Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: 62Qk1m4j413/J5zhK7QxjDSZ7FFO5G4rp3KqBRCAwRY=
Subject key identifier: 94:3F:74:3E:B6:3D:25:DC:44:4F:FE:0A:E2:73:3F:BA:21:05:0E:23
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019653B70CC7B0630D13E325E69D7F74E1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 083F
Signing time: Sun 20 Apr 2025 15:00:26 +0000
Manifest this update: Sun 20 Apr 2025 15:00:26 +0000
Manifest next update: Mon 21 Apr 2025 15:00:26 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: z4MnWg8tgdSglqTCYUDyyIFeu2TpxtKuDoeseaszlUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:0c:c7:b0:63:0d:13:e3:25:e6:9d:7f:74:e1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Apr 20 15:00:26 2025 GMT
Not After : Apr 21 15:00:26 2025 GMT
Subject: CN=943f743eb63d25dc444ffe0ae2733fba21050e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c9:2e:e8:9f:af:38:48:45:fd:1b:5f:a3:3c:
62:5b:46:7b:23:29:a0:9f:2f:4c:4b:dc:83:b2:c5:
ae:84:2f:85:e4:92:47:2f:02:38:17:8a:07:4e:b7:
19:23:50:6a:84:aa:91:cb:b1:9d:3b:e0:68:f8:a6:
f7:2e:06:c5:b9:9d:37:29:18:f6:a3:38:a8:3b:e8:
11:fb:2f:e6:b6:98:45:3c:37:79:03:d7:b4:d6:0a:
3d:dd:41:2d:84:c2:3e:82:2a:e8:7f:23:17:78:7b:
43:44:cb:cb:cf:00:53:c9:8c:bb:e4:ad:d9:5b:0e:
d5:df:fe:73:71:89:04:eb:95:99:89:4d:5b:68:cc:
e3:65:b3:01:9e:1e:92:00:f1:1c:94:6f:03:3f:27:
84:82:da:bf:ee:3a:63:a0:f4:1d:31:21:40:77:d9:
9c:5e:59:2e:b2:43:a8:11:3b:25:02:dc:3c:8e:d5:
dc:b9:c4:b2:76:61:3d:79:d6:88:ee:80:2e:8d:da:
30:de:66:23:46:37:17:0f:57:86:60:2f:a1:97:9d:
2d:2c:1c:07:a1:41:eb:b6:70:bf:83:53:3b:9d:d2:
4d:01:70:80:87:ad:ef:40:01:94:e9:03:89:82:23:
93:1e:9a:81:e6:58:a9:eb:f4:0d:61:1f:2c:5f:3d:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:74:3E:B6:3D:25:DC:44:4F:FE:0A:E2:73:3F:BA:21:05:0E:23
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0a:43:a3:33:0c:5b:d8:09:d1:bc:dc:f6:c0:3e:d8:7b:1a:
02:5e:71:24:b3:b6:05:27:9a:39:5a:ce:50:5c:c5:f4:d3:91:
5a:06:a5:03:b5:13:92:96:43:cc:66:dd:61:26:5b:86:16:b4:
7d:c1:ca:60:5d:9a:79:fe:20:2f:06:39:06:69:52:59:6c:04:
ad:e7:39:bc:b1:5f:3f:ec:f1:ef:c2:c0:fc:71:7d:8c:6e:ec:
5a:50:6e:8f:af:db:3a:10:7b:9d:31:57:1b:f6:0f:66:d8:d5:
b2:14:0a:3e:51:1a:48:9b:16:9e:d5:85:fc:3d:75:1a:89:4d:
7d:2e:36:b4:0d:e1:4a:93:d6:aa:6d:f9:75:27:1d:65:e0:56:
58:07:64:d6:c7:b0:1a:ef:ad:b0:34:2f:15:c7:d2:da:23:7c:
49:3d:a2:99:3a:f2:cb:8f:e4:fc:3b:7d:03:f2:cd:b8:e6:f8:
22:56:97:fe:2c:1b:0c:e4:e4:7c:6b:17:43:62:8a:2b:7e:3b:
b5:dc:9b:55:b9:80:e6:29:83:bb:2a:01:6a:79:10:d5:8a:36:
e5:e9:a7:7e:20:8d:59:17:09:f7:63:eb:ca:16:4c:17:da:0a:
1c:93:4a:27:db:24:b5:bf:d1:7f:c6:b7:6c:ed:1b:6e:f5:f4:
47:81:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:14 2025 by rpki-client