Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier: LQxt5CkIxd9Bz97S7lTcZbti2NNnzcGHsprNCRZjX6c=
Subject key identifier: 38:6E:CA:DD:94:7E:A9:34:A6:E2:FA:17:3E:65:A5:41:89:A9:84:91
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer: /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial: 01965538A1979BDC960D971991DFD9A19B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 22:01:36 +0000
Manifest this update: Sun 20 Apr 2025 22:01:36 +0000
Manifest next update: Mon 21 Apr 2025 22:01:36 +0000
Files and hashes: 1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: tICXBP3uTGx9b0HuF8lwgEZZrO528BXHkHP6A3yqV6E=)
2: _mz1bO9qw-mR0ZWQodW0gDxX-XU.roa (hash: EIXfCvhzf7KTxjdRcM1VzT/2S7P1xIG9PsfWTukoty4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:a1:97:9b:dc:96:0d:97:19:91:df:d9:a1:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Validity
Not Before: Apr 20 22:01:36 2025 GMT
Not After : Apr 21 22:01:36 2025 GMT
Subject: CN=386ecadd947ea934a6e2fa173e65a54189a98491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:1c:9a:85:f4:9f:39:30:79:39:69:bc:83:
c5:ae:5d:20:55:fc:0e:84:bf:53:24:99:84:d5:df:
39:a0:38:0e:3c:95:b5:23:da:b5:00:23:57:24:00:
af:05:a5:f3:85:ae:06:1d:cf:45:28:28:79:3c:0d:
d0:78:d8:a5:a2:f1:fa:33:bd:16:ce:82:0c:6c:4d:
1f:50:cd:21:fb:f6:8a:dc:37:8d:1f:17:ea:50:db:
93:ce:ba:b7:80:b4:5c:d7:86:a4:34:67:23:4a:89:
5f:f1:4a:e5:5e:46:eb:74:3c:24:78:61:61:d9:da:
83:08:33:85:7d:36:6a:44:6c:82:54:6b:4c:c1:65:
f0:71:4b:46:de:dc:94:84:67:fa:ad:75:61:a5:c1:
ab:91:c6:e5:16:7b:33:89:c4:f3:b7:6d:f6:53:85:
4e:cb:67:f6:ac:d2:b1:8d:1c:3d:73:5f:ff:77:4f:
eb:25:fd:6b:ff:36:9e:34:2d:f2:c6:2a:68:b1:95:
5a:df:8d:d0:89:5d:36:c2:64:cd:98:4d:15:7a:39:
ff:f6:89:13:cb:43:c5:c2:0b:71:7a:f5:0f:1b:37:
f9:47:bb:55:e6:1d:55:ef:88:cc:6b:7e:75:aa:56:
de:f3:09:fe:6c:05:c3:8a:a4:8e:81:eb:75:e2:b0:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:CA:DD:94:7E:A9:34:A6:E2:FA:17:3E:65:A5:41:89:A9:84:91
X509v3 Authority Key Identifier:
keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:44:14:8c:4a:04:34:ca:93:99:70:59:63:ec:cf:8a:01:ce:
3f:51:36:85:30:0c:fb:56:89:54:e7:53:45:6a:57:28:09:b8:
8d:66:4f:64:ca:a0:4b:1a:7c:60:a6:42:53:23:6c:cc:82:82:
73:b4:16:93:4f:f0:d4:c3:57:9b:e8:6d:15:82:1e:21:aa:ff:
ba:9f:cf:7b:9e:36:18:0d:19:4f:9e:ec:2e:2d:66:1e:2b:d5:
45:e3:de:35:6d:ed:74:32:cf:2b:00:a5:e7:d0:7f:31:1c:dd:
6a:cf:d1:e4:ec:a9:60:c6:71:26:0d:8d:84:f4:97:f5:75:26:
6f:f8:c9:5c:d7:2e:42:ec:37:42:8c:b5:00:ce:e5:d6:3c:48:
52:23:dd:b6:e0:0d:78:f4:e8:9e:04:74:5e:a9:48:e2:40:f6:
ec:13:f2:87:b6:74:ce:eb:c4:07:19:e6:c7:e9:d4:83:07:39:
63:e1:60:6b:4b:06:98:46:eb:dd:d4:fb:e9:55:cc:73:3f:b4:
f4:f9:a7:06:18:d9:90:90:0a:dc:0b:49:91:20:4b:5a:0f:2e:
e0:21:0b:14:3d:49:07:96:73:60:04:7d:aa:82:6a:01:a2:b1:
4b:31:93:79:06:c4:30:2c:a9:c5:3a:db:b8:bd:a2:43:7e:7f:
6f:e3:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:07:02 2025 by rpki-client