
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: H/IumhE1sZd7ebyJpHaCw9Ku77xS+H0L4eNJVynukF8=
Subject key identifier: 2B:A8:BD:0D:3F:35:BE:96:E1:41:8F:43:70:6A:8D:1B:9D:F1:B9:25
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01962A172168AE50F7C625DDA33AE6722C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0736
Signing time: Sat 12 Apr 2025 13:01:21 +0000
Manifest this update: Sat 12 Apr 2025 13:01:21 +0000
Manifest next update: Sun 13 Apr 2025 13:01:21 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: hFuMwW3BEfV6g3TMGT24EW2jIxgsuLbBUyOK6KdhZos=)
2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:21:68:ae:50:f7:c6:25:dd:a3:3a:e6:72:2c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Apr 12 13:01:21 2025 GMT
Not After : Apr 13 13:01:21 2025 GMT
Subject: CN=2ba8bd0d3f35be96e1418f43706a8d1b9df1b925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:a2:11:a3:4e:48:be:43:7d:98:16:90:a5:
92:17:19:5f:9b:6b:22:b3:62:e7:59:e6:2a:f6:0b:
ec:1f:e1:4b:55:ec:bb:64:97:36:1f:ce:06:ea:4e:
8c:59:dd:0b:95:45:10:9c:a8:fc:ba:9a:be:4a:46:
b5:64:b3:db:f2:2f:ce:91:f0:d7:5d:81:e5:43:b0:
ec:de:ee:ab:c6:74:ce:bd:33:19:74:3b:70:19:de:
96:46:17:0a:0e:fd:12:a6:f0:59:b9:5c:6c:bc:d9:
c9:92:1f:01:d9:2c:b6:83:6f:44:c2:15:da:06:3f:
bb:88:e3:3a:61:78:b7:a9:0c:ec:4b:11:62:54:a1:
20:8b:08:79:0b:b9:7b:c4:f9:f5:dc:e3:c2:9b:71:
ec:05:1a:13:68:1c:7b:c6:1c:df:3f:32:d6:da:72:
3d:50:6a:a0:08:74:84:09:b3:29:b4:3d:d7:cf:1a:
bd:e6:8f:f1:e2:83:91:fa:87:e9:3b:5b:ac:4b:23:
a6:f8:15:99:97:70:19:ed:3c:86:72:a8:6a:3d:d3:
9a:0a:5c:64:20:ac:e9:5a:90:ae:7b:3c:93:98:33:
2d:b8:37:ca:ba:5f:d5:51:d8:d1:99:7b:55:2f:0b:
32:05:bb:fc:f0:8f:bf:f9:8d:19:49:9b:01:e3:df:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:BD:0D:3F:35:BE:96:E1:41:8F:43:70:6A:8D:1B:9D:F1:B9:25
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:bb:11:db:d2:44:55:51:da:dd:80:69:bc:1a:25:2b:d5:
d2:09:a8:b9:86:30:7e:68:d2:fb:f7:21:5a:38:55:98:06:6a:
38:9f:ef:8d:39:a6:a7:25:c8:7d:c9:f6:15:f8:c8:4e:58:a0:
8b:fc:b2:e0:9c:cf:ef:8d:85:be:08:13:e2:2e:c2:ad:73:86:
a5:f5:ee:bb:4b:e9:56:2c:e1:2a:ad:43:a3:e3:81:ee:08:2d:
36:2f:56:90:c2:19:01:5c:16:96:3d:e5:68:8f:b3:7d:f7:a0:
91:f3:85:6d:f8:17:78:d3:ab:7c:73:56:23:69:02:e9:12:33:
a5:cd:b3:a6:3f:32:14:47:a5:2b:7b:f9:4e:3f:1e:98:60:54:
5e:44:27:c9:07:f6:64:88:fa:ff:55:64:f5:4c:d4:96:96:95:
d9:87:72:5c:83:c4:b9:c7:a6:1b:34:7e:68:b7:58:75:a7:80:
0f:85:95:fb:0b:dd:1e:2e:0d:11:81:c1:ba:2d:af:c2:d0:fd:
e9:30:88:ca:64:a0:f5:d9:35:79:a4:70:57:71:87:ed:8e:6e:
af:0f:2e:0c:a1:c6:bd:6e:7c:6b:ea:76:0d:ec:e4:b7:4d:4d:
30:dc:de:45:b5:77:dd:d2:0a:c6:b0:35:98:d0:68:f0:cc:ec:
02:47:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:24:33 2025 by rpki-client