Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: CLakOVVmNZhrmxp8MPBuHUTHRP3mqA06rui7R7cY4Wc=
Subject key identifier: C0:91:D2:54:DE:8A:3F:44:88:AE:B8:65:37:D8:AC:F6:C1:17:0E:4C
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 01963F54FB9345D5946C4DE44CDBF3C98887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 057D
Signing time: Wed 16 Apr 2025 16:00:56 +0000
Manifest this update: Wed 16 Apr 2025 16:00:56 +0000
Manifest next update: Thu 17 Apr 2025 16:00:56 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: lLlKk2+QXyRE+qy+PQM/J/go8J9PW6kFA0rgn5SIUFQ=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:fb:93:45:d5:94:6c:4d:e4:4c:db:f3:c9:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Apr 16 16:00:56 2025 GMT
Not After : Apr 17 16:00:56 2025 GMT
Subject: CN=c091d254de8a3f4488aeb86537d8acf6c1170e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:d8:61:8b:bb:86:38:cf:81:dd:e0:a0:da:
2d:25:3c:61:7d:16:4c:6c:57:09:b0:c2:18:96:42:
3f:2d:eb:6d:a5:c3:01:cf:9e:56:8b:b8:98:48:48:
e7:e7:07:f6:fe:35:a7:2e:83:93:ca:ca:30:50:a7:
58:ad:f7:77:1f:1d:6f:ab:b0:1e:e9:65:ce:3e:c0:
e4:95:96:b8:5a:dc:02:2e:91:17:ed:a6:7b:69:dd:
80:66:8f:aa:50:05:de:38:4c:e1:b4:09:48:2e:05:
a5:67:c4:a1:14:12:7b:4d:3a:dc:be:f2:fc:37:69:
53:e1:b6:f4:42:c2:48:d5:0e:d4:1a:b8:03:90:6b:
db:e0:c1:6d:ee:57:dc:c7:0e:38:86:8e:75:b9:3b:
39:eb:d4:8a:ec:2c:de:92:9a:02:69:9d:66:99:95:
31:de:ce:98:7e:18:5c:cf:21:ef:ce:fd:5e:4a:47:
a2:b7:fe:67:60:ae:b6:51:ce:b1:78:45:c1:a8:3f:
a8:d2:fc:e3:dd:12:5e:91:9d:e7:28:6a:e7:fe:ae:
94:81:df:8a:6f:09:6d:c4:1b:c0:08:a0:25:c1:80:
d8:90:e3:2d:0c:60:45:8d:ff:90:0c:52:e3:26:07:
87:0e:75:9d:49:90:a7:26:f4:cb:1a:9e:0b:ab:17:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:D2:54:DE:8A:3F:44:88:AE:B8:65:37:D8:AC:F6:C1:17:0E:4C
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:42:76:6a:2a:7a:e3:f0:e6:ca:12:3d:2a:a9:8a:6b:d6:9b:
38:c3:6a:eb:10:c1:08:36:05:1b:35:0c:03:a6:09:76:a5:57:
8e:97:c7:da:2c:4b:3f:09:0b:c7:39:ab:a0:17:b0:79:14:7b:
1d:62:0a:2b:46:6d:89:e0:3e:73:6b:d1:b7:f2:e2:e8:ad:46:
1d:fa:29:96:ff:3f:8a:f8:17:58:51:27:b8:45:5f:5f:80:bf:
37:e1:6e:03:7d:3f:c5:09:22:0d:18:c8:d4:d7:00:c8:9c:88:
cc:94:d7:e1:f1:76:fe:1f:f9:cd:44:8b:aa:94:8a:58:ed:5d:
e3:4a:81:51:ff:93:d9:c6:cd:96:d3:d2:c5:21:c8:63:4f:1a:
d0:9e:e4:b7:e8:ed:80:25:23:dd:b2:ba:c9:48:9b:af:d1:0a:
3a:77:95:f3:94:0c:05:9d:01:1f:83:1f:43:76:09:38:d1:f3:
30:43:b3:25:a0:ba:3d:1f:89:6c:70:fc:9a:ce:a3:84:49:cd:
cc:7d:b5:12:f1:da:77:9a:6b:73:97:1b:c7:be:fd:2e:24:58:
4e:9f:06:25:4a:23:18:28:90:29:1f:99:38:17:d9:89:f1:95:
e6:7c:88:23:49:b3:c7:41:f2:12:2c:3b:77:aa:77:93:54:0a:
f7:c4:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:19:49 2025 by rpki-client