Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier: 9hieRDmIDsqhcifVtqUPliK/nbfxbaDbxe5PPAXxnEQ=
Subject key identifier: C2:1D:49:C4:5E:09:6A:F6:DD:80:E4:39:07:9E:EC:1F:17:D0:C4:44
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial: 0196790D2FDA04BBF70B59D0CF88E8F5EF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 21:00:29 +0000
Manifest this update: Sun 27 Apr 2025 21:00:29 +0000
Manifest next update: Mon 28 Apr 2025 21:00:29 +0000
Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: /T8HQin49V1SkSlydf66sPedQjHtBfpptQ4hBC4lrmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:2f:da:04:bb:f7:0b:59:d0:cf:88:e8:f5:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Validity
Not Before: Apr 27 21:00:29 2025 GMT
Not After : Apr 28 21:00:29 2025 GMT
Subject: CN=c21d49c45e096af6dd80e439079eec1f17d0c444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:19:46:89:8a:b1:69:0f:65:6c:32:6e:30:
03:06:f2:d4:85:fe:cd:f1:81:83:76:da:51:76:24:
e9:7c:f1:17:cb:a2:e4:fe:a1:6b:ca:77:10:0a:76:
64:43:29:b7:b7:f7:67:37:cb:25:cd:33:ab:2c:c5:
09:2e:94:91:8a:4f:e5:bf:1c:4a:e5:4e:f7:62:2d:
88:b2:79:bb:6c:4e:80:0a:ba:87:64:9b:21:fb:f0:
0b:19:ab:39:4a:05:15:af:8b:ae:ef:9b:f1:3c:5c:
4f:45:7b:82:bf:0a:dd:e1:ba:19:b7:44:ce:89:0d:
e2:e2:00:6f:b7:05:18:0a:40:a5:ed:47:63:ca:ee:
de:84:7a:dd:eb:31:3f:d0:1f:c5:0a:1b:81:85:3a:
30:97:76:eb:f8:3e:10:1c:8c:83:38:e1:9d:1c:7c:
fd:03:4a:61:89:ae:af:63:56:15:41:74:ca:39:42:
c9:8b:58:fe:d6:51:c3:9b:53:87:f5:f6:4b:0d:cc:
59:e3:72:33:f4:cf:26:fd:c4:18:70:ca:7c:f7:ea:
37:ea:6a:c0:f6:24:10:bb:b4:43:40:82:50:d6:fe:
5b:96:72:68:57:55:18:87:4b:3a:89:2e:35:55:30:
73:70:91:2a:49:21:4b:cb:c2:b9:68:5e:0e:8a:07:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:49:C4:5E:09:6A:F6:DD:80:E4:39:07:9E:EC:1F:17:D0:C4:44
X509v3 Authority Key Identifier:
keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:40:5d:23:c0:6b:2b:91:eb:d6:fb:66:7a:1c:f6:6f:82:d9:
19:7b:6a:10:d0:b0:26:f9:7f:7f:87:80:b3:66:3b:f4:cd:3c:
27:d3:ee:6e:f1:92:a5:a0:f3:5c:cf:15:d5:cf:cb:17:0a:c8:
0f:b8:75:5a:63:1c:83:24:5e:96:04:e5:f8:8d:41:59:a2:64:
93:17:2e:40:7b:12:15:fe:82:41:df:08:7a:99:21:7a:fa:32:
87:a9:37:f6:9b:27:dc:87:74:70:46:76:1e:f1:53:ad:8d:b2:
d4:00:21:bd:37:ab:f0:3e:c5:e3:2e:a8:0f:8a:dc:79:7e:ce:
79:b4:00:d1:bd:54:48:cc:cf:2e:36:11:6b:d3:ed:6a:b6:d0:
80:5b:7b:c6:b1:d1:d9:7e:83:34:2d:ff:9d:b1:be:e0:09:53:
2f:62:81:d1:57:c1:65:2c:21:64:60:52:a4:a9:fe:06:da:de:
45:0f:ff:91:28:00:9a:30:67:b0:43:e0:91:d8:21:f6:d4:9f:
5f:32:47:84:3f:04:39:4c:d0:e6:c1:c0:27:23:db:7b:3c:3d:
0a:4e:37:67:a3:cd:23:9d:64:14:2d:9d:d0:0c:37:76:6e:da:
b0:15:0a:3e:d1:51:45:cc:17:e7:04:a0:3b:6e:63:3c:ae:f2:
fc:b2:a5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:55:27 2025 by rpki-client