Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier: NbgnHhSQi94TXsE/9KAWyjA8e8rtn0nVSQ82vIIbNKc=
Subject key identifier: 85:FD:C1:FB:1B:26:27:A7:ED:7A:64:34:BF:B4:2D:74:17:B9:06:12
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial: 01964EFEACC94AB39DE8A0C8101BB8EDF381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 17:00:35 +0000
Manifest this update: Sat 19 Apr 2025 17:00:35 +0000
Manifest next update: Sun 20 Apr 2025 17:00:35 +0000
Files and hashes: 1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: MtfWc6Gj73pr62zyqzKTtsuFuWYS6fM+roADAJAehPw=)
2: mab9pSsP0hPfmw5pFW9oVdvDO3s.roa (hash: QMgbTzBaUnDZaZXtIzkU3/zhP2tD7XocJ5teoU1UGow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:ac:c9:4a:b3:9d:e8:a0:c8:10:1b:b8:ed:f3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Validity
Not Before: Apr 19 17:00:35 2025 GMT
Not After : Apr 20 17:00:35 2025 GMT
Subject: CN=85fdc1fb1b2627a7ed7a6434bfb42d7417b90612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:26:79:a9:7f:31:5a:3c:e8:b1:8a:ca:95:
d5:f6:b9:fb:f9:84:f4:f4:ba:ea:51:24:85:67:91:
38:eb:44:b6:92:f6:5e:68:f8:62:2f:70:b9:7b:a3:
18:02:3e:76:ef:a9:e0:83:15:a9:c7:79:2d:1b:5e:
78:4e:7f:ea:1d:94:12:7e:3b:38:38:51:1e:39:df:
cc:08:47:bd:5d:21:0f:cd:85:4f:bf:60:d5:5c:36:
f7:7e:bb:72:e9:9f:5c:00:a0:ef:50:dd:7e:cf:f4:
3f:fb:e6:a4:71:1a:31:fb:60:1b:5a:df:69:fb:da:
a4:73:29:d0:aa:b0:bd:c2:2c:ba:31:f0:19:c4:5b:
06:dc:f1:ae:a8:f6:b2:32:16:14:d2:90:60:a2:31:
ed:2c:7c:d0:68:a8:11:ea:ce:1e:1d:6d:7c:ac:d6:
c5:f1:29:f9:d2:b0:34:e5:32:88:2d:08:4a:37:f8:
e4:e9:f9:97:0a:50:3d:3f:0f:c0:df:67:6a:f2:11:
19:98:08:e9:3c:6d:69:ce:36:1d:9a:67:5f:26:5f:
f4:25:a2:75:1e:2f:1a:96:a6:90:35:2d:c0:e4:07:
f1:f0:98:6e:23:81:d9:24:bf:02:2c:e6:24:bf:07:
ec:b2:d4:c2:7a:7e:b2:ca:c7:d7:2c:d3:cb:a5:cf:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FD:C1:FB:1B:26:27:A7:ED:7A:64:34:BF:B4:2D:74:17:B9:06:12
X509v3 Authority Key Identifier:
keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:14:0d:92:3b:1f:c1:eb:5d:81:62:f5:5a:84:95:5d:81:a4:
4f:13:ba:b3:ef:c0:9a:7b:c7:de:01:0f:99:ea:cd:cc:76:2d:
e5:e8:02:f1:97:94:cb:af:60:12:63:0d:66:c1:d6:a5:a3:31:
1c:fe:aa:0e:d7:9f:d5:b6:7f:2e:fe:3c:6c:60:33:70:65:3d:
23:ca:bd:14:ff:bf:4e:41:89:15:c2:db:31:3d:da:4c:c4:b9:
68:73:fd:0e:a9:10:3c:54:88:0f:69:6b:40:6c:da:6a:ed:7c:
fc:a7:5e:82:4a:43:57:1b:0c:53:ef:a7:f8:b8:5a:ce:70:d4:
ef:0b:bd:55:28:93:ca:a0:7a:ed:a0:e4:28:56:24:e8:97:63:
a3:51:72:b0:c7:c2:5f:a5:45:2e:18:b0:61:b9:3f:bd:2b:57:
f7:cf:e4:9c:7e:e0:b8:de:b4:e1:33:fb:42:33:72:31:da:93:
5e:63:f8:e8:94:a1:a1:5e:a4:f9:5f:fc:c0:cd:5e:66:94:ac:
f0:99:d4:4d:58:8e:a6:34:2a:9a:02:8b:cd:8c:20:93:6a:9b:
64:8a:9f:dd:d6:56:2f:5e:18:82:47:b6:1c:6a:c5:d3:73:0f:
7b:fc:f5:57:98:ad:d4:20:21:4f:8d:c9:97:c3:06:80:2c:46:
6c:62:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:21 2025 by rpki-client