9:9e:b6:c1:af:f3:e9:
a5:e8:15:75:d7:ea:11:30:6b:62:5c:bc:9b:3f:b1:
f0:c8:05:85:d8:07:ca:b6:32:77:ec:5e:b5:df:6a:
fe:9c:2d:ba:53:39:12:e9:a4:d1:68:f1:ac:27:b7:
51:38:47:aa:88:e6:91:5b:83:71:61:52:82:a1:fd:
91:66:c7:9e:e3:b4:55:72:34:d4:21:b5:e0:f4:a1:
bc:25:5d:80:d5:c0:be:f8:6a:21:7b:c0:20:1f:41:
3a:bb:93:6d:c3:0d:9c:f8:76:41:71:57:7e:f2:59:
ed:18:96:f7:08:a2:f9:97:aa:fb:f6:25:6a:cf:8d:
c5:91:c4:7d:de:c6:75:5f:e7:81:e6:67:fe:b3:de:
42:39:d2:6b:33:29:5f:c0:97:5f:0e:61:6c:2c:e6:
a5:1d:b4:bf:93:47:e1:a4:5b:f0:d7:96:7f:e6:33:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4B:E0:81:F7:D6:CE:94:92:DB:6C:F1:78:E4:6C:19:5F:C9:F3:F1
X509v3 Authority Key Identifier:
keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:80:46:b3:d4:cf:21:63:c0:d5:2d:ff:22:3d:bc:ad:9d:
02:19:68:47:3a:75:80:4b:73:48:95:73:0d:31:08:e2:58:3a:
73:2d:41:9f:84:29:72:71:76:86:a0:90:73:2b:37:7d:0d:72:
53:23:ce:d3:84:7b:8c:ae:0c:8b:f4:04:a3:1f:21:fe:d6:c3:
5e:2c:04:f9:90:9e:c0:b9:29:54:ab:7f:49:59:d6:de:e1:fa:
01:4f:af:c5:4b:fe:61:27:41:59:82:1c:8a:51:84:8a:4e:2c:
c3:54:1e:53:7e:da:6b:08:96:db:69:6a:25:1d:62:ca:d0:f3:
6e:da:2a:87:01:a4:9c:b4:c3:9e:20:5d:b3:47:7a:14:8d:3f:
c8:c5:38:a8:9d:76:a8:29:85:f1:b2:59:c2:86:34:4e:55:43:
0b:ed:7b:53:bc:83:dd:b3:26:98:2c:37:ec:55:cc:9c:74:c2:
6f:38:9a:e9:0f:f7:4a:3f:31:3f:47:a0:5e:e4:17:16:4b:48:
98:6e:e2:38:8a:43:15:a6:c3:72:88:11:10:0b:81:70:67:5a:
96:73:cc:fb:b9:0b:4b:34:5b:f5:06:4c:06:69:87:16:b4:dc:
8d:2e:ce:ac:3e:0d:3a:59:70:a0:42:67:41:ea:9e:f4:70:72:
25:97:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:59 2025 by rpki-client