Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: 3FriND6/qnSlFMc5KSyJwNkp3s0CtP3UKgueTJeFFCQ=
Subject key identifier: 34:B2:CE:FF:41:CE:C6:35:48:91:1D:4D:58:4B:65:EE:B2:F6:F0:4B
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 01965B037C8ACB1A270B2D9235AE307A4C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0B2D
Signing time: Tue 22 Apr 2025 01:01:17 +0000
Manifest this update: Tue 22 Apr 2025 01:01:17 +0000
Manifest next update: Wed 23 Apr 2025 01:01:17 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: lVgaoEpSo2YznGVIO1gvxB6OO7IDMIDrde+HDN58eDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:7c:8a:cb:1a:27:0b:2d:92:35:ae:30:7a:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Apr 22 01:01:17 2025 GMT
Not After : Apr 23 01:01:17 2025 GMT
Subject: CN=34b2ceff41cec63548911d4d584b65eeb2f6f04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:a3:51:5f:52:7d:50:0a:72:ff:05:55:37:
b7:27:85:df:d2:78:72:21:21:c7:88:d4:d9:0d:f9:
ca:fb:a9:36:0f:e3:8f:67:80:ba:f2:ee:b7:47:52:
48:0a:84:de:f9:0f:70:45:3f:37:f5:06:9b:d9:77:
aa:5c:11:9f:9b:59:a6:0a:22:ca:f8:79:92:40:dd:
99:35:9b:81:a5:b1:1f:da:e4:24:e9:c8:49:08:32:
aa:eb:19:5a:77:02:c9:66:d8:11:48:06:0d:9a:53:
9d:d3:25:18:93:29:e4:c1:b9:20:52:0b:34:66:6e:
7b:db:eb:f0:62:c3:b0:50:bb:97:13:17:02:fd:8f:
d8:26:bb:48:a2:e1:b6:28:45:82:c5:ec:23:6b:8f:
c6:c2:2a:61:57:62:7e:d4:a5:58:58:90:e0:48:3e:
be:fe:12:d2:9c:2e:33:89:4f:49:be:9a:61:d0:91:
18:87:0e:2f:d9:c8:91:75:d8:fa:ff:c4:c2:16:99:
03:8f:3d:d0:b1:8d:29:6e:f7:37:84:4d:0b:7b:cf:
ee:a9:d7:c7:ff:c2:f8:84:f7:c3:26:60:b1:19:e8:
8a:33:e8:6b:ba:5c:b0:76:60:7b:93:3e:1d:a9:95:
bd:9a:c5:2c:5e:7e:ed:84:e6:8a:b1:fd:8e:bf:96:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B2:CE:FF:41:CE:C6:35:48:91:1D:4D:58:4B:65:EE:B2:F6:F0:4B
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:85:97:97:a9:bb:34:50:f9:be:b0:8f:6f:c2:91:57:75:b1:
ba:0e:fd:8f:4b:ec:b6:a6:57:a5:a0:58:f8:c9:af:22:9b:6e:
6d:f1:13:ce:06:21:24:1d:c1:ed:82:ee:91:fb:70:5e:c6:35:
c6:d2:99:23:f9:93:c9:89:a8:67:64:1a:1a:03:61:30:b3:f2:
76:8c:32:7b:dd:1f:bb:84:db:40:d1:c8:86:7e:13:50:b0:55:
bc:6d:6f:ce:18:ae:a1:80:b6:1a:a9:b1:90:56:e6:b3:99:37:
0b:fa:07:c5:ee:1c:1d:39:9f:8c:3f:51:af:af:2c:96:7b:86:
18:db:e2:8b:fa:37:4b:46:f1:fd:c3:68:ec:cb:87:1c:fe:ba:
fb:97:5f:49:e8:9c:b2:8e:2d:5c:9a:64:5c:41:57:37:c5:5e:
e6:7d:ea:f2:e9:74:92:7c:6b:f8:af:f6:12:43:f5:9b:29:45:
54:f6:2b:9e:20:49:5f:21:6e:6e:5f:9d:15:39:65:20:8e:35:
18:e3:04:93:2e:c6:d2:24:ba:1c:e6:a6:5f:0c:92:b8:fa:f4:
ff:67:eb:b4:ae:6a:27:33:44:96:e1:55:8d:3f:ab:d5:ee:47:
85:e2:58:4e:86:7d:f7:ed:4d:5f:ed:a6:8a:ec:55:8e:c0:41:
04:6a:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:29 2025 by rpki-client