Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: sPZJc5GgoXMKj4va8ILe8rr0S0rCW4VQjCobGznxcGs=
Subject key identifier: 71:F7:BB:D7:62:F9:5B:09:5B:06:07:EA:6D:D2:A1:0E:86:04:78:F9
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 01967454C8FC9F4E3D964691D3CBDEEC263F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0920
Signing time: Sat 26 Apr 2025 23:00:35 +0000
Manifest this update: Sat 26 Apr 2025 23:00:35 +0000
Manifest next update: Sun 27 Apr 2025 23:00:35 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: gKbRJmiJ2rn1Dci8mUD0hIfKpphtnH+qTtzt3UvJUqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:c8:fc:9f:4e:3d:96:46:91:d3:cb:de:ec:26:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Apr 26 23:00:35 2025 GMT
Not After : Apr 27 23:00:35 2025 GMT
Subject: CN=71f7bbd762f95b095b0607ea6dd2a10e860478f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:60:6e:cb:f7:1e:13:bd:f3:99:05:17:01:
30:3c:1c:c7:ba:d4:5e:60:a4:7a:67:fb:c3:61:1c:
c8:96:b8:20:1c:a3:21:80:a9:70:e7:10:d0:bf:0f:
c4:6e:ad:45:21:c0:3b:61:d7:aa:04:47:42:b9:4d:
62:f5:0b:10:29:88:ca:ad:1f:f5:3a:a3:ba:40:28:
73:91:f5:68:c9:7b:3a:85:30:c4:50:26:aa:c4:97:
d9:3b:ef:36:70:66:50:9f:b6:41:43:07:28:e5:b7:
45:73:d6:f9:0a:51:90:64:ae:12:a5:6f:34:a9:6a:
9b:d5:68:cc:01:e5:a0:d4:e5:ed:ff:25:d1:75:29:
7a:49:58:e5:97:f2:c8:b3:83:7f:df:3f:c0:ed:ef:
79:ec:69:7f:79:9a:f4:b8:13:ff:10:8c:af:cb:1a:
57:0d:77:f3:2c:4d:ce:f7:cf:95:17:da:4f:c7:30:
64:ed:82:8b:21:95:c8:9e:04:4e:03:f6:f4:f0:33:
89:cf:1c:17:90:1a:79:d9:ed:7a:b3:1d:87:0a:e1:
a9:cd:c2:5b:e5:33:be:64:48:f3:54:fe:f0:ea:8e:
bf:8b:f3:22:11:ea:75:09:5a:7c:b2:43:b4:9a:b5:
be:62:58:d4:70:fc:dd:58:e8:e2:f5:2d:82:3c:34:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:BB:D7:62:F9:5B:09:5B:06:07:EA:6D:D2:A1:0E:86:04:78:F9
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:8d:a6:61:99:d4:63:f0:d3:d0:d3:4e:c0:89:4e:07:d8:62:
13:4b:8a:05:a6:b7:f3:01:e5:ce:1f:0c:04:12:f2:b5:b4:14:
1c:81:c3:08:02:f4:7b:ae:50:16:34:fd:ad:b9:4f:74:46:b7:
7d:96:b3:62:e3:12:95:1b:bf:50:a5:31:90:8e:57:10:fb:d7:
dd:b1:5b:93:e7:47:01:9c:89:ec:c1:30:5a:5f:48:10:73:21:
dd:a4:ed:f9:8d:3b:a3:37:b6:09:ce:d7:0a:d3:51:99:03:9f:
59:25:68:d1:55:c2:dc:61:dd:59:40:fb:7b:5c:6c:44:67:e6:
af:b9:78:1e:05:38:a2:78:71:28:5e:c4:56:66:27:d8:c3:22:
2c:d0:37:04:29:92:ff:9f:86:87:70:e5:47:11:10:98:03:57:
31:94:95:1e:c8:4e:56:63:7d:91:62:5b:0e:40:a5:50:78:f8:
07:fe:d9:c2:47:26:bf:c9:06:2e:b6:fa:e8:e7:31:db:df:68:
a1:d4:b6:ed:fd:55:e9:31:48:9d:68:43:70:42:7b:f9:57:83:
fd:c8:a0:2b:34:aa:30:c6:2f:ed:7d:15:79:9e:a7:ef:b6:75:
66:44:97:d5:fa:87:70:f2:7d:91:d0:04:bc:17:a7:45:5c:ed:
7a:b1:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:10 2025 by rpki-client