Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: d1EKIE7GR/N3KrwDeYpyh5q31GiRWMAAv3TlURdcuyY=
Subject key identifier: FE:82:CE:26:74:37:D2:41:59:4C:90:33:44:15:56:7E:E6:28:8C:60
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 019655DD415BD6AB05B67B54A81F3E7FDD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 11C0
Signing time: Mon 21 Apr 2025 01:01:25 +0000
Manifest this update: Mon 21 Apr 2025 01:01:25 +0000
Manifest next update: Tue 22 Apr 2025 01:01:25 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: 7A+pPedJNIA+3v6N6l4yfb+JkU5scAuyXbzRbZDyGk0=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:41:5b:d6:ab:05:b6:7b:54:a8:1f:3e:7f:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Apr 21 01:01:25 2025 GMT
Not After : Apr 22 01:01:25 2025 GMT
Subject: CN=fe82ce267437d241594c90334415567ee6288c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:4d:a5:52:ed:97:13:b1:8e:a5:cc:c4:d2:
fd:5a:9f:96:6e:c1:d3:ce:fe:08:9a:87:66:28:8c:
b3:7a:bc:01:b6:d7:75:6a:de:bb:dd:ce:cd:b8:6a:
e4:e8:6c:79:12:0f:d6:19:a9:66:26:0a:0b:60:88:
95:9e:de:50:fc:47:3d:34:26:2f:33:34:fe:56:44:
41:ad:93:31:06:38:31:3e:5a:2f:60:c2:9c:e0:68:
c0:33:ed:e9:09:ae:72:91:66:7d:1a:7e:ff:e0:da:
98:5a:59:a0:8f:bc:33:da:4c:e1:5e:06:05:d0:b1:
26:14:c4:8f:28:cd:39:b9:e0:23:89:16:ad:43:fd:
fb:d0:c3:37:74:2e:e3:0e:24:5b:eb:28:b8:9b:92:
7e:80:00:2e:75:e4:f1:f7:16:85:fe:67:05:2e:41:
7c:83:97:07:fb:88:21:b4:9e:18:0d:70:96:48:f4:
fb:74:5f:00:e1:cf:87:2c:58:9f:d3:d0:be:fc:38:
72:71:d3:01:bf:d8:63:24:6e:f3:56:d2:de:ec:c8:
e3:1c:ab:5d:bc:4b:c2:37:a8:78:90:58:84:1a:a9:
cb:0c:39:59:d7:26:25:e7:68:20:aa:76:81:bc:6f:
4b:3a:cd:66:6c:dc:5c:4d:8a:41:8d:07:3c:5d:60:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:CE:26:74:37:D2:41:59:4C:90:33:44:15:56:7E:E6:28:8C:60
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c7:5f:ec:44:57:1c:31:45:ea:33:ed:2c:ea:7a:72:e6:34:
84:2b:b3:55:37:fc:75:e4:46:b7:b8:ca:e3:b2:ea:9b:33:b4:
02:82:66:e0:89:68:23:b2:da:f4:60:3c:ea:83:4a:52:a5:f2:
c2:46:c1:7f:92:55:ec:68:b5:71:33:1a:02:23:fd:a2:8b:8a:
75:88:c0:06:bc:ab:3d:50:c1:24:27:88:eb:b5:35:af:e0:37:
73:a0:5c:c3:51:7e:10:6e:6e:2a:e9:dc:c1:1a:38:8a:31:7c:
a2:80:4f:59:97:4b:f8:f8:14:21:54:b9:f9:c0:6d:72:a0:19:
ee:e8:bb:1f:77:33:49:06:bc:eb:3b:04:7b:5c:3d:0c:f4:31:
b6:02:c0:6b:69:5c:92:77:65:a6:e1:64:58:dc:1c:16:f7:04:
b8:78:be:76:82:44:09:79:69:34:8a:0a:7b:dd:83:e7:28:7c:
5b:77:19:16:fa:b4:bc:56:b4:69:29:3a:1d:60:3b:7b:20:14:
8c:f8:f4:64:eb:ab:41:6e:3c:4a:e4:72:0c:70:19:07:f9:9d:
3a:8b:bb:da:36:31:e9:e3:27:88:ed:b9:1e:ef:83:2c:2b:51:
ae:50:05:bf:e7:b8:97:8b:fa:e8:cf:a0:ff:6e:c6:3a:ea:27:
66:ad:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:31 2025 by rpki-client