Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: CFIMcGMdXL1nU6qe/JZiB/TXiHOQfnQYZ+I77HTbmCU=
Subject key identifier: F6:7F:6C:E4:B9:72:99:18:9E:C4:64:28:F4:B2:92:BF:54:90:5E:FE
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01964D7F2638895832BE7884F3A6AF90070E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 88
Signing time: Sat 19 Apr 2025 10:01:40 +0000
Manifest this update: Sat 19 Apr 2025 10:01:40 +0000
Manifest next update: Sun 20 Apr 2025 10:01:40 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: +/XLNyZII4Q7Ypw+B8bxmSyDVz+mfIpCUTiZEHB9g/E=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:26:38:89:58:32:be:78:84:f3:a6:af:90:07:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Apr 19 10:01:40 2025 GMT
Not After : Apr 20 10:01:40 2025 GMT
Subject: CN=f67f6ce4b97299189ec46428f4b292bf54905efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:42:3e:e4:40:67:39:20:7f:86:1f:46:10:
6a:7e:7b:be:90:0b:1a:39:cf:9b:ae:17:f3:3d:ff:
21:84:b1:ca:82:b3:79:58:e5:a0:72:50:6d:d8:61:
fa:16:49:f1:72:8f:6a:b7:68:9b:91:d0:59:b8:fd:
59:6f:72:67:a2:3a:17:65:55:97:44:d6:e7:0a:36:
92:85:33:4d:07:c7:13:fc:8e:4e:42:e0:6c:72:05:
7f:01:72:d3:28:eb:05:15:55:88:78:9b:d9:f2:03:
5f:90:26:fc:52:00:8a:ef:3c:d8:14:44:e3:5d:60:
28:be:87:24:49:a6:07:0d:d7:fc:d8:b3:5a:b9:48:
38:1a:54:a8:4d:c8:4c:42:28:b5:33:28:5c:66:cc:
71:53:61:03:8d:96:ed:83:72:a3:8d:62:af:0e:98:
95:f2:00:63:ae:2e:73:8a:9d:62:00:93:b1:9f:b6:
9d:1e:65:fd:56:9b:ef:ca:d8:b0:76:5d:50:7f:a7:
f6:ba:99:22:00:a1:77:92:cc:73:7a:52:eb:42:43:
92:bd:e6:83:61:5c:46:a1:01:e6:89:73:b3:08:47:
1d:e0:61:a5:6b:fc:92:68:81:aa:66:f9:93:36:80:
e0:62:4c:96:71:6e:c4:36:bd:71:fe:0b:59:8f:4b:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7F:6C:E4:B9:72:99:18:9E:C4:64:28:F4:B2:92:BF:54:90:5E:FE
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:14:b1:e4:52:80:fa:89:28:7f:29:a0:d7:e9:ac:bb:55:76:
52:80:78:28:2a:d0:37:b9:cb:49:78:fb:ec:c5:d3:a2:bf:68:
be:1c:51:d9:02:ab:05:8d:dc:64:ee:b1:04:d0:7c:16:05:13:
25:aa:5f:5e:a8:95:73:a1:f6:56:78:0a:87:92:0f:4e:e3:17:
5f:af:9b:db:ce:4c:f8:a4:4d:f7:da:97:f3:d2:38:d8:c9:23:
06:7f:0f:9b:bc:7b:8b:51:a8:c0:51:6d:66:fa:f9:c4:0b:ab:
d3:0b:fd:c3:f0:cb:ab:1d:57:34:0d:ef:63:b4:0b:4f:26:9f:
96:70:7b:b5:50:ab:6a:de:50:24:8e:7d:78:05:62:c7:8d:76:
7c:93:e7:41:c1:05:98:4b:82:69:05:21:8b:8e:1f:a0:74:ca:
f0:8d:a0:50:33:29:bf:43:5a:6a:bb:0f:42:81:db:d2:ab:f6:
57:64:4a:47:c2:ca:92:01:12:8e:85:20:f1:61:9a:1d:68:97:
ab:3a:1a:43:15:95:4e:7a:5b:41:42:f2:70:5f:ca:0a:16:c8:
ea:a6:b5:a2:d6:20:10:6c:6e:3f:c1:cc:6b:b5:21:68:c3:13:
c5:12:18:d7:eb:a8:3b:a6:08:0e:8e:20:39:49:0f:90:ce:8e:
e6:55:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:11 2025 by rpki-client