Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: VRMClvJ6XgyXiCbmxaDoQGg2OQ2N1jeoXQjehjHMcKU=
Subject key identifier: B4:86:D4:5A:42:11:B9:F3:BE:AF:DA:CE:12:6F:05:97:F4:8B:82:8C
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01964DB537DDCE5F955C903151C9C537D779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 11:00:43 +0000
Manifest this update: Sat 19 Apr 2025 11:00:43 +0000
Manifest next update: Sun 20 Apr 2025 11:00:43 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: ePswiMGzU86Ftx3uA/wwqYDinhtP/WJn4rzpOVjaqwI=)
2: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=)
3: iJlwOcYtq6S6by64254FoSzLE8w.roa (hash: Ys9uGytZ03eLGynO2qp/0wqUtSSyig0DVGcqnBMWCB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:37:dd:ce:5f:95:5c:90:31:51:c9:c5:37:d7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Apr 19 11:00:43 2025 GMT
Not After : Apr 20 11:00:43 2025 GMT
Subject: CN=b486d45a4211b9f3beafdace126f0597f48b828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:14:6f:94:f8:dc:be:74:2f:9f:14:8a:63:
8f:1d:86:af:1b:14:37:2a:9d:a7:c4:9a:4d:cc:b3:
b1:b4:00:9a:60:ac:40:5c:8c:2b:72:1f:31:ef:de:
1d:3d:e9:43:d9:19:6f:93:12:26:a7:ac:ab:85:47:
3a:5b:64:ae:50:9a:41:71:67:cd:97:94:5a:2d:89:
8a:65:d0:de:2c:9f:61:07:0e:ee:83:11:de:02:b6:
5e:d5:4f:3e:39:71:3d:19:30:d0:9e:0c:96:cf:63:
a1:83:90:87:05:80:83:17:d8:3b:54:67:e8:aa:3b:
13:2c:aa:3d:ec:0b:99:da:06:93:b9:b4:cd:21:08:
b8:f9:9f:e8:2a:96:a9:a0:2f:5f:37:ed:c6:1f:d2:
18:4f:6d:3f:2c:64:cf:e9:c6:5d:7e:b6:9c:4b:43:
a6:1f:ac:01:19:d2:cc:97:45:cf:ff:a8:c1:bb:c4:
03:17:3a:fe:78:fc:bd:69:22:32:c3:54:dc:6f:f6:
d7:72:47:48:cf:f1:35:d0:f4:e6:4c:4b:9e:5c:66:
c9:52:4c:69:2a:2d:3f:ec:83:0d:0d:2c:6a:7e:3c:
7c:20:09:07:2f:0c:2e:09:6c:ff:d3:f8:cd:73:d7:
ac:f3:1c:48:5c:e9:66:6d:46:65:d4:c8:f1:66:68:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:D4:5A:42:11:B9:F3:BE:AF:DA:CE:12:6F:05:97:F4:8B:82:8C
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:f4:1f:d8:14:fb:75:65:62:2e:b5:c6:bf:a8:cf:b2:ad:
8d:ac:1a:ad:f2:24:81:66:bd:51:60:73:41:80:1b:84:0a:d7:
94:dc:16:32:f1:77:20:0e:dc:8c:96:f4:1d:df:7d:23:a3:ff:
5d:9a:54:bf:ba:13:18:5f:5e:da:d0:97:da:de:9e:e9:41:f3:
17:68:3f:e2:6f:d7:67:5a:f8:5a:eb:ce:8c:59:0e:64:c5:8c:
3c:4d:f1:d0:fc:98:ff:46:f2:31:55:4b:75:00:75:c0:e3:05:
6a:9e:84:86:c2:4d:ee:b0:06:f8:8e:9a:05:d4:3f:1c:7a:d2:
a9:e8:2a:5d:d3:e6:0c:0d:76:bd:27:7f:54:1f:e1:42:3e:4c:
eb:f3:42:63:81:b1:ec:15:eb:c8:8e:df:49:1e:da:b9:4b:87:
a0:10:6d:f0:92:57:1b:6f:e7:cb:21:7b:05:67:78:1c:35:21:
39:8e:1c:14:2f:10:31:d3:f2:19:ae:b7:46:94:ef:6e:42:4b:
da:fa:d9:11:4a:cf:24:d9:65:65:66:4e:2a:df:d7:67:a1:9a:
94:4e:37:91:59:74:08:f4:07:9f:ba:4c:fc:db:95:0f:33:0c:
4a:9b:5e:91:7d:ef:2b:03:f1:75:e6:61:80:01:30:45:bc:ee:
2c:e7:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:32 2025 by rpki-client