Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: 9vwF1JKV/aG01Lvt0IUc35WaX1Z8wf7tGkSc1n9TidU=
Subject key identifier: 7E:06:95:5D:81:FE:A3:B5:EF:6B:FA:9F:9F:DC:AA:90:CB:5F:4F:3A
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 01965538AC534A69245AEE54D9C5C9AD002F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0A09
Signing time: Sun 20 Apr 2025 22:01:39 +0000
Manifest this update: Sun 20 Apr 2025 22:01:39 +0000
Manifest next update: Mon 21 Apr 2025 22:01:39 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: GoiaqtfcUUEfUPE3euFjIRnHIcxK4v+R1yjCnRpOHY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:ac:53:4a:69:24:5a:ee:54:d9:c5:c9:ad:00:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Apr 20 22:01:39 2025 GMT
Not After : Apr 21 22:01:39 2025 GMT
Subject: CN=7e06955d81fea3b5ef6bfa9f9fdcaa90cb5f4f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:04:f4:fa:63:fb:b1:4d:c2:7e:4c:a7:43:
f3:5d:64:7c:f5:7f:fd:fc:80:95:09:b3:5f:bb:0c:
68:68:50:b1:5e:49:38:14:5c:7b:a5:f6:6f:f3:17:
30:35:80:20:67:b7:9d:2d:06:21:df:2a:f3:6b:93:
f9:f2:59:02:8d:b1:83:e1:d5:78:d1:70:77:96:b0:
9a:2c:7a:d0:b8:76:06:c2:9f:c0:53:68:95:33:ea:
a9:0e:8c:87:65:1b:b5:84:95:92:76:a4:bd:19:3a:
28:34:df:69:6c:a9:bf:6c:ff:c2:3c:77:6d:71:a3:
aa:8d:87:c4:6d:50:70:51:77:d7:28:b0:05:cc:4d:
e7:c6:25:30:38:bf:65:e3:8b:56:09:22:c2:f3:23:
5b:45:d1:38:3f:3a:e7:7e:b8:5d:5f:78:b7:0c:9a:
47:57:1c:8b:d4:2a:3e:82:af:70:6b:5f:5e:e9:e8:
b2:ab:9d:d9:4f:de:17:32:49:71:0b:e0:b5:07:db:
17:96:67:9d:24:71:e0:6e:ef:73:e3:56:c8:7d:40:
cf:cd:b5:f0:2f:d2:0c:7c:1f:bf:c4:6b:96:be:a9:
7b:82:bd:46:a2:2b:ca:38:4e:75:a0:a8:a1:c1:fd:
f4:fe:6d:ee:a2:5a:6c:4d:59:ef:25:70:70:f6:f1:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:95:5D:81:FE:A3:B5:EF:6B:FA:9F:9F:DC:AA:90:CB:5F:4F:3A
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:1c:3a:04:2e:c1:d8:35:22:ae:09:9e:ca:0b:e4:a3:07:
09:3a:c9:27:9a:3d:dc:e0:9a:33:0f:32:08:31:9f:bf:e8:bc:
37:f9:25:04:90:2a:fa:88:bd:ce:47:03:17:d3:e2:f1:8c:d3:
7f:7a:73:49:4a:b9:b0:d4:64:82:c3:3c:1b:a1:f3:4e:6e:8a:
2d:c5:40:97:4f:17:bf:26:45:f4:f6:79:0d:04:50:8d:f7:76:
92:11:36:c9:e2:44:59:22:3b:0d:9f:f4:1c:f8:8d:ca:7b:60:
e1:59:01:33:00:48:5f:90:fd:d6:fe:6c:52:7b:b4:27:c8:75:
96:f7:a9:22:9d:37:20:82:28:9d:2f:5d:d9:37:78:09:6a:ac:
4a:c8:2e:05:6b:cf:9e:1f:d4:b0:04:a3:73:bc:8f:bd:30:d2:
3f:80:a2:42:8d:a3:2c:c8:ec:2d:c5:1d:5e:9c:7a:94:92:be:
80:49:c0:1e:52:85:2e:ca:16:5a:ca:07:1e:6e:61:30:04:de:
84:4d:9e:9a:9f:75:f9:91:c3:da:d5:81:2e:ff:80:d5:78:f1:
90:a7:52:25:84:28:d2:45:e9:bc:ef:02:17:8e:72:d4:56:c5:
23:11:16:67:76:a6:86:3b:ac:1c:2f:53:2d:05:d5:ea:5f:6c:
31:09:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:37 2025 by rpki-client