Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: GimZ93x611mGvT3VXDvxjnX3rik5ohXSecbo0KNqmcA=
Subject key identifier: 1F:CA:40:FC:09:A6:1A:29:00:67:C3:B2:D6:4D:E6:6C:3A:E7:A3:54
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019511347248CBAEC392D3D57DA5E74FA74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 03A4
Signing time: Mon 17 Feb 2025 00:00:04 +0000
Manifest this update: Mon 17 Feb 2025 00:00:04 +0000
Manifest next update: Tue 18 Feb 2025 00:00:04 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: OhflECPWGw6KQOLd7Bm+WlLAOofI3Ar+JU+RAS6IjsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:72:48:cb:ae:c3:92:d3:d5:7d:a5:e7:4f:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Feb 17 00:00:04 2025 GMT
Not After : Feb 18 00:00:04 2025 GMT
Subject: CN=1fca40fc09a61a290067c3b2d64de66c3ae7a354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:9b:0b:32:a0:ee:c8:73:69:da:f1:66:c5:
c5:7d:47:41:77:be:07:00:92:cd:9d:ac:b4:6a:c0:
f9:3f:40:7c:ec:0f:00:96:78:6f:62:42:ac:e3:a0:
14:58:ba:84:e6:d0:03:5c:7a:18:07:e9:bc:4e:46:
0a:b4:1a:d2:24:43:94:6f:2c:cf:40:5d:fa:c4:83:
77:11:e8:12:dc:7e:68:a9:f3:30:d5:cb:74:99:e3:
a0:34:ed:55:11:7f:2f:f1:63:e6:fa:36:f0:58:07:
d7:57:5e:b5:1c:ba:47:3f:b6:a6:76:68:96:23:10:
fd:81:f8:34:0c:46:2c:7a:b4:2a:f9:83:40:cb:89:
0a:c9:84:6c:cf:ba:86:0e:8b:94:92:33:bc:0e:58:
5c:20:a9:c0:c9:75:84:12:26:dc:6a:bb:23:ba:ec:
84:97:6e:c8:e6:15:e3:86:51:51:20:da:49:9a:3a:
27:5c:f1:ad:8f:7c:ab:62:ef:4f:11:1f:0d:3b:1a:
52:43:de:79:fd:31:b8:9b:cb:ca:9f:3c:b9:e8:08:
bc:66:8a:86:b3:08:46:2f:42:c3:54:2e:33:d5:32:
50:84:eb:ee:f5:a7:b0:8f:b7:36:e0:74:86:4d:f7:
4b:ee:16:55:bf:79:b4:0e:6b:d7:1d:59:cf:3f:d0:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:40:FC:09:A6:1A:29:00:67:C3:B2:D6:4D:E6:6C:3A:E7:A3:54
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6f:7e:6c:94:50:5d:17:1c:c5:73:47:83:a8:22:59:ca:50:
bb:71:69:b1:03:68:b7:2c:ec:32:35:e3:8f:d4:53:a3:72:4f:
c4:82:b9:eb:48:48:57:cc:35:37:77:79:cc:a4:d3:5b:f3:b4:
7f:4e:c6:5c:d3:79:7f:26:e8:a5:32:17:f9:58:da:a4:34:cb:
fd:0f:d9:0c:35:b4:d3:8b:c2:65:20:2a:8e:f5:b1:7c:ee:c7:
51:ca:13:a6:20:21:e7:c4:ad:00:aa:5a:d5:a8:7e:fa:ed:02:
43:43:1e:4c:e5:bb:5e:64:8e:e5:b6:4a:42:b4:c5:c4:33:23:
60:9c:55:9c:52:96:97:6e:a8:19:06:ae:91:31:3b:68:6e:1f:
2e:52:e9:5b:1b:91:ba:c9:b5:23:04:23:bc:58:d5:07:96:21:
4c:aa:e3:fa:06:4f:55:10:6b:70:71:bd:5f:79:07:11:16:10:
d5:5f:72:a6:c5:b6:0e:5f:dd:4b:a8:09:d7:5f:9f:28:78:8f:
37:c8:7f:d6:36:04:7e:14:08:f8:6f:dc:cc:6c:7f:31:3f:06:
fe:ad:d4:eb:1b:9e:71:5c:41:93:d5:7e:4c:33:49:23:72:45:
6c:d3:df:6d:51:2c:4c:a1:59:b7:b1:21:5c:b4:5c:6d:ae:3a:
ba:fc:16:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:33 2025 by rpki-client