Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: S4W37uRSnFObzF6/R4dx0yuQspkcPBiTpy2l4we61W0=
Subject key identifier: BF:59:1D:BF:9F:59:5F:0E:5B:A3:DF:EC:BF:F4:B1:F2:7C:C5:F3:AE
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 01965DCD7BAD7782289B5220F9516A524CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 0814
Signing time: Tue 22 Apr 2025 14:01:09 +0000
Manifest this update: Tue 22 Apr 2025 14:01:09 +0000
Manifest next update: Wed 23 Apr 2025 14:01:09 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: NprCiWeZKo6NIMyKnoja3EfdwFDa15BGq0DvgL6C3kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:7b:ad:77:82:28:9b:52:20:f9:51:6a:52:4c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Apr 22 14:01:09 2025 GMT
Not After : Apr 23 14:01:09 2025 GMT
Subject: CN=bf591dbf9f595f0e5ba3dfecbff4b1f27cc5f3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:2e:c8:b0:62:28:db:d3:a5:04:9f:53:5e:
1c:f8:e8:32:5c:21:17:25:85:38:a7:47:13:83:89:
73:cc:09:f3:50:aa:2a:59:3a:38:b7:2c:41:6c:1b:
d9:a9:e6:e8:b8:d7:48:68:8c:2d:f8:f2:9b:26:1d:
40:5c:bb:00:c1:a8:2b:e9:86:42:41:bd:c9:e1:38:
2a:3d:45:2b:68:ff:17:f9:90:65:8e:be:c6:9b:10:
70:06:4c:99:90:ab:d8:00:d9:e3:19:4d:98:0c:78:
be:b7:3b:38:77:cf:e4:7b:44:c7:3c:31:88:6b:b8:
f1:a6:f0:15:56:7c:7e:c5:45:f1:c1:9a:55:00:d8:
3c:d4:70:c0:32:4f:b8:6d:b4:f8:6a:70:a1:8d:00:
bf:74:09:b4:8a:4a:41:ca:21:b5:01:e9:9e:ae:50:
f2:1a:97:9c:18:72:cf:c6:c3:2f:51:dc:ac:a4:16:
9e:11:e3:b0:59:37:be:3a:3a:b5:65:f1:85:f3:ea:
50:c5:bc:63:9e:0a:22:73:95:bd:ce:78:61:af:a1:
b5:f3:69:ef:b3:0f:08:4d:8e:f4:6b:71:a0:26:4c:
1e:ba:6d:8e:3a:b3:41:88:9d:55:b7:fc:f2:53:bf:
ba:1a:c2:fd:cc:62:aa:25:f7:8f:80:24:76:d5:7e:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:59:1D:BF:9F:59:5F:0E:5B:A3:DF:EC:BF:F4:B1:F2:7C:C5:F3:AE
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:06:ff:90:f1:28:8f:8d:70:02:65:f6:34:7c:74:58:cb:b7:
5e:ba:33:c0:cb:e7:6f:07:ba:28:dd:4c:55:d5:0f:41:c5:25:
75:51:09:9d:44:ed:c1:7e:50:32:62:96:5a:42:bb:75:eb:f7:
1c:bf:32:21:4d:c0:f8:d0:f8:5b:87:6d:2b:29:7d:7e:7e:18:
be:c6:c0:33:79:ce:df:6d:56:5e:0b:88:f3:de:1e:4e:f0:bb:
a5:71:10:97:2e:79:0a:e8:51:b7:a8:5b:7c:ce:05:b3:06:87:
49:45:f8:5a:6f:56:43:bf:ac:21:1c:5d:b8:f6:c2:3e:fc:b7:
01:ba:f1:ef:f4:85:b0:5c:fb:d0:b1:a2:cc:69:48:75:77:88:
95:92:04:81:a1:6a:cd:01:2e:00:ad:10:e7:8b:05:94:42:0f:
1a:cb:4e:77:3d:39:f7:f8:b8:38:95:20:b8:06:88:bb:47:d0:
ca:eb:c3:42:c4:7b:30:54:84:06:cc:e4:33:8e:a3:7f:06:64:
1e:3c:32:43:9f:bf:26:5d:96:1a:0a:a3:5f:74:86:5b:d1:0d:
96:b3:5c:a6:6f:e5:1b:2b:aa:a7:32:86:d5:63:d0:88:79:65:
a4:e3:05:ca:60:90:65:3e:d1:1e:d8:2b:32:61:b5:0e:1c:7c:
a7:e2:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:01 2025 by rpki-client