Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: 7a2CHACTZUaRLoNDIQ/aaEpQDfRpU8owhQOVR4qaV78=
Subject key identifier: 2F:6C:85:CA:5E:2A:EB:E6:F5:42:C3:0F:87:9D:51:03:D0:E4:D3:BF
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019654930C91591C78627480842DC20BCBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 19:00:45 +0000
Manifest this update: Sun 20 Apr 2025 19:00:45 +0000
Manifest next update: Mon 21 Apr 2025 19:00:45 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: rhUDDF3yh2l2GmQvV0MM2ndK9iz5XL20ooV+4oYeUY4=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:0c:91:59:1c:78:62:74:80:84:2d:c2:0b:cb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Apr 20 19:00:45 2025 GMT
Not After : Apr 21 19:00:45 2025 GMT
Subject: CN=2f6c85ca5e2aebe6f542c30f879d5103d0e4d3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:6d:2e:b5:3a:77:80:e3:f0:9c:15:55:f1:
60:30:16:37:7c:d1:f8:0a:5f:80:76:d7:cc:e2:7f:
cc:3c:ff:75:4a:dc:61:b7:ac:90:1a:2c:8b:98:25:
40:f7:6d:2a:1c:6a:e6:d4:7e:16:0b:d5:a4:26:e9:
de:da:9e:d7:01:fa:bc:90:78:f0:a2:b9:b7:38:20:
09:91:00:d5:b8:ba:c5:79:a5:ee:6c:a8:4e:e6:52:
0b:a0:53:90:0c:91:d2:97:f7:49:6f:c8:7f:95:c4:
5f:fd:95:c8:d1:f6:e9:db:ee:c1:5d:e4:31:a7:5d:
f0:bc:1e:e3:94:62:34:47:b7:63:32:48:1b:66:fe:
1a:02:84:4c:5c:e5:ca:46:04:10:09:5e:a0:1e:89:
f4:92:3c:fb:fb:d3:75:40:b3:d1:73:d3:10:e8:2e:
e1:48:cb:69:f4:d1:27:38:fe:ed:bf:7c:a3:37:c8:
a5:13:ae:50:56:15:ab:63:29:4c:e4:35:0d:a8:1f:
3a:fa:09:23:cd:27:1e:d6:29:10:37:4f:45:ea:b9:
36:a1:98:41:87:73:82:b6:d4:eb:d4:02:39:7c:24:
ea:ad:60:f1:24:a0:7a:cc:db:85:c0:68:35:91:df:
0f:b6:04:39:2f:fe:0a:81:85:62:d3:3b:05:3b:83:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6C:85:CA:5E:2A:EB:E6:F5:42:C3:0F:87:9D:51:03:D0:E4:D3:BF
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cd:c5:85:60:bc:b5:d3:80:53:76:77:84:a7:16:4d:74:d1:
b2:b5:04:b8:22:ff:3f:36:17:18:ba:f1:83:9c:6d:d6:ee:65:
dd:64:48:1b:dd:6c:21:a7:c7:b2:3c:40:92:39:d5:97:00:57:
d8:b0:9e:35:6d:8a:8c:08:c6:99:fd:0c:6f:dd:dc:0d:4d:75:
ad:84:85:95:8e:30:34:c9:11:d2:ba:87:05:80:fa:de:7f:5b:
2e:44:cd:d9:e8:78:5b:26:a3:a5:11:fb:fe:bc:85:fe:e1:84:
a8:1e:3f:d0:40:27:04:64:c5:1b:8d:a7:36:ea:23:d1:7e:4c:
d8:26:5c:66:20:76:08:98:56:3e:53:fd:05:d4:ba:ba:1f:59:
ee:f3:d5:c0:f2:19:82:a2:c3:72:5b:9d:b0:81:0f:3d:40:31:
7a:83:fd:ca:30:36:cf:2d:e9:6e:85:54:f6:e5:3e:47:89:51:
15:57:a6:2f:7d:f3:45:cd:30:85:33:14:eb:6b:53:cb:c7:96:
a6:dd:b3:65:4c:60:f3:b1:d3:ed:fa:88:56:46:45:64:e1:98:
38:41:d8:a2:75:bb:c3:ca:a2:71:47:d7:99:80:88:c7:4b:17:
56:7a:0c:95:11:88:fe:80:b0:9e:f7:48:a0:24:7b:de:ba:d5:
77:ca:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:32 2025 by rpki-client