Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: n95xDPSietNkrTrrb9nmmW2kmrr26gY+C56SU0YOIfo=
Subject key identifier: 2B:DB:A7:FB:EE:E0:C7:4D:65:55:1D:B6:FF:18:88:50:D4:43:CE:62
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 01964B58F300465127232EDB786837A4B0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 01B9
Signing time: Sat 19 Apr 2025 00:00:42 +0000
Manifest this update: Sat 19 Apr 2025 00:00:42 +0000
Manifest next update: Sun 20 Apr 2025 00:00:42 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: IgaP2P1kpNK4Sd4ZiMec4DKit8VkbHm0EYzyyrDZAfw=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:f3:00:46:51:27:23:2e:db:78:68:37:a4:b0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Apr 19 00:00:42 2025 GMT
Not After : Apr 20 00:00:42 2025 GMT
Subject: CN=2bdba7fbeee0c74d65551db6ff188850d443ce62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:f4:ab:11:6f:ea:55:0c:39:71:22:01:19:
87:66:32:ea:ae:ad:9c:08:de:07:dc:09:22:e8:c8:
ac:84:67:8b:cf:74:c3:0a:8e:4a:ad:9a:f0:c8:1b:
3f:8b:e7:72:3e:97:67:3c:bf:4b:e4:96:2d:c2:69:
8e:de:06:0e:22:76:b3:9a:7b:1d:7f:9c:3e:ac:63:
5d:f3:1d:b1:71:a6:ff:c4:0d:c4:dc:4f:26:ca:34:
a0:97:2e:0c:cb:d9:c8:c4:aa:4b:00:2a:c3:17:9c:
92:dc:04:c6:15:b2:c1:74:22:3b:9b:ca:5f:2f:94:
ea:2d:81:18:22:7c:3c:46:b6:b3:e0:4b:60:27:d1:
87:3f:02:c3:7f:48:42:c0:20:69:c2:17:36:ca:63:
ff:f0:4d:97:e9:5a:87:ad:1f:53:3a:7b:91:41:34:
70:f5:47:da:01:81:c6:45:05:f2:3f:fc:29:33:da:
87:72:15:01:ce:af:f5:a6:8b:42:41:fe:0b:fb:41:
79:4d:9c:dc:8a:2f:5b:bd:a7:28:92:9d:9f:c0:d4:
12:8f:9f:47:91:b6:cb:8b:9a:7d:4c:a3:a2:68:69:
83:e3:ac:16:43:cb:f4:1f:a4:1e:5b:66:53:b1:f1:
16:c8:50:4a:7d:bd:06:da:b7:de:96:1e:e8:9a:bd:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:A7:FB:EE:E0:C7:4D:65:55:1D:B6:FF:18:88:50:D4:43:CE:62
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:94:cd:29:96:c6:18:cf:ef:ed:0a:bf:01:e0:cc:5f:f3:
48:c9:bb:63:2e:73:f3:07:79:28:63:f1:7a:ec:ac:eb:ce:7a:
8c:00:0f:de:b8:47:df:a9:69:03:8a:d6:14:34:1f:2a:e4:8d:
57:33:93:aa:23:9f:5f:a2:17:26:8b:7e:bd:45:e4:f8:5b:46:
9d:7d:7d:e2:5b:79:8a:c1:da:21:ed:7c:7e:24:db:c5:60:ca:
b1:97:38:a4:e8:4b:c7:fb:e0:99:54:f9:3d:7b:5b:2c:b7:21:
f4:4c:02:d0:11:45:35:7a:f4:46:75:4e:bd:a4:dd:71:f3:51:
84:22:d9:94:74:a7:3a:77:17:b9:7e:71:64:54:e3:dc:3e:a5:
ce:4b:07:92:ca:6e:17:32:ea:68:72:db:88:66:ce:0e:be:69:
25:e1:15:98:66:43:77:2c:5c:e5:4d:87:82:a2:ab:f8:12:04:
02:57:1c:5a:9d:48:42:a9:91:46:29:39:ca:e5:e4:cd:96:21:
25:eb:36:a6:d9:f7:46:f9:0f:bc:a2:46:c3:9f:dd:41:67:71:
74:fd:69:9f:91:7e:8c:4e:2c:f0:8e:17:d8:63:22:41:68:ea:
c1:99:f7:47:e2:f5:b8:d8:1f:d7:c3:03:45:fc:73:a9:f5:48:
02:fa:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:48:39 2025 by rpki-client