Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: /oZg90+WOVv51aejBIMZ5VcsNa2U5RVF2bMsq4lRDI0=
Subject key identifier: 52:85:BC:1E:9E:D8:FD:FD:B3:05:2E:F2:ED:37:F0:AF:AB:DE:B4:AD
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 0196A6F86BDDC027D0048826DE56F8F3B405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 1525
Signing time: Tue 06 May 2025 19:00:20 +0000
Manifest this update: Tue 06 May 2025 19:00:20 +0000
Manifest next update: Wed 07 May 2025 19:00:20 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: cc2a7ADRdcuV/EyE4TA42rs5m//4o09arLazB3dp+Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:6b:dd:c0:27:d0:04:88:26:de:56:f8:f3:b4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: May 6 19:00:20 2025 GMT
Not After : May 7 19:00:20 2025 GMT
Subject: CN=5285bc1e9ed8fdfdb3052ef2ed37f0afabdeb4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:41:fb:26:1e:c4:23:28:78:50:16:48:9c:96:
c2:6a:50:ae:12:d3:d0:26:18:d6:b2:af:f5:15:5a:
b8:93:72:f8:8c:20:bf:a9:78:eb:fc:5a:bc:d2:81:
f6:5b:98:21:67:06:ca:09:e8:c8:5e:06:00:8d:da:
52:7f:64:63:51:09:c6:4f:56:7f:12:20:8c:17:3a:
64:2e:b1:d3:ba:d6:7d:46:81:1a:b5:6d:05:ab:e0:
1b:52:a7:af:54:56:bb:8c:05:a1:98:e8:81:6f:67:
96:40:8c:1d:77:5d:77:f2:56:86:59:b0:03:35:3d:
6c:86:5a:65:1a:6f:3a:de:bd:15:3b:f9:b1:e6:dd:
37:b7:35:a8:b2:3a:da:34:76:5b:27:b1:b7:9e:a8:
cf:47:ed:3a:94:c7:81:9c:a2:7e:13:32:21:c6:df:
49:8b:8a:5f:b9:4c:01:9c:89:c4:66:3d:a7:69:ba:
09:f4:90:d8:8d:8b:5a:2c:03:78:6f:6c:0d:79:2f:
05:f6:23:cf:ae:b7:e0:1d:40:f3:40:37:42:21:d6:
fc:d9:8f:2f:2f:e6:f6:2b:32:b9:7e:ca:e9:65:d2:
e7:b7:5e:67:68:2e:d8:b0:98:64:37:dd:38:f7:b3:
41:ed:3f:6c:65:be:6c:38:7a:8b:16:66:4d:db:f3:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:BC:1E:9E:D8:FD:FD:B3:05:2E:F2:ED:37:F0:AF:AB:DE:B4:AD
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f9:5e:11:1d:f2:ce:df:e4:4a:18:f8:dd:e1:b9:79:06:3b:
fd:e8:aa:ff:36:55:b9:06:6f:63:7c:9a:2e:3e:09:10:d4:8d:
44:90:61:14:58:c9:92:1c:7a:ca:3f:ab:05:22:70:ba:13:09:
3b:08:26:15:fd:42:8f:35:fb:5f:03:98:ae:97:f4:e0:a4:07:
4c:fd:0d:a8:0f:f8:1a:42:d7:ed:92:9d:cf:ed:a9:cd:83:87:
39:ce:c2:41:8e:d7:39:26:81:3e:fa:a6:5b:3b:9b:3e:55:3b:
c8:bf:15:31:40:95:47:fb:49:9d:1e:35:01:87:8a:0e:05:61:
ae:a6:ac:26:34:0d:06:60:e8:76:0c:16:c7:d8:46:03:a2:c5:
f2:56:23:6d:0d:cf:0f:02:5a:ef:61:1e:83:35:57:ca:ff:47:
c0:5c:63:67:3b:68:4c:fb:e2:bc:2e:61:79:f9:a3:27:a6:55:
6c:1e:f1:c3:56:72:1c:18:52:d6:b7:8a:6f:0a:50:c0:1e:38:
d2:11:cc:51:00:cb:ba:93:e7:7d:34:d0:7b:cf:1b:3f:32:bd:
ff:b0:c0:82:66:3d:f4:3b:dc:a6:01:cf:51:9e:49:5f:3f:d5:
c4:ba:98:b6:52:ff:69:dd:04:12:33:01:94:b6:ff:67:15:c9:
b9:32:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:14:09 2025 by rpki-client