Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: JhF2HmfzZtDcCGIcQ7ARZBbKFCYgrM1ATrZX1ysgD6g=
Subject key identifier: 6C:D9:54:45:EB:6D:81:6D:92:F3:E4:13:2A:8D:AD:5A:45:5A:20:E3
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 01965613DAC505C7531C92A8EBDE8C3E3214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 02:01:03 +0000
Manifest this update: Mon 21 Apr 2025 02:01:03 +0000
Manifest next update: Tue 22 Apr 2025 02:01:03 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: w7guNVoOxH8vHi4GUXskZ87dxCCT1N4cJhDgoqaf6YY=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:da:c5:05:c7:53:1c:92:a8:eb:de:8c:3e:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Apr 21 02:01:03 2025 GMT
Not After : Apr 22 02:01:03 2025 GMT
Subject: CN=6cd95445eb6d816d92f3e4132a8dad5a455a20e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:15:82:3d:4e:1a:c1:20:50:2c:4f:02:f9:
06:6f:0e:fd:18:c2:e8:e0:d8:cc:4e:76:b9:9d:ac:
9d:6f:9e:0d:87:5c:70:6e:32:ef:dc:7f:2c:4e:7e:
a3:e6:fe:41:d7:0d:34:3c:00:3e:5d:ba:34:9a:e1:
51:d4:54:b8:a2:7f:20:fc:ba:15:2b:e2:76:5e:1b:
59:e2:bf:16:73:69:8d:28:dc:72:b2:20:2e:e8:88:
b3:fb:66:9e:57:f3:27:a5:42:8d:47:12:1c:62:3e:
13:ce:eb:a1:d7:0b:17:1c:84:25:c9:10:7a:03:e0:
99:d9:84:0b:46:d2:21:3d:3c:27:aa:71:d4:cb:0b:
8d:03:88:29:87:1d:6c:f8:15:28:72:c3:ee:95:d1:
3d:75:d1:c0:1d:c0:f4:2a:65:f6:8d:dd:50:50:82:
01:84:d1:ff:da:54:72:04:3a:26:a1:86:8e:41:7b:
4f:c2:ed:c3:e0:1e:f9:5d:24:41:f7:c3:f3:1c:63:
f9:a8:03:cf:5f:5f:32:77:06:29:09:bb:e7:a1:d9:
36:69:cc:0e:94:21:e1:5d:44:7b:31:28:48:08:8a:
c3:d8:df:f1:0d:16:3b:f4:74:7d:a9:8f:77:16:50:
39:c2:28:45:93:37:91:c8:3d:62:0f:d0:b4:7a:30:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:54:45:EB:6D:81:6D:92:F3:E4:13:2A:8D:AD:5A:45:5A:20:E3
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:ea:77:78:51:0b:52:76:6f:13:19:98:16:8b:72:7d:2c:
d0:04:ed:c9:0b:de:3e:55:bb:5d:41:83:2f:62:38:77:3d:f3:
a6:2f:16:f9:1f:e9:c1:1e:6d:74:cb:22:1b:87:3f:8f:9f:2a:
d1:da:42:54:7b:66:4a:ab:28:f3:50:86:36:81:a3:ba:72:f2:
2b:e4:cb:80:23:79:a7:23:ff:1b:29:04:1f:1f:62:55:fb:27:
84:57:7d:19:88:ab:48:f2:2d:9e:f6:8f:c3:b2:6d:3e:12:98:
cf:d9:4e:6f:0e:8d:2d:97:bb:59:ec:0f:c8:fe:c9:42:2e:fd:
40:a0:23:c2:04:54:6b:26:11:16:a6:f1:6d:bc:a2:7a:b3:b2:
a8:c4:0c:db:98:82:1b:10:24:54:05:b7:d3:0d:f4:d1:e1:20:
92:93:85:fe:2e:50:f3:46:65:ef:7e:a3:2e:54:b0:31:eb:c1:
59:da:13:08:e1:de:a4:09:b8:56:5d:61:05:5a:0c:9f:0a:b2:
6b:38:55:36:5a:8c:20:64:37:b9:a9:4e:cf:19:0a:28:b9:73:
27:ae:80:13:26:d8:f6:9a:92:29:6f:38:8c:b8:b8:b1:58:6f:
f2:e8:5b:d1:19:bb:50:5d:c1:56:d7:a7:a0:3b:a1:c8:27:d8:
36:c8:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:56 2025 by rpki-client