Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: tRjsIvcJ56Dj6HQ5NBHaZyXNXjzVGwh78ZoNJ38k39o=
Subject key identifier: 1A:40:6F:3F:F0:85:A5:92:24:4E:84:D3:DE:1C:18:24:AF:E7:2A:BD
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 01958F60FAD0CEEFC90794DFDE092D5DE021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 08C3
Signing time: Thu 13 Mar 2025 12:00:52 +0000
Manifest this update: Thu 13 Mar 2025 12:00:52 +0000
Manifest next update: Fri 14 Mar 2025 12:00:52 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: 3QjFboG1lFSTxni5OLGIVaOXiKKXWcfT+CjBhcZyg5o=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:60:fa:d0:ce:ef:c9:07:94:df:de:09:2d:5d:e0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Mar 13 12:00:52 2025 GMT
Not After : Mar 14 12:00:52 2025 GMT
Subject: CN=1a406f3ff085a592244e84d3de1c1824afe72abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:c8:5c:ae:47:75:0e:e7:f5:3e:cd:ae:f4:
f2:27:7a:2e:d0:c1:94:4b:2a:d0:3e:b0:4d:4b:8f:
ef:aa:b7:20:66:bc:5c:2f:3f:1f:70:6c:ad:0c:8b:
f3:ab:d2:36:9c:25:41:15:83:45:3e:9a:dd:57:91:
cd:4e:dd:b2:c9:81:38:2e:ca:c7:4b:63:94:e2:21:
f5:e2:f8:ba:f5:c1:a9:0e:a0:0e:d3:27:90:73:0d:
5d:f2:f9:4a:d6:ec:1f:85:0a:fa:60:e7:ca:7a:c0:
a6:38:6e:bd:88:bb:49:fb:f2:07:2a:0a:3a:6f:9e:
26:8e:af:c9:bb:2e:34:4a:2d:76:d1:ad:91:50:0b:
56:82:2f:84:5e:43:9e:4f:4a:d8:d6:93:5e:1a:a7:
e8:36:db:d3:75:53:d6:03:c9:81:45:d7:d4:fe:62:
3d:f6:d8:fa:e5:2b:49:f6:3c:cb:71:55:04:70:b9:
6a:33:da:39:a6:d1:0c:e4:43:29:dd:bc:4e:27:b8:
6c:22:a2:2b:98:1c:8d:89:77:ae:6c:01:46:2a:3c:
b8:7b:c6:8f:f5:b6:bb:15:80:4e:30:b7:ae:9b:1c:
1a:56:eb:74:5f:77:db:c6:3f:57:5c:d1:dd:91:98:
93:64:cc:b4:e5:1c:a7:17:ad:69:f0:10:92:23:aa:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:40:6F:3F:F0:85:A5:92:24:4E:84:D3:DE:1C:18:24:AF:E7:2A:BD
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:78:e5:e4:f9:dc:a5:1f:25:5e:83:2c:a2:e8:83:b5:cb:1a:
07:dd:4c:bd:98:52:cc:7e:05:41:f6:6e:5f:70:d8:42:b0:e2:
e6:9b:cd:0c:22:fc:30:24:b4:f5:2b:d8:e1:98:4e:7c:09:3f:
93:06:8a:56:cf:dd:4b:3e:d0:a3:52:44:ec:59:cc:20:2e:eb:
da:8c:6d:3e:bf:0a:8a:66:3b:43:7e:3f:c5:98:b7:84:75:58:
91:82:7a:41:e8:ad:03:d4:45:8a:2e:02:db:05:d4:7e:48:4b:
40:80:97:68:9a:24:ba:ed:ae:d0:c5:10:b3:45:5f:67:4c:9f:
58:6f:be:ff:65:af:b0:60:86:d9:5f:63:a5:a0:35:f4:e1:11:
6d:a8:a5:61:f9:39:23:8c:c4:cb:f9:28:e8:33:43:16:72:da:
2f:1c:29:ab:85:bb:2a:47:b3:a4:b9:ae:ba:b1:ab:b0:f2:48:
31:0f:2e:17:80:21:00:b8:3b:32:62:a7:b8:39:36:cf:77:25:
86:65:e5:cf:cc:96:cd:7e:d4:93:51:2c:35:77:75:a9:e3:c0:
88:3c:c5:db:d8:3c:8f:df:ef:6b:1e:97:03:12:87:08:c2:99:
6e:51:07:e1:60:16:8c:63:c0:ef:4e:ee:7b:30:5e:c0:76:12:
eb:96:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:04:10 2025 by rpki-client