Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: OjGsxOfXeFOKTuyoXpzeUhHGt90qD5q4jIqpxSW3jV0=
Subject key identifier: 4E:FE:F3:8F:CB:7C:B6:52:B0:B1:EE:E3:E1:45:75:E6:22:A5:B2:2D
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 01964F6C78EA1BC41766BDA8BBB05A1D497A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 148C
Signing time: Sat 19 Apr 2025 19:00:30 +0000
Manifest this update: Sat 19 Apr 2025 19:00:30 +0000
Manifest next update: Sun 20 Apr 2025 19:00:30 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: 7uCPoN56QsYvCKCfWonrFwipWH/+G8Sc8CaxS4fXEuw=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:78:ea:1b:c4:17:66:bd:a8:bb:b0:5a:1d:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Apr 19 19:00:30 2025 GMT
Not After : Apr 20 19:00:30 2025 GMT
Subject: CN=4efef38fcb7cb652b0b1eee3e14575e622a5b22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:70:f7:ba:03:a6:ae:8e:fa:94:86:6a:5f:
32:39:3d:ee:7f:8d:45:57:3b:4d:29:a3:2c:fc:e3:
1a:98:9a:51:cf:ca:74:e7:bb:7e:fa:00:52:4e:7b:
33:b7:b6:77:13:a9:3c:ca:92:42:68:88:d0:49:c2:
02:63:2c:78:82:bd:1f:bc:c3:9b:0e:64:4f:e2:b7:
ee:27:52:e6:eb:1d:7a:1c:94:06:d1:c8:db:f5:6b:
fe:e2:99:5f:89:97:a0:df:f6:8d:87:4c:6e:ef:7a:
ee:30:4e:37:fb:6e:79:31:01:bd:36:40:31:16:96:
41:62:1d:db:a1:98:2a:e1:8a:01:50:08:e2:60:9c:
8c:9a:6c:f4:92:7d:a5:cc:73:44:2f:f7:f6:2b:9f:
46:4b:51:b4:66:ab:b3:63:bd:8c:81:35:c4:e7:43:
c3:65:5d:4b:72:34:3d:e1:44:aa:56:d3:40:b0:80:
8b:00:e5:5b:97:04:b8:5c:fb:42:b3:c7:11:ee:fd:
b4:5d:0e:9f:3f:34:cf:22:a0:b2:08:1d:14:d7:ab:
23:b2:2a:60:28:54:53:ec:2d:02:ca:45:1f:b3:e8:
9e:56:5d:21:bb:48:c9:c8:25:9f:9c:9a:71:22:c0:
05:2e:96:9b:2d:42:51:75:4b:ee:54:8c:dd:4a:6b:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:F3:8F:CB:7C:B6:52:B0:B1:EE:E3:E1:45:75:E6:22:A5:B2:2D
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0f:73:c8:ba:f0:2c:db:ac:85:a7:68:12:e3:0e:c2:63:53:
49:55:41:70:e9:6d:f3:9c:7c:2c:c0:fd:a1:e3:03:bc:43:25:
9d:dd:c7:03:b4:a4:22:eb:7f:b2:bb:a7:05:82:a0:43:8a:69:
41:52:7f:26:e6:57:a9:40:2c:24:c7:52:2e:fa:96:fb:bb:5d:
c0:28:09:65:42:95:7f:cf:03:f0:96:9b:e7:90:f8:1e:c2:36:
57:9b:32:37:ff:69:eb:a5:1f:99:1d:e1:5b:26:65:6f:f2:f3:
5c:84:d3:19:6c:57:f7:67:1d:93:e3:94:99:ae:96:1e:a4:a3:
76:b7:76:98:c1:a5:fd:d7:5f:ef:b2:b0:c6:48:e1:7a:f0:ce:
43:8a:4f:f5:44:00:4f:f2:6a:dd:7e:eb:3b:73:d6:bb:46:79:
f5:4e:06:7a:19:4d:15:5a:a0:19:ca:01:c4:b4:01:29:41:e2:
3b:7f:28:4d:54:e9:fb:9a:68:64:ca:0f:5a:bc:3b:2c:27:08:
0e:e4:57:4e:49:b5:bb:17:6c:14:78:60:18:1d:24:0d:4f:91:
dd:2d:5e:da:b3:31:d0:de:29:9b:2a:83:78:18:90:e2:db:eb:
ba:72:ec:3d:f3:9f:9c:c8:7a:99:5c:6c:f8:be:ae:fd:42:c9:
a9:6e:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:43:55 2025 by rpki-client