Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: bG99ewbxyCK4KiZ8fAPMUApG8S+C70BJYXKuf3OlsnI=
Subject key identifier: CB:92:1B:FC:AA:1B:24:3C:A8:D5:0E:8B:A6:BA:A3:A8:73:5B:A7:19
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 01964C3517C679D0E035409A3A0097014BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 129B
Signing time: Sat 19 Apr 2025 04:01:09 +0000
Manifest this update: Sat 19 Apr 2025 04:01:09 +0000
Manifest next update: Sun 20 Apr 2025 04:01:09 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: GYQbQ129TUe+26pXwRRmclDJEOHGjG13ByIcJcSoj68=)
2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:17:c6:79:d0:e0:35:40:9a:3a:00:97:01:4b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Apr 19 04:01:09 2025 GMT
Not After : Apr 20 04:01:09 2025 GMT
Subject: CN=cb921bfcaa1b243ca8d50e8ba6baa3a8735ba719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:4c:de:85:d1:38:ee:47:f1:ef:67:78:78:
28:fb:85:d2:87:77:3e:fc:4d:81:ce:17:48:70:11:
75:f5:2b:0c:85:3b:8b:31:e9:d9:f8:4b:b9:1c:63:
42:a3:c4:1d:1a:e1:27:d8:00:90:2f:b6:96:2a:5e:
07:82:1e:fe:3a:fa:c4:7f:d8:f1:00:4a:c4:f8:1a:
d7:6b:7d:a7:b9:9c:a4:4c:d6:3f:50:73:90:cc:df:
29:03:82:94:89:c1:dd:60:b0:19:61:c3:df:6c:16:
16:ab:4a:6c:37:11:68:52:e3:d5:1b:46:bf:9c:4b:
a4:d3:de:12:5c:42:eb:86:f6:d2:db:cd:fb:ad:f7:
47:9d:d0:9c:cd:50:81:83:78:3c:36:8b:3e:74:d0:
7b:af:34:98:e6:f1:87:4f:ff:3d:76:a1:dc:64:c7:
55:b3:4a:b4:0c:fd:69:9e:de:ce:69:f3:eb:bb:9f:
8a:e4:0c:59:47:2a:ae:7c:d0:08:3b:0a:73:a3:90:
ed:17:97:31:78:75:32:2f:84:c0:71:e9:5d:d0:8b:
cf:3b:35:cd:1a:e6:45:eb:78:f9:a6:7b:87:71:6c:
61:4e:55:0b:e3:e7:e5:30:64:db:c2:ba:81:8a:be:
5b:42:ef:9c:5b:83:52:6a:5b:14:32:f8:81:69:46:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:1B:FC:AA:1B:24:3C:A8:D5:0E:8B:A6:BA:A3:A8:73:5B:A7:19
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:83:02:b1:c7:22:e5:b4:0c:ee:7c:eb:1a:96:e3:e8:2a:f4:
7a:1f:7b:e0:44:73:4a:8d:69:90:0a:9a:7f:2d:83:c0:21:38:
d9:7b:aa:cc:e9:47:04:73:52:b5:ab:2f:a9:99:86:47:d4:dc:
eb:ae:62:14:d8:2d:98:8a:7d:9e:17:98:59:8e:37:40:6d:6f:
3e:14:6c:ce:c9:27:6f:ae:bd:27:37:66:48:78:9f:4e:97:bd:
7e:73:75:15:33:c1:da:32:f6:42:68:f8:95:f0:6a:43:5e:8c:
b4:4a:ea:07:0b:c1:a1:43:00:cd:01:b4:8a:c6:d5:fc:78:76:
c4:a3:46:31:3b:66:38:62:8c:f1:28:d2:ce:7b:0d:60:17:ed:
db:48:cd:7c:b4:6b:06:24:66:8f:12:a2:e4:0e:07:4f:9b:a4:
36:80:5c:a8:d4:44:5f:9d:5a:0c:10:97:6c:ef:b5:f8:81:62:
50:59:7d:72:66:74:2a:29:e1:6f:0e:84:2d:9f:24:58:2f:27:
3c:e7:50:6a:87:a0:8e:69:5e:c9:df:8e:69:e9:b7:47:1c:32:
5e:95:76:c2:2b:a9:1e:f5:69:8f:5f:75:d1:d2:9d:04:d7:b7:
4a:a4:8a:4e:8d:26:5e:4b:ba:0f:c1:34:59:94:ba:6a:53:a5:
7e:fb:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:25 2025 by rpki-client