Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: pFFCiPTh5oFc5sVGrnHIuv51eNLXnkVjEVuoGeasoPI=
Subject key identifier: 02:8E:04:A6:4F:AB:07:94:90:34:E2:96:1F:63:6D:FF:A3:15:89:0A
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 01964E5A3063221713F7EA36D69829F7F37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 020F
Signing time: Sat 19 Apr 2025 14:00:55 +0000
Manifest this update: Sat 19 Apr 2025 14:00:55 +0000
Manifest next update: Sun 20 Apr 2025 14:00:55 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: k9RGhKcsnQfY3o66xTd5M9V5316lVmLF2X8QDUf3E+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:30:63:22:17:13:f7:ea:36:d6:98:29:f7:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Apr 19 14:00:55 2025 GMT
Not After : Apr 20 14:00:55 2025 GMT
Subject: CN=028e04a64fab07949034e2961f636dffa315890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:a4:1d:89:51:15:ea:1e:0c:45:28:12:1c:
e6:a8:16:ba:1a:e6:5b:55:87:67:9f:84:a6:09:dc:
e8:8d:97:66:08:f8:57:d0:8e:02:ff:ca:c5:78:cd:
e2:6c:1d:36:cc:43:d4:34:2c:10:1c:cc:c7:9c:b0:
cd:93:57:93:0e:0b:bc:23:78:e8:0a:40:95:d9:f0:
48:40:3b:3e:d2:38:5d:87:0d:09:83:86:a2:60:f0:
1d:67:eb:40:6a:a7:cf:dd:13:6a:8a:8b:27:cd:d2:
dd:80:f2:9a:71:b8:cf:35:48:d2:c7:ba:85:72:76:
2c:23:13:f3:85:32:f2:20:ab:14:4b:79:34:2d:a2:
0e:eb:6a:bf:80:e3:5a:2a:9d:7f:99:17:33:a7:58:
1e:40:2b:1e:27:6d:b2:58:bc:20:3a:be:4d:8f:17:
08:ba:9e:a7:cd:a8:5c:c6:97:a8:bb:a8:31:a3:f7:
7c:d5:de:c8:99:c4:8a:99:ff:11:7c:dc:21:48:ee:
66:ab:16:6e:2b:f3:c6:b9:fb:72:4c:d5:45:20:37:
0f:49:e1:ac:cb:7f:4c:bb:24:90:e5:34:69:f2:9c:
90:88:ae:25:3e:a1:67:49:bb:4f:a3:35:99:e8:83:
53:ac:f0:fa:75:5e:24:3e:86:ed:60:11:06:d7:38:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:04:A6:4F:AB:07:94:90:34:E2:96:1F:63:6D:FF:A3:15:89:0A
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:23:fe:91:74:80:43:1e:ff:eb:47:11:9f:ed:f2:a5:60:4c:
28:6e:87:50:9c:73:01:bb:8d:44:91:86:f3:12:b5:7e:fb:2e:
e5:c5:ae:d5:85:8e:5d:d4:27:40:84:65:7a:be:12:fa:d1:71:
14:05:a8:ce:ab:81:df:99:05:f7:3b:45:98:0b:15:7c:94:b3:
65:12:ca:ca:91:26:ed:f8:bc:dc:0c:de:61:6d:97:fd:49:96:
e1:8b:bc:55:4b:ce:dd:91:62:f7:e1:dd:eb:01:40:c0:3b:6b:
3d:bc:dd:86:fc:9c:49:9e:26:ce:de:53:30:0c:a8:e7:f8:54:
42:a2:3f:63:7f:ff:72:97:fc:fd:9f:6f:cf:e3:18:31:48:71:
49:cb:f0:99:50:f6:9b:cb:ea:32:80:e6:1b:61:2f:a0:0e:47:
f0:53:ef:73:01:a8:a2:10:e7:3f:25:a8:58:02:f3:dd:91:fb:
1b:c0:e9:01:d1:8c:0d:7e:29:fd:b2:4e:46:87:15:a8:28:ac:
ff:b5:28:c2:a1:9f:8e:21:9c:02:f0:de:68:d9:7c:95:d6:cf:
64:61:ce:c6:f7:ca:4a:a8:7a:be:e0:2c:9e:02:f2:b3:c8:ef:
4e:4d:b7:aa:22:1d:12:ac:14:8e:5c:71:21:85:6e:a9:74:25:
fa:ae:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:23 2025 by rpki-client