Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: OylGQHmczJ2RYPrEBxsHN+PJc/k/CQX1McVtzX1WKls=
Subject key identifier: CE:46:38:69:D2:68:C8:04:5F:CB:16:C6:3C:02:5C:4C:92:CB:54:40
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 01964D7EC9E62943FA974D417F71E906F015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:01:16 +0000
Manifest this update: Sat 19 Apr 2025 10:01:16 +0000
Manifest next update: Sun 20 Apr 2025 10:01:16 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: jpXVdy8PYTf3n2xOwmhLzG1/5j0a50orrHHCoMFPg6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:c9:e6:29:43:fa:97:4d:41:7f:71:e9:06:f0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Apr 19 10:01:16 2025 GMT
Not After : Apr 20 10:01:16 2025 GMT
Subject: CN=ce463869d268c8045fcb16c63c025c4c92cb5440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:f7:55:77:84:19:e3:51:a9:6e:fb:9c:e0:
6e:32:49:54:50:86:3c:b4:2a:22:3e:56:1a:46:ad:
d3:b9:1c:d6:b3:86:dd:40:cd:63:74:03:80:02:e1:
9c:bf:c7:5f:a7:c2:0f:94:83:aa:07:a4:bc:b6:f9:
68:31:17:3c:81:68:a2:77:56:5d:2f:04:33:6c:62:
6e:72:27:5c:44:3b:67:78:4b:36:de:52:73:63:c1:
07:82:52:f9:c2:46:f6:6f:50:4c:4e:00:91:cf:0a:
82:5e:eb:d4:5f:d2:74:24:6f:97:1e:e5:f2:f4:8f:
ce:4c:5c:e3:68:80:d8:fc:46:c8:e0:77:f5:dd:c2:
a9:85:8b:3a:56:c0:f4:8e:1f:74:21:55:26:13:6f:
e9:50:4b:0a:b5:c4:1b:aa:3d:9e:d0:eb:79:ce:59:
5c:55:29:f7:52:34:01:3a:96:eb:1e:77:f2:19:11:
b4:8a:b1:f5:92:a0:6c:3d:33:a1:ab:4c:8f:6b:93:
f3:fc:0d:06:0b:29:7c:9a:1b:5e:64:39:59:3e:e3:
d2:fc:e1:ab:f6:96:65:3b:39:8c:4d:a5:78:72:a6:
36:a8:bb:29:33:b2:0c:27:41:50:95:0d:61:f9:f3:
8b:87:2b:48:63:f7:ae:f0:ad:7b:4e:d3:be:c2:0a:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:38:69:D2:68:C8:04:5F:CB:16:C6:3C:02:5C:4C:92:CB:54:40
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:49:e8:58:bd:f5:9b:ff:85:d8:da:91:97:73:91:84:65:
89:36:19:45:ae:ba:06:b2:42:2b:e0:93:36:45:1d:82:99:e0:
45:94:81:46:47:07:e9:d5:9f:23:ef:8b:65:0f:4e:68:b0:5a:
c5:74:f4:7a:be:24:b1:0b:74:dd:3c:4d:b2:d0:16:59:ec:79:
a3:e7:b5:6b:c9:08:ea:82:96:95:38:f0:21:aa:83:d7:37:24:
5a:80:86:d8:d3:80:f6:d5:82:f3:22:3d:d4:0a:cb:f5:ba:f9:
c4:5d:a3:35:4f:a0:80:19:56:22:c1:b0:ec:0e:a3:8a:71:7c:
78:5e:74:c9:04:bb:88:08:3b:81:23:9f:cd:9e:6e:b9:64:a7:
1b:34:de:97:87:48:b1:62:57:1e:50:24:ad:74:39:ea:62:fd:
dd:b0:89:e3:95:16:ca:ef:e7:5d:51:12:73:2c:fb:55:53:e7:
a7:6e:12:95:98:99:46:f6:f1:76:7d:6f:37:c1:91:3a:d8:ae:
c4:f7:ce:f4:55:56:60:bb:ef:97:c0:d7:7c:3b:31:8f:44:9d:
ef:60:34:5d:51:31:1a:87:de:5f:1a:0b:90:86:ec:e4:96:b6:
99:09:b1:73:fd:d8:95:1d:5b:2b:8f:24:e9:53:5c:24:bd:7c:
8d:45:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:41 2025 by rpki-client