Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File: 1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier: aAbO92rPvkz2MVq1BO08+c6FZXAaOVeIi0/Uus7xND8=
Subject key identifier: 3A:47:3B:2A:BB:BF:74:C8:56:D5:93:16:1B:42:CF:A1:C8:F4:9E:46
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 019655A5993A64CD06121AF0D95BA986785A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 00:00:37 +0000
Manifest this update: Mon 21 Apr 2025 00:00:37 +0000
Manifest next update: Tue 22 Apr 2025 00:00:37 +0000
Files and hashes: 1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: ffZc02YfZI8RJGVrgK5j3i1nFnTAvLbnrdN+bVj8bmg=)
2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=)
3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=)
4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:99:3a:64:cd:06:12:1a:f0:d9:5b:a9:86:78:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Apr 21 00:00:37 2025 GMT
Not After : Apr 22 00:00:37 2025 GMT
Subject: CN=3a473b2abbbf74c856d593161b42cfa1c8f49e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:22:32:39:44:6a:05:99:e2:f1:b2:0c:39:
14:eb:7c:44:19:c0:f7:89:5c:a5:51:8e:0b:fd:68:
3a:8b:c2:73:df:41:32:0c:9d:f6:e0:0e:f2:d2:96:
74:90:83:54:75:3d:23:7e:4b:d9:3c:32:01:c0:6c:
3e:71:74:ab:78:a8:87:8f:c3:58:43:c7:88:60:ed:
44:07:a9:ab:0f:be:b8:9a:29:34:aa:fa:83:ad:0e:
06:18:fe:e8:9f:d4:4d:2f:28:51:d1:18:4c:89:b5:
77:10:4a:bf:44:cf:a8:70:86:53:d8:03:72:c1:e4:
a0:2a:91:f3:1b:d9:62:4a:45:d8:fc:e4:7d:3f:d0:
49:00:98:d5:15:70:a3:67:e1:fd:b0:ce:bc:83:b4:
b9:82:cc:cb:c9:35:84:0e:54:6a:e7:11:cd:c9:ec:
58:02:dc:a4:5c:35:62:fb:f5:78:a4:52:22:08:57:
7b:a5:2c:2a:ae:57:f5:63:8c:90:c9:a6:57:56:20:
c6:41:8b:39:91:db:b6:a2:dc:72:ae:a6:5d:55:81:
f2:cc:5c:12:68:f0:03:d7:21:9d:e4:77:61:60:24:
7d:e5:71:1b:33:00:b6:0e:f3:f5:aa:92:25:bd:b0:
a8:e2:98:79:cf:cf:5b:77:39:33:e9:a6:fe:6b:0f:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:3B:2A:BB:BF:74:C8:56:D5:93:16:1B:42:CF:A1:C8:F4:9E:46
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:92:7a:3d:a2:26:da:50:83:97:b7:5e:c1:24:63:8e:42:
9c:17:77:3b:40:b6:43:b2:7a:65:05:94:04:11:3e:a4:3a:95:
85:52:4b:dc:88:aa:d7:bf:35:10:e2:96:5d:5c:45:fe:37:6f:
a1:7a:7d:d0:05:d5:a7:7e:60:26:0e:e8:ae:b7:0f:65:ca:aa:
5b:2a:ea:f6:a2:10:81:b1:f8:8e:c6:8d:8c:ad:48:32:03:33:
98:92:04:58:81:2c:01:54:3f:65:77:2c:70:58:bd:24:9c:be:
5a:34:bb:a5:c3:30:9f:8a:62:af:c6:10:2c:c6:7d:94:44:b6:
e5:8a:79:ec:fd:f6:45:1b:53:69:98:13:8c:52:d0:92:92:5c:
c2:6a:d6:26:a8:1a:01:d7:83:fc:ab:80:e8:a4:ca:82:69:96:
c1:b0:6e:19:9a:46:27:8f:c7:7e:82:a2:37:53:0c:a4:ba:a7:
82:2b:b9:f0:3d:63:92:c5:6c:de:88:a3:e9:9f:f9:85:06:f1:
20:a9:6b:fe:e0:fb:9b:99:22:01:c1:75:ad:d2:ca:d2:05:a1:
57:39:e1:fa:1a:20:6f:0b:a3:7f:02:e3:ae:55:dc:03:da:dc:
1f:f2:11:f4:90:23:24:03:e8:ea:40:a8:96:11:87:c7:84:72:
3e:ec:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:46:23 2025 by rpki-client