Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: D3vnpWeGFX9uyicv8zO+yqB8OZUgkXnvs09Q9ir7y4I=
Subject key identifier: 96:01:1A:2C:C4:BC:10:E6:82:41:B4:55:F0:E0:F7:25:F7:21:58:FC
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 01963EAFF91A962BDAEA88F89BCA8E76F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 13:00:41 +0000
Manifest this update: Wed 16 Apr 2025 13:00:41 +0000
Manifest next update: Thu 17 Apr 2025 13:00:41 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: 12AY+/Uwh9cPppXYk88zgFdBgxEaH47uE3EFRtyTV7M=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:f9:1a:96:2b:da:ea:88:f8:9b:ca:8e:76:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Apr 16 13:00:41 2025 GMT
Not After : Apr 17 13:00:41 2025 GMT
Subject: CN=96011a2cc4bc10e68241b455f0e0f725f72158fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:73:b0:3a:cf:91:2c:d6:a3:e0:93:b3:e0:
42:ae:81:06:2d:47:49:c0:8e:42:cc:e9:6f:48:13:
15:d2:0a:d1:1b:b9:ce:31:f9:81:25:b3:7b:4a:a2:
c8:51:fb:6a:f6:c5:81:79:d5:36:5a:91:72:8c:cd:
fb:5f:a6:3c:34:de:44:e3:df:ad:cd:a0:4a:1c:14:
af:4b:88:08:40:24:13:84:ae:49:69:e7:e7:c4:79:
38:2b:83:fd:12:1b:cc:87:6b:11:ec:4d:2b:0c:2d:
56:3c:d4:25:e0:f6:49:dd:8a:ab:3a:87:55:40:ff:
b1:b0:8f:ab:f6:82:bb:14:60:fa:ed:82:41:1f:15:
bf:84:f1:61:55:6c:90:1f:1e:01:f5:61:55:8a:ee:
01:3e:4a:be:91:3e:06:41:fc:4f:c3:e5:73:a3:e0:
d7:87:17:a7:b6:29:f7:d0:24:89:0b:be:89:89:2a:
8b:fb:d9:1f:3e:a6:ce:9b:af:54:25:1b:3e:d6:4f:
f3:48:2a:ff:63:ca:1b:cd:de:d6:ec:99:36:b9:54:
1b:78:ac:a6:8d:8e:24:bf:6c:8a:56:0f:98:99:68:
0f:62:04:fa:0e:1e:59:ac:55:68:c7:a8:43:a1:4e:
2a:11:d5:ce:16:98:3b:40:83:ef:b0:e3:16:ef:84:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:1A:2C:C4:BC:10:E6:82:41:B4:55:F0:E0:F7:25:F7:21:58:FC
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:11:20:2d:6a:12:68:f1:2b:3c:25:80:ba:f0:8f:9c:ce:
5a:b5:54:93:3c:d8:4d:5a:65:10:17:ee:b8:c6:a9:31:32:44:
16:a3:b4:e8:72:02:bd:1c:11:87:82:55:55:2d:67:bf:33:d1:
e6:42:fc:05:6d:cd:6f:24:3f:38:40:60:a7:9e:09:bc:0f:0c:
f2:55:8b:76:3b:0f:a3:9c:07:88:aa:e0:26:9b:bf:e9:8f:fd:
5c:24:33:49:8c:a2:d7:7f:00:fe:ff:0c:35:59:2d:ec:8a:e6:
1c:58:e6:4c:c5:eb:0b:37:5b:73:ed:ae:f5:07:7f:80:7f:32:
12:d7:91:96:76:4d:74:c3:90:6f:a2:5c:eb:63:0a:4e:9d:34:
6a:50:6a:cb:1d:99:08:e2:be:42:32:54:82:70:8b:43:24:7c:
76:2a:46:b7:ae:9e:67:d3:51:9c:f4:3f:ae:bd:67:c3:77:8d:
31:fd:19:0e:5b:b6:d9:40:67:b8:77:bc:6c:40:90:34:df:74:
e0:77:30:0c:6f:6f:8f:2f:6f:20:49:e8:d4:e6:bc:56:0a:16:
16:cc:0e:51:44:5b:5a:a3:cc:4a:11:ce:3e:78:82:d1:de:d4:
46:87:c8:2f:e3:fa:5f:b3:96:46:aa:79:5f:bc:bf:5f:f3:f1:
d8:bc:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:15:52 2025 by rpki-client