Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: 9+dPvWnnLPqiFQp2D/BPitPXYxwksjuaMWf3/fEZCqI=
Subject key identifier: E9:86:23:C4:08:3E:1F:93:70:F6:CF:0A:D9:52:B0:2A:99:E0:CE:7D
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0196545C40ACFC4699AD5CCEB099A3816A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0929
Signing time: Sun 20 Apr 2025 18:00:54 +0000
Manifest this update: Sun 20 Apr 2025 18:00:54 +0000
Manifest next update: Mon 21 Apr 2025 18:00:54 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: n2OEKCDPT9cOv0Z59SXIXaPIWkFEZV4JqrHk7JlSVxI=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:40:ac:fc:46:99:ad:5c:ce:b0:99:a3:81:6a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Apr 20 18:00:54 2025 GMT
Not After : Apr 21 18:00:54 2025 GMT
Subject: CN=e98623c4083e1f9370f6cf0ad952b02a99e0ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:96:5d:6f:04:95:6a:cf:e1:5f:48:11:92:
46:9a:79:63:fe:d7:95:70:04:0d:58:60:59:1a:df:
2b:24:48:e3:2b:40:68:49:ab:d7:2b:fa:2f:d0:e9:
03:56:39:34:01:73:80:f1:7f:fb:aa:da:1d:58:1e:
9d:7a:2e:b1:74:b1:32:7d:df:98:37:a2:2f:f4:1c:
59:9a:42:91:05:f2:ff:6e:34:63:b8:b2:56:5b:a1:
6c:d9:bc:81:50:1f:4d:28:61:df:96:c2:04:37:a9:
fd:d2:54:9d:0d:c9:78:18:7e:84:21:da:3c:ef:87:
a8:9c:20:d2:e0:19:91:60:ee:88:9f:11:97:24:43:
37:86:0f:d7:4a:c4:5e:20:67:0f:c0:a1:20:1a:e5:
38:e8:ec:d4:98:b1:44:df:91:89:1f:4c:b6:5e:d2:
64:3c:95:f1:93:d3:4b:2a:2f:4e:14:16:5b:30:64:
12:46:2c:85:df:1f:db:88:bd:d3:be:3f:3f:d0:0b:
b3:7f:0d:8a:b4:90:cc:0d:e5:44:84:92:95:63:d7:
7a:16:ff:a8:63:3f:f2:81:a3:6d:4b:db:91:48:51:
f6:a3:b3:70:b6:9b:eb:f7:9a:98:0d:12:fa:92:78:
f0:4a:02:f3:24:4e:58:cc:10:a3:69:a8:1e:eb:9b:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:86:23:C4:08:3E:1F:93:70:F6:CF:0A:D9:52:B0:2A:99:E0:CE:7D
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:89:74:b5:94:9e:a4:c9:7d:31:24:2e:16:55:d8:ee:86:
4e:ca:db:2f:01:a9:19:41:e4:88:d9:fd:9f:97:1b:9d:aa:98:
0c:0b:d0:b8:f0:0f:2d:b0:d6:b8:19:64:2c:6e:53:13:54:3c:
22:1a:36:9f:97:01:e6:3a:0f:b6:75:09:43:2f:c1:68:23:ae:
f8:d1:35:8c:13:1e:db:4d:2b:b5:0d:3c:f7:42:78:29:cf:7f:
5d:b3:8d:50:5b:35:ad:9e:fd:23:bb:01:5c:d5:e8:70:25:72:
0e:97:f5:e3:17:4a:50:55:f1:11:33:ce:8c:d3:6f:4e:08:54:
d1:56:39:2b:28:46:53:5b:98:21:2f:02:ae:35:ba:e8:bc:23:
2f:3a:db:33:b9:4a:46:cc:8c:95:4e:dc:34:27:51:d5:5b:5b:
fd:db:c3:fe:48:42:63:53:26:29:88:34:cf:c6:20:fd:b5:3f:
1e:b0:cb:b6:de:fd:9f:77:a7:30:b7:93:12:c1:ff:b2:a4:af:
38:c9:79:21:26:fe:41:ae:f1:d1:84:d8:af:71:41:45:bb:43:
c3:ba:51:b5:69:30:f2:ae:b9:4e:b4:7b:52:13:64:31:cc:41:
a3:c0:bd:61:a0:f1:95:44:9e:14:64:34:d1:b5:75:9d:8c:08:
65:cf:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:05 2025 by rpki-client