Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: 3x/bU0e90BdfB9NF4TN9uvpnvYv+YCAZ22uxxIFXYCo=
Subject key identifier: BE:00:E0:F6:A5:26:EF:E5:97:BE:60:BB:85:FF:85:E1:EE:E5:FA:A8
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 019654C9BC46CD586D294FDD84574D6007E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0AD1
Signing time: Sun 20 Apr 2025 20:00:29 +0000
Manifest this update: Sun 20 Apr 2025 20:00:29 +0000
Manifest next update: Mon 21 Apr 2025 20:00:29 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: zYV0txPgqaHNC44cgT46Mu0y5Sia1orysDtz7njVc30=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:bc:46:cd:58:6d:29:4f:dd:84:57:4d:60:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Apr 20 20:00:29 2025 GMT
Not After : Apr 21 20:00:29 2025 GMT
Subject: CN=be00e0f6a526efe597be60bb85ff85e1eee5faa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:be:e4:c8:41:e7:84:3c:4a:eb:a3:af:87:
96:b7:07:81:3b:fb:ae:1f:e2:40:41:ea:aa:8b:be:
79:f4:d1:dd:82:55:44:e2:87:0f:1c:40:92:cc:6c:
04:c0:b9:67:6d:2d:5d:b7:d9:88:7e:3d:af:c7:46:
4c:74:f6:96:15:cf:5a:a9:1d:40:37:ec:93:da:57:
05:c4:5b:12:b3:1c:98:6b:2b:8a:55:0e:d2:0c:de:
2d:b2:c7:cf:6e:44:00:34:1a:29:89:88:ea:10:79:
45:07:23:5c:a1:a3:d4:40:f6:1b:d5:02:3d:98:96:
e8:81:d7:4d:1b:8c:55:49:da:40:7e:5d:87:4e:37:
11:56:cd:44:59:73:69:98:a6:04:a5:00:7e:f2:a9:
d3:b9:0c:06:bc:48:e2:0a:d6:c0:02:76:29:76:e8:
21:5e:1d:57:f6:4c:be:69:6d:90:66:fb:61:44:8c:
09:e4:e5:35:6f:df:57:76:72:5e:0d:43:07:c9:3d:
a4:fb:14:5e:cc:23:b4:bf:af:31:76:7a:9c:da:1a:
b9:90:32:f2:bd:3a:55:d4:9c:81:cc:47:6e:99:c7:
33:8b:58:d3:47:cf:73:34:63:ab:b1:6e:df:90:0e:
67:75:e8:f6:b5:32:dd:dd:11:24:2e:6e:ec:f0:74:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:00:E0:F6:A5:26:EF:E5:97:BE:60:BB:85:FF:85:E1:EE:E5:FA:A8
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5d:dc:9f:89:33:24:84:c6:c4:7a:36:88:e1:4e:77:c1:f3:
a1:35:f8:12:4a:85:d3:6e:a4:44:17:20:44:73:11:0e:34:7f:
e6:7b:4f:1e:ae:ef:1f:cc:5a:ae:ec:e6:23:ee:93:8f:17:ba:
fa:91:9f:3f:d4:04:99:84:9e:84:95:8b:d6:33:e4:78:5f:f0:
4e:a9:b9:05:4b:18:ec:24:e8:f8:45:db:fd:7f:28:33:9c:76:
d8:fb:a4:ba:99:38:aa:0b:87:2a:70:c3:4b:93:46:24:32:81:
d4:82:3d:06:ab:e0:f2:8f:ab:98:44:24:c0:cb:f6:01:b7:87:
38:5c:ab:a4:05:ba:3e:63:4b:22:5b:d1:74:22:3d:2f:46:2b:
55:56:44:88:b5:b1:c9:c1:bc:a7:18:6a:f9:dc:b0:fa:f4:84:
d1:40:b1:12:a4:02:6d:82:2b:d5:60:4d:f9:42:e3:2a:d2:1d:
c3:74:bb:a7:6d:63:fd:48:5d:d5:5f:e9:e5:6b:3e:bd:b2:33:
d2:14:fb:02:17:37:fa:44:6d:7b:7b:3b:1c:db:5c:ca:37:4e:
64:51:43:08:39:24:da:84:62:57:a8:20:40:34:39:35:d4:9e:
a2:8a:97:fd:86:1c:64:80:df:c2:10:47:1d:5d:17:55:52:b5:
9a:d1:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:44:43 2025 by rpki-client