
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: n/5Vg8+Ztxa4LQKzQl/hwlMzlhf5flrwHkzDFn0CQRY=
Subject key identifier: 4C:4E:FB:DC:1F:2A:C2:C2:97:28:1C:6C:CD:37:63:54:81:36:A6:D7
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 01964D476ADFA71657BF3D94C903EA43B914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 09:00:48 +0000
Manifest this update: Sat 19 Apr 2025 09:00:48 +0000
Manifest next update: Sun 20 Apr 2025 09:00:48 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: NfS0rT/MJvM6aFCkpvsTdIEH/sMQvSSRj4kHOKN10v8=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:6a:df:a7:16:57:bf:3d:94:c9:03:ea:43:b9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Apr 19 09:00:48 2025 GMT
Not After : Apr 20 09:00:48 2025 GMT
Subject: CN=4c4efbdc1f2ac2c297281c6ccd3763548136a6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:2b:62:1e:fe:89:8e:a4:49:f2:b3:0c:a1:
1f:ed:18:bc:4f:97:22:cb:ee:e8:3f:3d:f1:37:50:
48:cb:14:fb:d2:4e:f0:91:80:99:b3:54:f7:a6:62:
3f:80:b8:5b:0e:0b:a0:5e:dd:d5:ef:c0:be:4f:ec:
10:e0:8c:2d:a1:bc:84:85:44:5d:31:5e:dc:8d:5f:
1b:06:b6:76:c7:8c:aa:4c:9a:28:1f:76:05:42:d8:
36:68:c9:a0:17:20:88:ca:2d:1a:9c:fb:8d:95:42:
3b:63:98:61:13:e0:1c:d1:dc:30:75:39:5a:7b:f0:
30:33:2c:59:a8:20:32:d5:24:dc:0b:1a:3c:48:ec:
6f:b8:59:b7:a3:fa:42:af:b8:58:b9:be:fd:ec:0b:
fa:fd:61:a9:e3:f4:a4:98:ec:33:bc:86:45:40:42:
55:01:6a:61:1f:de:80:97:55:d2:54:0e:93:ef:37:
2e:54:27:81:0b:b5:46:b6:7f:de:15:0e:53:1f:92:
e0:61:a0:72:3c:aa:e1:d0:56:02:3d:a9:f1:5e:5d:
7d:d7:8e:31:f7:f5:38:5a:9d:d3:37:38:7b:6c:81:
ec:a7:2e:2c:e5:1c:ea:87:43:d0:d3:79:8d:c1:6f:
75:e4:1d:da:54:36:6e:a8:08:7f:ea:d6:d6:00:54:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:FB:DC:1F:2A:C2:C2:97:28:1C:6C:CD:37:63:54:81:36:A6:D7
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:9d:cf:ce:e5:5c:85:c1:41:57:2b:10:23:f0:19:28:3f:12:
21:e5:03:41:2a:e4:15:da:64:95:89:08:2c:7c:a1:f9:d2:19:
15:45:37:3a:24:e7:15:be:6e:8d:2b:83:79:42:6d:83:f5:da:
4c:b9:65:6a:91:63:a5:9e:5f:e0:7c:9d:b5:06:17:0d:29:4c:
b8:92:75:51:a7:26:b6:74:7f:c5:3d:6f:e8:81:6c:c3:1e:9b:
8d:1f:8f:99:70:fc:77:ab:10:f0:18:e2:91:c6:b0:6a:27:fd:
b4:ee:b5:6d:33:b8:1f:5b:a9:86:6c:55:93:c1:8e:b9:1e:ce:
1f:7c:10:5b:7b:c4:7f:a4:83:1d:22:09:d1:f2:14:d2:8e:c3:
e9:a8:ae:5c:e6:12:c5:15:b5:71:13:46:b8:8d:1e:de:82:ad:
16:eb:83:b3:ef:16:c7:15:c5:bc:4c:a5:7b:f8:6b:4a:06:cd:
cf:9c:4e:c8:63:79:6f:82:fa:65:3c:45:10:0f:85:13:8a:9e:
eb:70:e1:dc:56:70:df:27:a4:7c:f4:06:12:da:02:ca:42:dd:
a3:a5:c7:d5:77:9f:94:5f:fb:a7:03:d9:41:5a:ac:5e:7e:8b:
fd:6b:39:70:ac:6c:0f:dc:70:f2:46:da:7c:f2:9e:93:42:f6:
e5:db:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:36 2025 by rpki-client