Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: rFgtvfs4oa9Q8e9HJuamI7fXDFKaQW1+t0w6n82Vo30=
Subject key identifier: 80:32:69:14:D9:47:E0:EE:1C:54:86:97:CA:EB:A0:8E:A1:4C:D7:52
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 01965C4CACCFCC39568244A5F96C5A1BB5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0C73
Signing time: Tue 22 Apr 2025 07:00:50 +0000
Manifest this update: Tue 22 Apr 2025 07:00:50 +0000
Manifest next update: Wed 23 Apr 2025 07:00:50 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: h6vtdnREWzpPeK5nrcsL9XXIFwEkHymer2mIph5lekw=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:ac:cf:cc:39:56:82:44:a5:f9:6c:5a:1b:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Apr 22 07:00:50 2025 GMT
Not After : Apr 23 07:00:50 2025 GMT
Subject: CN=80326914d947e0ee1c548697caeba08ea14cd752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:81:b4:c2:38:58:54:6c:48:55:a2:89:41:
fa:0a:ff:b4:b9:dd:8e:6c:96:69:2e:f5:b0:9c:ee:
3e:87:88:53:95:03:f9:70:f0:a0:14:63:78:36:80:
17:b3:7c:56:f5:5d:14:e3:41:54:e6:ce:cc:4a:6a:
cc:02:46:cb:ce:2a:d7:d8:78:b6:92:42:c2:4a:7e:
94:ad:38:22:3a:3e:19:d3:e5:66:10:08:da:23:7b:
21:70:84:5c:7c:cd:9e:3c:3e:02:bd:c4:eb:53:09:
cb:36:e4:02:29:3c:7b:07:54:f7:92:6f:33:dc:6a:
c8:24:f4:fb:7d:2a:93:c3:8a:5b:6f:42:9f:c8:52:
e5:dc:0c:97:07:6c:5a:34:84:4c:6b:19:c5:1e:26:
01:25:6a:21:01:d9:7f:f7:56:f5:44:84:1b:39:e2:
b6:c5:de:87:a9:eb:6d:87:e8:36:24:05:19:72:ae:
5d:2e:2d:8a:21:27:4d:d5:42:9a:98:c2:07:b7:ae:
5f:03:e3:2d:20:fe:68:f9:c5:f8:1b:ea:70:9c:69:
89:65:2b:4f:88:dc:45:46:1e:6d:8f:14:54:b6:fe:
be:bc:1a:3b:88:38:14:bf:76:29:93:3f:c1:28:d8:
7b:97:58:37:2e:7f:73:f9:6c:20:19:93:f6:68:82:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:69:14:D9:47:E0:EE:1C:54:86:97:CA:EB:A0:8E:A1:4C:D7:52
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0a:15:06:04:4e:99:40:ed:de:c1:6b:eb:71:72:49:17:78:
ac:fb:1d:c5:27:ea:d4:d0:77:91:0c:71:4b:90:01:27:ec:27:
65:fd:4b:ff:b7:79:65:08:3e:5a:c3:bd:f8:39:6d:e7:44:5b:
d7:61:c1:e7:1c:b5:9f:d9:d6:0d:6b:e9:3a:7b:d3:39:26:ec:
d0:7b:a5:a7:41:2d:3b:a7:40:37:be:b9:ce:30:a9:6f:75:7e:
e3:1b:8c:fb:63:a3:8c:75:cd:b3:dd:39:6e:4f:45:65:fc:2f:
d2:00:79:4e:75:ce:b2:7d:eb:9d:18:36:51:3e:29:65:9d:50:
55:2e:37:7e:a4:6f:38:f7:69:57:e5:3f:52:a2:e7:33:ae:35:
6a:c0:e7:f0:65:3d:df:74:cd:30:88:2f:e8:f7:41:aa:42:bb:
6f:16:5c:f1:44:ae:f1:5f:8a:ab:22:f3:49:eb:40:69:f0:37:
0c:11:a3:2e:fc:6c:03:18:c1:54:e9:be:15:58:80:0f:8f:84:
99:a6:2f:8c:a0:6e:bc:8c:34:83:fd:91:87:ce:eb:7a:e7:12:
fb:8f:e7:f1:b9:4f:46:e2:9a:7e:a6:de:eb:ba:dd:bd:7d:e0:
26:5a:41:4f:72:0f:32:be:e7:30:82:db:bf:ae:3d:f3:a3:cc:
ab:fa:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:56:36 2025 by rpki-client