Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: aA0tWtZgZHsnmHuhT509NVlm3uszlARVCVT1HVpu8og=
Subject key identifier: 43:B4:4B:82:DD:B9:60:64:78:36:87:C4:CB:9D:80:94:45:C2:8E:DF
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 01960A55DB943A1DC5AC5A678B785BEE6645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 02C5
Signing time: Sun 06 Apr 2025 09:02:00 +0000
Manifest this update: Sun 06 Apr 2025 09:02:00 +0000
Manifest next update: Mon 07 Apr 2025 09:02:00 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: GQmBhjka655+PUu+LECzkHW7MaMr78jDfDOFjN3K7SE=)
2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
3: mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa (hash: MlJtJ+9IYVgqHxEydx7ywPk31bzQHuAZBNNJFqPMbXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:55:db:94:3a:1d:c5:ac:5a:67:8b:78:5b:ee:66:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Apr 6 09:02:00 2025 GMT
Not After : Apr 7 09:02:00 2025 GMT
Subject: CN=43b44b82ddb96064783687c4cb9d809445c28edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:ce:d1:60:3c:a0:be:05:23:74:58:66:df:
4f:cc:53:8c:cd:0c:46:f2:b1:ff:b8:05:63:49:f6:
ef:f9:9d:40:0f:a4:d6:8d:9b:1e:6c:e4:29:e4:a4:
18:9e:0a:6e:bc:95:ef:fb:21:d5:e2:e6:0d:7d:f7:
8f:a4:c5:8e:7a:8c:91:13:50:86:e3:fd:d2:29:d8:
c4:64:43:fe:67:49:76:20:5f:c4:4b:e4:50:97:c5:
79:67:78:7d:a2:22:7e:9f:12:83:ff:81:ff:b4:2d:
b1:06:50:c7:3c:7b:b5:1a:83:ce:af:09:6d:b2:35:
84:19:75:fe:fb:55:b6:44:ec:0c:39:ac:fd:35:b7:
a9:98:45:c4:27:16:14:af:e4:a5:34:bc:54:d4:45:
2e:ec:13:8b:e2:9a:1c:5d:01:49:08:51:f5:26:6d:
a8:e6:ff:d7:4f:94:32:6a:b1:0e:23:95:62:d5:78:
a0:c5:59:c1:e7:8a:55:f9:df:b9:42:5f:47:94:1b:
ab:48:5f:f6:f6:a5:5b:7d:af:83:78:0a:11:92:77:
64:a5:a3:d2:9f:a6:57:5a:b9:57:5c:e5:87:e1:7e:
ec:5f:26:d6:8a:2b:45:dd:df:cb:df:69:7c:cb:4e:
18:df:3f:67:42:b9:5c:40:49:50:e4:d5:e8:28:4a:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:4B:82:DD:B9:60:64:78:36:87:C4:CB:9D:80:94:45:C2:8E:DF
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:31:c4:62:a9:02:d5:10:63:dc:53:40:b4:6b:ac:b8:eb:ef:
79:df:51:8d:34:d4:02:6b:40:8f:bb:1b:a6:5b:79:82:aa:49:
3c:c4:8e:6a:75:52:b4:b2:79:10:1f:f4:d3:65:78:2b:55:d6:
9f:ad:ce:68:5e:ef:eb:01:62:ed:61:db:43:d3:fc:e3:f0:45:
8e:8c:40:44:3f:79:90:86:94:f8:1b:3b:03:3e:1f:60:19:24:
08:58:35:50:e3:1d:3a:1d:00:c9:c7:7b:ef:4b:ee:4b:ec:37:
b7:6b:0c:83:9a:8a:61:46:d4:a1:17:ae:b9:c8:a8:8d:07:32:
bf:cf:d9:9f:d8:54:9f:fd:37:d8:75:3c:ce:ac:7e:7c:5c:6b:
1f:bb:54:4b:60:ce:8e:93:28:99:ef:d2:f0:f1:a8:27:71:f7:
6e:98:f4:c2:ce:8a:aa:e7:f3:24:a0:8c:57:06:5d:d2:2e:28:
61:53:00:6b:ab:68:65:09:52:d0:f7:65:e1:15:8a:eb:44:e1:
33:ef:fb:9d:5b:87:c6:21:a7:ae:57:15:4a:1b:51:9a:9c:32:
ec:d9:45:b9:e3:5e:d6:e2:4b:90:ac:72:a1:ca:02:5a:01:1c:
ad:21:a8:56:16:e9:d4:27:55:32:0a:88:59:6f:1c:e7:76:38:
b1:75:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:46 2025 by rpki-client