Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: +7XRnKX9VUVd34KyUJcKYVeBCJhERCevE2iKsIHKiqo=
Subject key identifier: 93:0A:81:F6:0C:14:C0:5F:77:A0:EA:33:68:14:A1:21:94:39:3F:32
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 0196857F1F946532F4FC1041BC7BDA9CF0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0C5B
Signing time: Wed 30 Apr 2025 07:00:22 +0000
Manifest this update: Wed 30 Apr 2025 07:00:22 +0000
Manifest next update: Thu 01 May 2025 07:00:22 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: EH7RHrCJYGudvUhmRF6/E9PvZQgb9ei63jtJSC1EB0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:1f:94:65:32:f4:fc:10:41:bc:7b:da:9c:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Apr 30 07:00:22 2025 GMT
Not After : May 1 07:00:22 2025 GMT
Subject: CN=930a81f60c14c05f77a0ea336814a12194393f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:c5:2c:cd:86:d3:3c:ae:fa:a2:48:ed:07:
0a:37:e9:6a:bd:63:fe:cf:35:41:78:c2:1a:76:f1:
48:36:16:0c:8e:a8:61:87:7c:70:9b:8b:16:53:17:
ec:26:a9:fa:b8:51:10:52:04:77:70:09:b1:a1:79:
e8:23:92:d8:53:8d:4e:61:71:cf:20:0e:90:47:46:
ce:20:7f:f4:93:e6:a4:15:01:9b:58:2d:c3:13:14:
98:9b:99:6f:85:6a:60:18:ce:d7:c9:49:12:b8:71:
81:ec:7a:bd:a5:7e:1c:86:c0:75:ea:63:52:29:e7:
e4:b8:d6:99:a6:b5:6d:21:44:30:07:47:24:2e:b0:
1e:dd:7e:03:1c:26:ed:9b:b0:c1:90:04:49:06:6f:
9f:64:38:d9:b2:63:af:56:d0:ea:58:f6:60:04:73:
44:c2:d4:4f:b9:41:d9:7b:93:88:87:bd:86:26:83:
c8:c4:8e:4f:c5:c8:a3:8c:6b:ff:ec:d7:5e:1c:04:
a2:0e:e9:ce:db:92:bb:8d:d7:62:e2:90:6e:96:51:
2b:95:8a:8a:04:5d:23:3b:28:53:04:5f:2d:14:d2:
e5:62:6f:06:e6:33:9e:17:90:26:e4:df:e8:9a:bc:
99:6a:b6:11:a0:bc:ee:77:b7:0d:ac:5c:5e:1d:cb:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0A:81:F6:0C:14:C0:5F:77:A0:EA:33:68:14:A1:21:94:39:3F:32
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d7:ae:f1:65:c4:47:88:e5:d7:c2:e9:7a:62:4a:d3:41:74:
85:63:18:7d:e2:14:88:27:30:38:bd:fe:35:1e:82:04:c6:59:
d3:49:0d:81:68:ca:f1:1f:a1:e6:e5:ad:56:42:2c:2b:47:1f:
e5:b7:53:bd:1e:58:e0:c0:3e:be:c5:1f:a3:c5:10:77:d9:4f:
6b:19:26:80:ab:44:22:68:f6:c4:5f:ce:66:da:6e:ff:1e:33:
82:15:8e:96:65:9e:db:66:8f:49:7a:61:b2:61:12:45:95:48:
12:a7:44:c1:8d:65:9f:08:5d:36:c2:c3:3c:fc:b5:8d:01:39:
e3:83:cf:af:54:ef:ce:a1:e9:6a:bd:0e:f8:f9:03:ca:d5:6a:
e4:84:4f:0e:72:58:d7:61:f1:c7:f1:50:49:a4:5c:7f:d4:83:
28:2b:3f:e6:3e:75:4e:d7:03:23:06:94:ee:ad:3d:ec:f4:04:
5f:9d:d4:a5:87:7d:1c:58:ca:5b:f6:60:1d:59:23:de:9e:f5:
74:4a:6e:83:b1:75:4b:71:64:a3:ef:30:67:7c:f5:4e:6b:45:
95:6d:98:8a:1e:08:5b:ef:0d:16:07:5a:4b:48:3b:f0:6b:3f:
de:25:55:16:9f:42:ce:97:b6:82:a3:ad:d8:c8:ae:96:d1:b9:
a0:9b:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:02:04 2025 by rpki-client