Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: jUgDaNbFGn4Fx/eekNc+GdYlVKkZvOUIZcjbF8b4tVw=
Subject key identifier: 94:E7:FB:67:DE:45:41:20:29:8E:30:3E:34:31:E5:88:4E:39:66:22
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 01965D5F86D347604034D011E25368DA7B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 0102
Signing time: Tue 22 Apr 2025 12:01:03 +0000
Manifest this update: Tue 22 Apr 2025 12:01:03 +0000
Manifest next update: Wed 23 Apr 2025 12:01:03 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: RzTGn6aLK8n0Wp3huIPH6Ii+W9xpXmvt4VyVqlOEfnA=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:86:d3:47:60:40:34:d0:11:e2:53:68:da:7b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Apr 22 12:01:03 2025 GMT
Not After : Apr 23 12:01:03 2025 GMT
Subject: CN=94e7fb67de454120298e303e3431e5884e396622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:fb:e9:53:b0:80:a6:73:10:c8:f1:35:fc:
c9:43:08:30:07:85:ea:6f:0c:cc:ce:f9:ac:0d:64:
5a:79:13:26:1d:75:8a:52:78:68:88:28:45:86:05:
05:33:2c:41:c1:7c:6d:05:d6:3e:7e:d2:b6:90:df:
07:f4:6e:83:20:96:6e:3a:d1:0c:02:22:08:91:29:
93:cc:ea:9c:15:62:6a:67:53:47:9b:0c:2a:d1:66:
5f:5c:83:69:71:7a:b4:c0:95:82:ef:9f:34:90:4c:
29:96:04:b6:22:ca:df:42:0d:1f:35:21:c2:ea:5b:
c3:ed:9e:49:fd:45:44:0a:2c:53:52:a5:c4:de:bb:
02:14:8d:51:0f:49:62:db:47:e5:0e:ea:ff:d4:64:
36:8d:dd:b7:93:92:ae:05:7e:63:ff:73:4f:bf:61:
82:82:e6:c8:aa:06:b6:ce:22:ef:e2:15:6c:f0:86:
da:c0:ba:c3:cf:dc:8b:e6:66:2b:34:ce:79:17:c5:
6e:f8:c9:5d:e9:68:5e:89:42:c0:9a:85:7b:ae:b0:
11:dd:89:8c:a9:37:58:f0:15:a8:ce:e9:15:46:ae:
de:b6:71:08:5e:b2:d3:1c:b9:8e:d2:31:c8:a7:48:
af:21:ba:fe:45:29:69:f0:d6:7a:2f:09:f6:c6:b9:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:FB:67:DE:45:41:20:29:8E:30:3E:34:31:E5:88:4E:39:66:22
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cd:b3:65:8c:ae:52:7e:4c:3a:c5:d5:bd:b1:3c:05:b4:6a:
cd:d3:94:43:72:f8:27:3f:79:49:72:b4:0b:6b:a5:4d:20:db:
51:b4:1a:36:a8:43:ec:c9:5e:52:7c:51:a3:6b:bd:80:e0:bd:
06:49:66:a9:ae:39:97:ee:b0:b4:0e:9f:b9:53:3b:6c:12:ce:
51:72:b7:f3:80:f8:28:f3:fe:33:d2:90:56:7a:b8:14:9f:bf:
14:1b:3a:d3:a0:9c:9c:98:79:68:cd:25:68:ee:0a:aa:16:b7:
6c:72:f6:e6:06:ae:2e:6c:bf:10:ac:c7:a1:15:ff:ed:0e:21:
ca:54:2e:6c:0a:b4:d3:21:3a:48:0f:cd:ee:7c:12:c9:3f:c5:
c1:7a:0a:8f:43:4b:96:95:8b:e7:a1:63:93:21:8b:43:86:7e:
ba:0e:1a:79:5d:c4:46:57:9a:aa:7d:c8:28:da:49:0b:c2:5f:
3b:e3:ec:e2:20:54:43:9c:7f:d5:1b:1e:90:f3:e3:f0:48:97:
f0:f5:04:97:4b:66:98:9e:21:dc:16:8f:17:83:f4:f4:b1:4c:
97:a5:cd:6b:85:54:23:e8:0e:85:15:f6:f4:ed:aa:75:c4:08:
de:2a:f3:bb:e6:29:7f:ed:1f:6e:9f:c7:be:fc:8d:eb:86:33:
92:66:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:41:44 2025 by rpki-client