Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: 1wbDLjHwNmBBGlmPQ+ZzdmDSD4nm/g7aw7Egrh0J3rM=
Subject key identifier: 1C:47:F0:8E:AC:4B:49:8B:F0:34:7E:D3:8B:66:AD:87:95:2B:05:E5
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019655375EE484CA07C7EECE57AFA2181CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0E57
Signing time: Sun 20 Apr 2025 22:00:14 +0000
Manifest this update: Sun 20 Apr 2025 22:00:14 +0000
Manifest next update: Mon 21 Apr 2025 22:00:14 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: JMBXwfvv04eSF8+R09lRkXhnzXg9lOLZKakWQL2x27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:5e:e4:84:ca:07:c7:ee:ce:57:af:a2:18:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Apr 20 22:00:14 2025 GMT
Not After : Apr 21 22:00:14 2025 GMT
Subject: CN=1c47f08eac4b498bf0347ed38b66ad87952b05e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:16:52:d2:a6:2e:b8:2d:2a:e0:39:60:95:
85:08:bf:a2:0d:e8:5b:9c:4f:5a:ae:34:df:40:c2:
75:d8:4c:6d:bb:a1:03:2b:c6:9c:5e:34:fb:46:28:
7b:a4:63:b3:c3:5d:ee:7a:0c:e5:44:a6:0f:62:a3:
bc:7a:0a:1c:a4:9a:fc:e2:3c:00:97:16:56:d2:f9:
7b:84:8e:b4:8b:60:38:36:0c:5d:13:ea:62:0f:35:
21:60:e4:69:52:72:a7:b5:d7:32:b1:72:fb:e6:ae:
54:d7:b7:71:95:2d:1f:0d:e3:1f:17:b0:56:3c:86:
b7:16:7c:5f:4f:84:6d:f8:34:f3:fd:af:c2:87:cf:
07:7e:0b:7a:20:cf:fd:1f:a4:b9:44:0a:ec:f6:51:
d7:0b:69:b5:80:3a:e0:b3:73:84:72:57:54:19:92:
07:30:b6:72:be:80:b0:68:f2:2f:30:69:49:04:49:
65:84:66:72:ae:0e:8b:74:87:bc:a2:9f:93:cb:67:
cc:46:fb:99:a1:2e:d5:13:80:51:29:ec:41:09:ba:
d9:9b:60:cd:55:52:1e:f8:fa:ab:b8:55:13:34:d4:
44:52:d2:6e:45:1c:8a:99:f0:f6:6f:5d:97:13:7d:
aa:f5:65:11:ab:de:29:ab:21:f2:09:41:36:e6:7f:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:47:F0:8E:AC:4B:49:8B:F0:34:7E:D3:8B:66:AD:87:95:2B:05:E5
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e1:ce:d7:e1:91:87:f2:b7:ae:c6:1e:f4:59:d7:fd:d8:e8:
f9:72:9f:02:68:1a:44:84:70:77:53:7e:98:67:39:ba:13:e5:
42:c3:5e:00:62:56:76:1f:f8:42:b7:b3:86:8c:dd:48:38:0e:
eb:20:9a:d4:39:48:9b:47:3b:bf:f9:11:89:71:9b:bb:78:b3:
53:9b:58:0b:49:0b:4f:1b:c3:d7:8a:3d:ee:45:b8:20:80:bb:
d2:a7:b2:09:bf:72:56:41:52:0c:08:27:88:bc:0d:17:6f:94:
60:78:c2:f3:68:bb:00:25:7f:bd:ff:a9:e1:80:50:4d:7b:20:
04:be:fb:ec:90:d5:e2:46:98:85:d9:50:d2:51:15:90:12:86:
f5:23:64:3d:c3:d0:31:0b:99:1d:6d:6d:16:3b:33:8d:67:d4:
f3:c6:3c:16:16:f4:03:7a:38:ac:f7:21:a4:bc:66:7c:07:37:
31:0a:a6:99:af:0a:db:cd:1b:a0:57:c8:b7:1e:81:d4:76:02:
cc:1d:60:e7:b8:39:d9:cf:2f:bf:c3:c9:85:e3:fb:74:b4:68:
47:ec:35:79:62:8c:ca:bb:da:fd:55:83:00:c4:49:df:17:dc:
37:59:3f:10:c3:a3:50:4d:ea:d4:b9:3c:10:be:d1:f9:b5:43:
9f:b3:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:35:05 2025 by rpki-client