Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: ORQ+CMWc50e9b9kKxDPOO6wBPyRd83v+QxT7hVngDLk=
Subject key identifier: BF:A0:BC:CD:8B:62:94:0F:B9:17:39:61:12:A6:E6:F2:18:15:82:6B
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 01965B39D4E109EF0FE85104BA00C984BAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 02:00:38 +0000
Manifest this update: Tue 22 Apr 2025 02:00:38 +0000
Manifest next update: Wed 23 Apr 2025 02:00:38 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: 96ayw539OAbKf3f0eMYaLTbPGioH+0hGzL5m3E3HXho=)
2: bXTr3E6VnWX26W0oqBoPPL1PlHA.roa (hash: G0OUsQqR41YHtb5AbPT1gfl1AXhku70rwPK53DaTikA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:d4:e1:09:ef:0f:e8:51:04:ba:00:c9:84:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Apr 22 02:00:38 2025 GMT
Not After : Apr 23 02:00:38 2025 GMT
Subject: CN=bfa0bccd8b62940fb917396112a6e6f21815826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:6c:d2:a1:ad:cb:7c:e7:fc:ea:3f:c6:af:
28:b7:a2:d4:d4:27:53:40:8b:79:50:cb:42:71:ea:
a9:b9:86:fe:ad:eb:11:9c:05:60:25:d6:83:0d:15:
68:a9:66:e6:e6:6c:da:09:f8:c0:17:3f:07:be:17:
82:50:8d:e3:95:33:02:12:fa:d6:60:0a:24:df:fb:
b4:1f:10:4f:d8:72:3c:21:4c:83:ae:72:28:78:4d:
97:41:ac:c2:17:9b:88:2b:78:60:f3:c1:c6:ac:cf:
1d:61:a4:33:76:64:d5:69:5b:2f:88:7c:4e:c6:6e:
95:00:07:97:35:cf:c4:94:be:b1:7b:5f:07:23:4e:
c6:a4:71:41:27:ad:7f:64:b3:e3:7f:5e:70:3c:8a:
2f:89:47:31:bb:13:b1:66:4c:d0:f5:cc:3c:49:12:
ac:f9:24:22:71:bf:7d:be:13:3d:2f:fa:f4:ef:b1:
0c:b3:ff:54:51:46:0a:a0:2e:f4:29:48:4a:31:46:
cb:d4:e4:b1:ba:b1:67:d7:95:17:71:19:78:76:5c:
c8:e2:9c:80:42:be:24:95:35:17:d7:b9:c6:2a:0e:
01:c8:0e:be:c2:9f:fa:ea:54:4c:bb:35:06:6c:f6:
d2:e9:16:67:76:0a:a7:d1:98:a5:fc:de:4e:26:6c:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:BC:CD:8B:62:94:0F:B9:17:39:61:12:A6:E6:F2:18:15:82:6B
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1e:36:38:ad:6c:a3:d7:ed:11:bc:b9:94:3c:bb:28:7f:ab:
d9:eb:3f:06:c3:3e:7a:2f:5c:39:60:fd:ac:ab:0a:77:91:43:
c0:a3:b5:30:c4:ff:65:1e:38:e5:d0:45:15:e6:9b:f3:85:da:
33:5c:85:fc:17:f6:00:92:92:75:ae:9d:82:f8:37:76:59:29:
42:4e:59:eb:64:41:9f:3e:71:ee:83:6e:fd:e2:72:60:57:24:
4a:3d:71:c3:ec:ed:91:a1:71:3b:de:e0:2b:18:dc:af:a5:48:
39:f7:73:6e:92:5c:07:cf:60:f6:86:db:02:af:fd:b5:d7:72:
b3:27:4a:b9:dc:63:e3:9a:f3:e4:4a:f8:39:a7:4e:cf:15:22:
9f:b6:98:38:30:d8:f2:db:34:8d:cb:31:e4:52:68:10:4b:2a:
97:e2:93:a2:6a:62:a7:50:40:8b:5d:1a:a1:b1:0e:0a:2a:81:
14:09:38:93:e8:6c:ae:44:c7:dd:c2:ef:43:6c:2a:ce:57:b9:
c9:3c:80:ef:8a:75:ea:05:34:18:94:a1:1a:36:28:53:e6:9c:
49:ad:ce:dc:21:ae:23:55:c4:4d:8a:3e:08:26:c6:5e:78:f6:
01:ad:d2:c3:b5:e0:e1:3f:ef:67:31:a9:d1:e2:0a:8b:e0:3c:
e9:d8:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:50:45 2025 by rpki-client