Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: 3mkZLj4iyq6IgvKJZJYsRTy+Z67yhOEagtWmCFZiEV0=
Subject key identifier: 34:96:19:0C:35:AC:CE:D2:81:1A:14:EB:A8:F7:45:E8:D8:08:FA:3C
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 01961169B1C9B83481A3069187852CD72D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 18:01:01 +0000
Manifest this update: Mon 07 Apr 2025 18:01:01 +0000
Manifest next update: Tue 08 Apr 2025 18:01:01 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: vjhPp4OMMnywb51I8hkgWOCrj0UgjdD7mvGfuMdfXy0=)
2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:69:b1:c9:b8:34:81:a3:06:91:87:85:2c:d7:2d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Apr 7 18:01:01 2025 GMT
Not After : Apr 8 18:01:01 2025 GMT
Subject: CN=3496190c35acced2811a14eba8f745e8d808fa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:79:48:32:25:96:b5:9b:be:71:77:6c:ed:
05:f6:32:fe:00:02:48:af:d3:ae:ea:a3:1b:50:52:
0a:ee:5f:95:34:50:c3:c9:85:40:ca:f2:b8:c1:e9:
fd:63:96:f3:90:68:77:37:f3:8e:42:fa:ec:87:eb:
9b:47:e5:5b:bf:38:8f:05:93:bc:76:2a:62:64:d0:
39:b1:3a:bb:8b:d1:74:9c:0a:15:d6:f9:8c:18:28:
22:79:2a:03:3c:98:da:5b:2a:59:b6:1a:6e:f2:50:
5a:74:ca:ff:86:8c:26:08:4a:b6:a7:46:1b:39:0c:
35:5a:f3:32:59:6b:fc:59:d2:b9:66:3f:a5:d4:a3:
bf:9d:61:b7:24:c7:f6:1f:96:ae:6e:c4:df:ec:0a:
3a:b1:c9:48:06:89:16:73:5d:b9:11:a9:9e:14:c3:
40:0c:2a:4a:b5:f5:34:58:fa:5d:2a:cc:44:ea:4d:
51:83:02:68:ff:41:37:61:bc:6d:7b:77:e7:d4:e9:
f5:d3:49:0e:e2:3d:cc:3f:e8:c3:37:12:7b:77:81:
02:61:7c:e6:8a:b6:02:c6:0c:84:2c:39:ba:26:d3:
73:44:f4:33:2b:8a:1d:50:e9:01:dc:02:45:df:da:
46:43:16:f4:4b:c9:23:f9:b0:77:c7:22:de:ac:06:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:19:0C:35:AC:CE:D2:81:1A:14:EB:A8:F7:45:E8:D8:08:FA:3C
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:42:2c:31:be:55:b7:42:b6:df:8a:14:54:a6:42:56:f4:
9e:db:ae:b6:19:af:37:77:6c:a3:56:19:a4:15:02:03:ad:bb:
c4:ac:6e:3d:ca:a8:97:a2:40:c5:37:e7:01:c3:cf:1c:f4:f0:
a1:7a:76:57:7b:36:11:b7:63:e3:2b:06:e7:ea:2b:1d:20:47:
1d:90:77:53:60:e6:c7:d8:71:81:35:f8:1d:1e:f1:c3:49:bd:
06:02:0e:21:e0:40:c4:92:94:e3:f7:af:56:b2:ce:d3:52:20:
7c:37:6d:0e:d4:70:ab:11:ca:b4:e5:70:fe:fe:ae:6a:9d:03:
d0:de:6e:23:3c:ce:8c:9a:98:c6:2d:28:c7:64:69:4a:65:a7:
2f:17:28:d6:fb:3d:1b:85:fa:90:5c:6a:e5:c4:c3:e5:ef:df:
64:96:8d:51:04:32:03:c7:29:09:39:5a:07:3c:6e:c4:d1:83:
d2:4c:27:59:b9:d5:a9:6a:54:f6:b7:d7:7b:2f:95:dd:83:be:
aa:a5:e8:cd:88:82:4c:13:33:6e:b3:0d:26:e0:1f:a0:ca:3b:
41:67:50:6a:e0:cd:1a:32:25:14:6f:00:f2:0c:cc:ad:6d:e9:
94:b4:62:63:34:f2:5f:4f:95:d2:ff:ca:4f:18:51:50:b6:b5:
65:5e:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:13 2025 by rpki-client