Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: jfNLD4yme36aa9I4hfc6lwWU38dwWiaivFFH7h2+afQ=
Subject key identifier: 7A:E3:58:C2:80:60:C7:E3:DC:D9:13:97:16:56:A2:7D:D6:4C:F3:A5
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 0196440D02B4034671DDEC2E37836697379D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 14:00:25 +0000
Manifest this update: Thu 17 Apr 2025 14:00:25 +0000
Manifest next update: Fri 18 Apr 2025 14:00:25 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: iAB3lmhKa8zZe2W4mRQyqh9Kp8HRyW/SQ4vo+FeGVbs=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:02:b4:03:46:71:dd:ec:2e:37:83:66:97:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Apr 17 14:00:25 2025 GMT
Not After : Apr 18 14:00:25 2025 GMT
Subject: CN=7ae358c28060c7e3dcd913971656a27dd64cf3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:03:1e:c4:36:2d:51:78:02:72:2e:22:df:
64:c7:2f:06:ef:6d:d0:a1:47:bc:c0:78:b5:1e:7b:
75:dc:e7:11:93:19:83:6d:cf:4c:25:f9:cd:25:33:
3b:f1:21:72:a7:29:08:23:cb:ba:ba:77:27:7c:7a:
1e:c4:8c:d6:e4:ee:ce:df:16:72:fa:c7:6a:7a:f8:
68:2e:25:ca:bd:f5:9e:cf:5b:a2:0e:b5:aa:97:9b:
1e:7f:2d:65:27:57:21:01:f7:f7:ad:91:74:f8:4f:
9a:ae:07:6f:3e:5d:88:a1:bb:85:b1:22:9c:bf:e0:
d1:66:b4:ca:41:65:4b:95:3d:4e:26:5f:51:68:ee:
98:59:23:6a:8e:17:f4:63:15:c5:57:4b:27:24:dd:
20:3d:c5:f4:50:32:3d:d8:fe:c5:cb:c4:b1:54:5c:
07:e6:80:6b:cf:90:5d:19:84:74:71:a6:9b:f5:ac:
3a:c2:29:59:b4:44:23:2f:59:39:0f:be:42:b0:ad:
1e:f7:9b:f9:b1:10:a8:e2:d6:57:fa:4a:e9:8e:04:
44:66:08:8c:bf:fc:d1:ef:a0:b9:ea:6e:a6:ca:08:
6f:32:66:d9:79:b7:c2:0f:e6:c2:d8:b5:65:a6:35:
f6:ec:9d:94:c1:7b:84:17:36:5b:2b:e2:5d:89:00:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:58:C2:80:60:C7:E3:DC:D9:13:97:16:56:A2:7D:D6:4C:F3:A5
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:37:1a:83:3c:7d:99:23:7a:d7:85:a0:3f:7f:7d:1f:e5:85:
1e:4e:5f:19:77:41:2f:9b:8e:0d:cb:db:81:18:00:13:f8:7a:
e2:7c:44:f5:5a:22:a1:04:a8:da:67:d5:a3:69:79:ae:de:b1:
c1:19:a4:f8:73:b7:e3:b3:1a:36:35:d8:77:bb:ec:65:fd:09:
6d:a1:9a:5b:0e:4e:47:a9:c0:ca:ae:c3:4c:7a:dc:88:7e:a1:
80:9f:71:ef:75:0e:c3:6d:fd:38:70:08:49:69:db:5c:f7:87:
02:8c:db:cc:ad:48:0e:0a:7a:e9:34:24:c3:fb:29:81:3d:d5:
7e:68:d9:88:b7:06:1e:00:f3:a2:b6:01:b3:f6:03:b1:f6:e3:
2d:74:5a:8e:2e:5b:a2:36:18:7b:56:37:21:e8:cd:59:90:8b:
37:12:d8:d8:24:e3:8b:e9:95:a0:2b:b4:44:b0:2d:18:58:88:
a5:8e:09:07:71:8d:ad:60:5b:ed:77:38:8e:c9:06:a4:0f:fe:
be:d0:48:a0:9d:a4:b2:d8:c6:46:d8:96:60:f6:59:82:66:ac:
a8:4c:30:3d:0a:0d:c2:50:0b:3f:d5:31:da:e7:b1:39:d6:48:
2c:80:e2:9a:81:7e:22:3c:f6:eb:78:2c:f6:9e:a3:2a:47:cd:
cc:ea:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:32 2025 by rpki-client