Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: QEnbY6Z0G2GwT/cmfDBPqguyXNL36FxpWkJ2z4Iyg3c=
Subject key identifier: 0A:AC:E5:5A:41:0E:CB:28:1A:CE:6D:F3:BC:CE:FC:DF:27:DF:F1:D8
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 01964556CC77B7B959761749979B7A2C6FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1474
Signing time: Thu 17 Apr 2025 20:00:38 +0000
Manifest this update: Thu 17 Apr 2025 20:00:38 +0000
Manifest next update: Fri 18 Apr 2025 20:00:38 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: PQQL3PgrfsmJVmhvKXNYPmZPmv00TWYM5XG/ZJy3k+M=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:cc:77:b7:b9:59:76:17:49:97:9b:7a:2c:6f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Apr 17 20:00:38 2025 GMT
Not After : Apr 18 20:00:38 2025 GMT
Subject: CN=0aace55a410ecb281ace6df3bccefcdf27dff1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:a1:54:4c:ed:ef:0c:77:c2:06:1f:57:f4:
ac:86:ce:6c:42:54:f3:6b:95:89:bc:c4:4a:46:3f:
77:a3:d6:16:41:5f:1c:b9:8e:73:bc:10:9d:c9:65:
de:ab:05:91:5b:dc:03:61:b8:da:a6:4f:00:b0:ef:
de:be:57:be:e7:7c:cb:a5:7a:fa:b2:52:32:e2:62:
c6:56:cd:e5:f8:09:42:af:ec:62:fd:47:bb:85:8b:
da:b7:4c:d0:75:87:b4:eb:8a:46:9a:09:3d:c2:c6:
9b:eb:2c:ec:62:ff:d4:a7:95:16:6d:87:bf:98:f7:
76:c0:c8:11:f7:4e:02:07:a2:15:99:f4:2a:a0:e0:
41:f1:33:18:d8:0d:c4:ef:45:07:1d:d8:47:1f:72:
51:9e:b9:8d:ba:2c:e6:8a:ae:13:2d:1d:84:83:03:
26:4d:ad:0f:93:37:fd:58:25:49:01:03:a8:46:33:
10:2b:c7:64:8b:89:a5:ec:bc:97:b8:a8:11:32:2f:
f4:7a:66:9c:e2:bf:b8:e2:a3:9f:66:d8:34:68:59:
3b:b5:32:a7:34:98:f1:46:e8:10:15:cb:41:5f:84:
65:37:38:1d:de:34:ef:df:ce:18:bb:ba:88:c6:1c:
c0:f4:5d:6e:81:7e:7b:d0:de:bd:12:43:16:78:af:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:E5:5A:41:0E:CB:28:1A:CE:6D:F3:BC:CE:FC:DF:27:DF:F1:D8
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9f:c9:2e:ef:74:61:e9:69:4d:a2:95:dc:cb:5e:c1:e6:01:
42:26:85:5d:fe:5a:b1:4b:23:f3:03:88:a1:12:10:48:21:93:
24:67:45:fe:80:e4:d7:f9:31:a3:7d:8d:d3:9c:c1:e8:ab:d7:
27:48:b8:92:37:c8:d4:fc:32:85:5a:07:4c:b0:49:55:83:a1:
e9:cc:f4:b1:dc:7d:37:0e:69:35:af:71:0d:07:ff:f3:0a:e9:
5d:4c:09:9f:5d:ea:a9:4b:c4:b3:39:bd:64:74:8f:f6:62:a7:
ff:79:f5:0e:64:27:ef:19:fd:1d:d8:d1:70:6c:96:0e:5d:92:
ae:7d:b7:93:3c:5c:b0:4a:51:e0:06:df:46:08:07:33:f2:42:
27:3d:20:a6:df:cf:63:1a:92:ad:f4:0e:24:71:04:05:6b:3b:
1f:e4:8f:3a:4d:46:4b:ce:6e:a9:c5:70:9e:0d:e8:3b:73:3a:
a1:4a:ae:4c:9c:3d:d9:ad:95:fb:fa:6a:89:d2:b0:6f:51:5f:
94:98:53:35:88:47:b8:16:4a:38:cd:9e:9d:35:0e:7f:2a:9b:
fa:14:2f:d3:7f:d2:87:4a:e0:68:7d:66:32:97:32:85:ec:b4:
98:18:93:cc:36:33:4a:94:12:46:2c:6d:7a:22:49:00:9a:43:
ff:ea:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:15 2025 by rpki-client