Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: t/ZgeAYKooolTAu2JCg/+Jwom0obVxb5ac7eNn2uCaA=
Subject key identifier: 36:E9:75:DC:D4:FA:DD:C2:2E:F1:82:D0:42:51:19:08:10:EB:1E:94
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019676B0F030D70540469B86E4673CFAA7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 10:00:29 +0000
Manifest this update: Sun 27 Apr 2025 10:00:29 +0000
Manifest next update: Mon 28 Apr 2025 10:00:29 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: etD+dq1WRvmjDp1jHVbP2Q0dWdWE2dQOAs9kAMU6ZiI=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:f0:30:d7:05:40:46:9b:86:e4:67:3c:fa:a7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Apr 27 10:00:29 2025 GMT
Not After : Apr 28 10:00:29 2025 GMT
Subject: CN=36e975dcd4faddc22ef182d04251190810eb1e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:29:e5:f8:06:eb:e0:ae:d6:18:d3:ef:ee:
23:ab:4b:16:34:b6:fe:14:59:d1:2c:f0:9b:e2:b4:
95:a5:19:df:1e:b6:2e:b5:1f:d0:fe:44:a7:54:2c:
00:da:d5:f5:ae:dc:4e:1d:3d:91:91:2a:d6:9c:7a:
6f:ea:b2:2a:52:f7:0a:5d:8f:1e:33:52:60:1f:e3:
d0:04:1b:59:64:69:16:75:99:d4:c1:55:6d:0d:20:
ba:2d:49:5f:5f:27:c9:e4:c4:0b:4f:54:b6:03:35:
42:1c:1b:1d:14:ec:2e:b9:49:8e:07:a4:8f:4d:d3:
a9:aa:cc:6c:8a:b2:90:70:b5:b1:c1:e6:63:28:61:
52:09:4b:af:0b:b1:d8:9c:8b:a1:4b:77:ab:ad:bd:
39:64:a2:52:19:73:16:90:6e:86:10:76:92:51:fd:
03:70:f0:24:c5:97:d0:2a:3b:3c:1d:c6:50:66:e1:
3e:4a:ba:0d:4e:1d:5d:90:57:70:4f:e8:13:3c:9a:
76:21:79:58:f9:f9:61:8a:8b:d7:8d:9a:40:ad:ca:
44:c7:2b:34:18:ca:f7:78:25:6b:cb:79:f1:ed:99:
b2:de:5b:0d:aa:54:b5:43:bd:62:b3:b4:c9:12:43:
01:b7:a3:55:33:41:06:cd:ee:70:52:6f:71:3a:26:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E9:75:DC:D4:FA:DD:C2:2E:F1:82:D0:42:51:19:08:10:EB:1E:94
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:92:bc:3f:77:86:7b:d0:8b:a1:4d:e4:b3:a4:c3:85:82:83:
1a:86:9b:0a:c9:b3:93:59:a2:33:92:8b:57:d7:0d:48:29:af:
65:02:e3:10:9f:ba:20:4b:de:82:f8:7b:39:2c:ce:dd:81:f9:
8f:74:d9:f9:64:56:d9:36:7d:5e:81:02:8a:98:92:01:08:8a:
8d:12:91:b0:c0:4a:ee:f1:2f:78:c3:af:77:7f:34:26:22:2a:
dc:23:00:9b:ac:4d:2f:b2:b2:cc:62:3a:c9:ea:20:b8:2d:ac:
a2:ce:3f:bf:f5:72:f8:10:54:46:c2:6f:9d:65:b3:3f:be:f6:
a3:f2:fe:98:75:63:65:c1:f3:1c:c4:ff:dd:da:0f:a5:27:a3:
5e:9d:66:4e:79:58:2c:3a:49:6e:05:79:ae:43:e9:2e:75:17:
4e:70:69:6e:a7:ce:dc:20:9a:95:7a:69:61:2f:e3:a1:69:c8:
12:ef:a4:4b:f5:30:0d:2a:28:ea:d2:3c:9e:c4:1a:96:1a:b0:
87:d4:06:c1:06:60:36:85:ee:47:0e:13:4e:13:11:44:bf:79:
1d:40:56:2b:ca:7a:3f:93:65:79:4a:01:4c:3c:7f:e3:11:9d:
c4:0e:34:f8:83:a9:97:da:25:0c:f9:f3:35:5b:91:fa:b9:5f:
63:d6:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:18 2025 by rpki-client