Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
File: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft (raw, json)
Hash identifier: 3rws01+4jlJVsFTd1Q+O5kVLBdCk9TUvdlXIrYJzhtk=
Subject key identifier: 40:54:03:45:E2:E5:98:C9:0C:C2:2C:EF:AC:07:AF:36:5C:D1:E1:3B
Authority key identifier: 14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
Certificate issuer: /CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Certificate serial: 019680FDDF0D1583DE4C75B4DBF03EB6252E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
Manifest number: 112B
Signing time: Tue 29 Apr 2025 10:00:43 +0000
Manifest this update: Tue 29 Apr 2025 10:00:43 +0000
Manifest next update: Wed 30 Apr 2025 10:00:43 +0000
Files and hashes: 1: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl (hash: Q/SS6Kto80HB0gvJKjjCtkt5onIyDO53an9rK4q5tkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:df:0d:15:83:de:4c:75:b4:db:f0:3e:b6:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Validity
Not Before: Apr 29 10:00:43 2025 GMT
Not After : Apr 30 10:00:43 2025 GMT
Subject: CN=40540345e2e598c90cc22cefac07af365cd1e13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:54:10:f8:31:02:5e:20:a8:4c:e5:78:9c:
2e:14:57:cb:da:73:89:c6:04:97:1d:fc:6f:04:28:
c6:76:b3:9c:67:49:c9:66:dd:1b:08:e4:34:10:d5:
a0:25:88:c6:3d:da:37:cc:56:f9:5e:df:b9:1e:50:
72:68:3b:55:e8:ea:7d:f0:71:50:48:8a:9b:80:1d:
11:ce:e8:e8:a9:0a:47:17:a1:b3:cb:03:ed:75:97:
b1:ed:b9:cb:7f:01:0c:64:78:8b:fb:87:4d:3f:b5:
93:d8:06:84:77:61:de:44:95:84:12:3b:6c:47:ad:
c0:d3:e1:73:04:0e:68:22:5d:07:b7:d0:72:43:29:
43:95:58:c0:1e:60:bd:92:78:c3:61:7f:ef:73:02:
a2:8b:f8:1b:84:1e:d0:81:a6:cd:ec:1a:60:2c:d6:
19:1d:1e:02:55:6a:90:ce:54:bb:b7:88:63:47:3a:
36:52:77:cb:61:56:0e:b1:04:c3:71:bf:3e:e8:d9:
8b:a9:60:2f:df:a1:93:5d:b6:72:5f:5b:90:d5:6c:
7b:23:00:21:b4:7f:1c:ba:28:14:8e:89:2a:51:78:
c2:60:31:7a:81:12:21:62:65:87:b8:9e:75:e8:95:
2d:b8:8b:48:65:80:1e:b0:92:99:6d:07:a6:2e:ee:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:54:03:45:E2:E5:98:C9:0C:C2:2C:EF:AC:07:AF:36:5C:D1:E1:3B
X509v3 Authority Key Identifier:
keyid:14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6c:62:71:b9:d6:a9:95:c3:43:ab:c6:23:28:6f:da:45:dd:
da:b1:9c:6a:28:69:23:30:86:1f:ba:1f:d2:c1:98:15:1d:49:
98:c9:8e:86:59:98:63:11:50:07:6f:97:51:01:ae:6b:a9:0b:
72:3e:bb:a8:14:49:42:b3:c2:9f:ca:c8:68:37:97:f7:9b:40:
c2:e0:45:6d:b4:7e:2a:9d:01:00:5b:95:3a:62:36:ae:e9:45:
a5:0e:f3:cc:43:90:4c:3c:cb:b5:1e:dd:e2:0a:ca:3d:47:12:
7c:32:85:8d:1b:e7:5c:40:e3:ad:32:6e:82:04:fa:77:41:9f:
44:4d:69:67:57:72:91:6f:a4:f4:bd:2f:eb:ff:62:24:78:f3:
7e:3b:cd:d8:55:57:fb:ec:32:14:ac:13:3b:44:79:4e:e6:3c:
85:a2:02:bb:91:d7:9c:5e:df:c3:71:da:2f:45:b9:81:43:66:
81:7d:88:43:68:29:ae:dc:1d:18:f0:73:8a:cc:ab:06:7d:b6:
bb:d7:d2:87:ff:95:4b:b6:7e:93:c1:29:37:e1:a9:d8:2b:09:
b0:03:58:f1:8a:02:e7:fc:0c:ff:48:da:7d:d7:62:b6:a4:bf:
0f:fc:6e:7c:96:3d:e5:94:9c:8a:5b:ae:3a:d7:fa:b4:ea:15:
b5:da:1b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:14 2025 by rpki-client