Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: 4DpoRCxRvChNFitPMJ0d+n4NnphlesXqb1vCJN3tUXQ=
Subject key identifier: 4D:95:A6:91:C8:A7:12:1B:9C:5C:3F:44:79:01:4C:40:DD:2E:EE:21
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 01965349A5AC7598A9D866712FC348470C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 86
Signing time: Sun 20 Apr 2025 13:00:57 +0000
Manifest this update: Sun 20 Apr 2025 13:00:57 +0000
Manifest next update: Mon 21 Apr 2025 13:00:57 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: SjlRxcppOC90yZBbI7CJSLTHn+qepjto+5fT2hVKLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:a5:ac:75:98:a9:d8:66:71:2f:c3:48:47:0c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Apr 20 13:00:57 2025 GMT
Not After : Apr 21 13:00:57 2025 GMT
Subject: CN=4d95a691c8a7121b9c5c3f4479014c40dd2eee21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:ea:6c:20:56:41:9d:3a:10:88:bf:a9:60:
01:c5:3a:80:3d:09:e0:a1:17:4e:25:7e:36:54:53:
b1:6e:bd:6a:e6:23:72:a5:84:ca:e6:bf:04:2e:88:
37:bb:e8:da:61:1f:02:54:6e:6f:67:37:ca:24:c5:
ba:6b:53:8d:22:05:32:94:b9:ee:fe:20:70:5a:ed:
23:c1:5b:4c:aa:53:59:11:8f:64:0f:91:ca:8d:48:
ff:b8:69:59:b6:cb:53:91:32:d2:9c:7c:da:78:47:
dd:59:fd:ed:0a:0a:05:b0:e8:5e:90:27:13:90:81:
ae:fa:2a:6d:32:dc:2c:c9:89:61:e0:8c:a8:53:7e:
2a:b3:f3:a4:78:a9:ad:86:74:54:dc:1e:75:37:f4:
0e:86:f9:6b:b7:b3:95:9a:cc:e6:c5:15:4a:fe:9b:
74:f4:c2:95:3e:57:7c:4e:c9:c4:1a:15:58:32:66:
ed:68:40:81:e3:dc:35:c9:4d:5b:bc:cc:35:a6:be:
f6:39:6c:e7:5a:a4:dd:9a:01:40:12:08:33:41:e3:
5b:28:e8:3d:5d:a3:72:f4:f5:76:f7:53:2d:cb:18:
b3:2d:dc:8d:a1:20:24:34:19:ae:61:0e:40:c5:09:
c8:83:ab:4c:5a:5d:55:c4:9a:37:99:4d:9f:ab:de:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:95:A6:91:C8:A7:12:1B:9C:5C:3F:44:79:01:4C:40:DD:2E:EE:21
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0a:b5:0c:5f:4b:7a:9d:e6:1f:51:fd:30:95:69:b9:df:f3:
ec:b3:6b:e5:49:47:62:14:00:e9:b0:b4:e7:b5:92:5a:43:9d:
06:a7:89:3e:14:97:ae:30:72:06:fa:d2:99:ec:76:66:72:8d:
5c:a1:c9:40:b1:da:f1:8f:45:95:16:75:48:b1:c3:bc:a5:cf:
f9:bd:ef:96:40:07:36:e2:85:60:9c:05:bc:ac:42:5c:40:b5:
28:35:4e:2b:72:80:40:f6:bb:0e:d6:7b:8d:13:7f:04:93:6d:
fd:3c:8b:08:87:5f:fe:2e:5f:2d:f4:08:7f:58:bc:2c:02:e6:
7e:53:43:18:20:27:04:5a:39:80:4a:26:42:fc:ef:f0:23:c9:
da:30:66:35:16:63:b5:64:dd:10:35:ce:56:4f:11:6f:dd:34:
55:5c:77:55:13:aa:99:12:fc:79:26:41:6a:61:06:e8:f8:35:
50:97:4e:c7:86:e3:73:3c:b3:a6:74:0f:e5:7b:43:a5:b3:8f:
cf:19:06:a2:0a:e3:55:25:4c:1e:de:37:b9:0a:36:e3:c8:0c:
70:3b:ad:90:07:35:e3:82:39:86:42:fb:35:78:43:ce:e3:5c:
4e:4c:e3:62:43:6f:d7:ac:00:63:d2:a8:7b:29:1b:f2:60:71:
61:a4:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:03:29 2025 by rpki-client