Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier: KBeKgj2/ygFRnzrhemR7HK4xXllLUVXVc5XC8VQxNtI=
Subject key identifier: 5B:17:D5:45:CD:C2:2A:DF:02:07:90:4C:38:40:42:17:AC:DB:7B:3E
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 01965236986992AEF5BC8B776D0DA30B9BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 08:00:31 +0000
Manifest this update: Sun 20 Apr 2025 08:00:31 +0000
Manifest next update: Mon 21 Apr 2025 08:00:31 +0000
Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: KX71aYwZSbL199A3/fpaFNliPdTI3phOhKAdf4djF5U=)
2: jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa (hash: 5f5RDqgvWFs/JJIC0o4g6y4OSZQd4pIoTEeBtxoIxSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:98:69:92:ae:f5:bc:8b:77:6d:0d:a3:0b:9b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Apr 20 08:00:31 2025 GMT
Not After : Apr 21 08:00:31 2025 GMT
Subject: CN=5b17d545cdc22adf0207904c38404217acdb7b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:f8:9f:df:26:46:62:b6:a0:65:1c:dd:ea:
bb:0c:26:1b:5b:ad:87:85:65:73:28:8b:34:2f:fd:
c9:b8:5b:5f:5a:16:59:90:fe:f1:21:56:26:ed:32:
24:65:9a:ed:bc:c8:07:4c:a2:9e:93:59:76:d5:10:
7d:d1:11:ac:f0:e1:cf:80:db:ed:24:e9:4d:0a:d2:
7c:4e:e1:0f:8a:0d:ee:9b:ee:5a:b9:c6:da:d5:f6:
67:c5:f6:5d:12:63:77:7b:4a:3e:73:4d:67:0c:35:
bf:da:fa:74:70:c7:5c:12:ff:27:36:1f:16:d0:04:
88:15:cb:26:43:bf:ae:1a:7d:f1:41:8e:fe:9d:4e:
41:f1:c3:a3:b7:b8:23:55:51:3c:ca:f5:56:ad:71:
e6:86:69:65:b8:0b:dc:d1:69:81:89:2f:d1:c5:93:
c1:4c:7e:33:6d:c7:09:c5:72:20:9d:04:40:a1:40:
ce:05:91:1e:1e:80:8c:82:e0:df:37:d7:45:61:7a:
5b:68:6c:5d:8c:a3:a3:cb:99:32:5c:20:f7:6a:54:
3d:2f:38:9c:f0:db:19:d9:84:c9:56:64:db:ef:52:
af:5b:96:ec:43:08:e6:d3:25:6c:2b:8d:68:87:cd:
af:d4:7e:3a:33:15:df:fd:ac:fc:95:79:64:e4:e7:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:D5:45:CD:C2:2A:DF:02:07:90:4C:38:40:42:17:AC:DB:7B:3E
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:57:41:f3:e6:7c:54:b8:70:3f:96:49:14:80:69:c5:07:
b2:3f:15:cc:cf:40:7a:c4:36:76:81:88:60:ad:40:fa:f1:8a:
d5:a8:bd:c1:74:d2:03:99:22:3e:74:ee:81:90:db:f5:a8:9b:
02:a1:f9:36:40:f8:5f:16:b3:60:5c:07:5f:20:22:f7:7d:1b:
43:20:8f:02:b8:bb:22:87:d1:97:b6:e7:4f:1e:b3:06:0b:68:
91:2e:09:95:3b:78:a6:a8:a6:1a:eb:b9:3d:ff:3f:76:bb:61:
47:15:36:17:8d:dc:3f:b9:ec:5a:87:df:d6:87:b1:6a:cf:57:
43:16:dc:e0:81:1f:ea:ae:13:e6:14:96:6b:d7:48:75:1a:13:
69:81:24:d7:c8:35:6d:e2:bb:f6:f4:ab:78:e3:a4:b6:37:40:
25:36:85:eb:b7:26:3e:9d:4f:34:44:5d:9e:ca:a3:51:df:cd:
08:a3:a5:6e:54:53:a5:0a:2a:b9:9b:37:36:54:d1:97:18:7a:
f5:25:5a:b4:24:e3:0c:b2:52:3a:b6:e2:b1:e2:4a:0e:24:9a:
9f:3c:29:8d:8d:2c:d7:73:19:70:14:15:66:dc:8b:49:43:cc:
7d:75:6e:41:ca:7f:38:98:36:41:46:78:88:46:b5:a5:e2:04:
28:f1:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:11:58 2025 by rpki-client