Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: e9c5+EA6ZcNbslt18BA62pfFgWPVgcUbqu5c4cg0BXQ=
Subject key identifier: 7B:81:D6:B5:5B:80:EE:61:B7:6F:C7:AB:62:6D:36:8C:98:12:C2:AA
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 0196263A292C2CA7495A1448E63640D91D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 057F
Signing time: Fri 11 Apr 2025 19:01:07 +0000
Manifest this update: Fri 11 Apr 2025 19:01:07 +0000
Manifest next update: Sat 12 Apr 2025 19:01:07 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: 6yNcR99oXstbJjtBJxwf1WcjXNpp/HnJbpTglggA7Xs=)
2: 1Xq5NcZrjlFL23QLXPQ2cW-IBls.roa (hash: HbBq96j6XF4InfiwCDfEHXOlCXag1YicK/gCEex0C0Y=)
3: WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa (hash: mxYAtiu5jjm0C1BeKBzzTHZkmyPXrcSCe59vx0mWEsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:3a:29:2c:2c:a7:49:5a:14:48:e6:36:40:d9:1d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Apr 11 19:01:07 2025 GMT
Not After : Apr 12 19:01:07 2025 GMT
Subject: CN=7b81d6b55b80ee61b76fc7ab626d368c9812c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:57:b1:bb:ce:e7:72:c4:68:78:ad:64:aa:
72:80:1c:4b:2a:17:76:80:0c:e9:0a:7c:b0:0c:d3:
3c:67:c3:8b:a8:8b:a2:a7:7e:e4:94:d9:03:e5:b1:
18:31:31:02:71:f1:08:5d:04:ff:8f:50:c0:65:09:
85:d0:e8:41:7b:2d:8d:49:e3:7e:aa:03:83:b0:68:
df:78:70:33:7b:bf:ca:f3:96:aa:de:b0:dd:99:25:
79:a3:da:79:97:eb:3d:89:18:e7:d4:39:fd:43:ec:
74:b0:e2:df:08:69:65:58:fd:03:a8:73:f0:ce:05:
5e:f5:de:f8:4a:5e:93:67:9c:c7:90:97:4e:9b:ba:
77:47:cf:49:e7:ec:22:96:92:a9:bf:1c:08:d5:fc:
7d:c6:45:22:6d:3c:35:ec:2a:cf:a0:a6:6a:0d:d7:
e9:e9:f8:97:19:6b:01:73:38:00:3a:a2:5b:9d:28:
cc:8f:b7:23:d8:f9:b1:ed:b1:42:9d:70:bc:62:87:
b3:e4:c6:f2:52:93:d3:2e:7d:7f:db:22:9f:fb:ad:
d6:d3:fb:b0:8d:93:f8:89:2b:14:9d:cc:29:67:6d:
f7:2f:3f:08:a2:4c:5c:b0:57:0d:ef:f7:3d:f0:38:
05:c8:36:62:ae:5e:f1:6c:aa:d3:b7:bd:30:fe:5e:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:D6:B5:5B:80:EE:61:B7:6F:C7:AB:62:6D:36:8C:98:12:C2:AA
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:a4:0b:60:cd:97:5d:14:7b:0a:5b:db:f0:ff:da:b2:d1:
93:12:8b:03:04:8d:10:79:e0:f6:79:7e:d2:ab:3f:3b:95:ef:
a8:b9:5c:92:6a:66:c3:17:c4:e4:22:67:53:1c:ab:60:51:a2:
1e:fa:76:03:1b:2a:bb:2b:e2:42:77:fc:0f:27:86:a4:a9:7d:
f3:7c:04:14:cf:32:60:0e:fe:2e:cb:10:d0:89:2f:81:d4:2c:
3e:49:f0:29:dd:6f:f3:a2:a5:a6:2a:a9:f3:a6:f1:a1:68:04:
f1:f9:27:e7:78:1a:b8:de:4a:df:15:81:27:bc:26:dc:06:0d:
8e:51:4e:8b:2b:7e:43:5f:56:a5:76:b8:dc:28:b4:c9:59:92:
5a:5f:29:2f:ce:22:19:20:28:60:5b:35:83:ea:90:47:7c:5b:
74:d4:5c:fe:ce:86:c5:76:68:c2:a1:ea:69:49:0f:c9:e6:96:
55:e3:85:89:e7:09:11:df:69:05:23:de:85:d2:f9:6e:ce:3e:
4e:e0:46:58:96:80:fc:47:d1:fc:6d:08:98:4e:22:91:f9:9e:
47:57:d0:cf:68:40:3f:46:2b:d4:f6:8f:7c:29:c0:d6:fe:93:
83:90:a6:24:7c:79:e6:36:fe:84:93:28:9e:0a:b8:21:b6:85:
2d:67:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:02 2025 by rpki-client