Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: r9NSmCltOebXOW5VtZNn3/obhkSLn7mw/GFKFk5mjFE=
Subject key identifier: 43:DD:8D:41:21:07:4A:F2:49:6F:7A:88:88:70:79:0F:D8:9A:A2:F0
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 01960BD602E95664A050445E6689981B9E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 14D6
Signing time: Sun 06 Apr 2025 16:01:36 +0000
Manifest this update: Sun 06 Apr 2025 16:01:36 +0000
Manifest next update: Mon 07 Apr 2025 16:01:36 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: ZQBQ43r1JlgM7Z7IIQa9qzSZu9wc2qDxNKdYqixEgvc=)
2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=)
3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=)
4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d6:02:e9:56:64:a0:50:44:5e:66:89:98:1b:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Apr 6 16:01:36 2025 GMT
Not After : Apr 7 16:01:36 2025 GMT
Subject: CN=43dd8d4121074af2496f7a888870790fd89aa2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:7f:9c:0f:f0:ae:be:1b:04:91:8f:fd:45:
89:ad:c3:0c:68:8d:e4:b3:bb:8f:b0:a3:43:53:07:
a9:ab:9c:0f:8a:c7:40:d0:10:b3:29:0b:e8:69:43:
9a:25:3f:1b:76:48:3e:38:8b:59:bc:06:0c:cd:31:
ed:3b:e5:da:90:56:7a:e2:bd:ba:d1:93:15:07:46:
6f:1d:75:86:6e:b1:74:05:09:fe:87:ff:fc:7f:74:
2e:26:65:5f:d3:b9:a0:18:33:6f:43:44:06:4b:83:
10:31:e0:53:8e:fa:a4:e7:52:91:c0:a9:a7:dd:49:
8f:c0:24:16:27:f0:0c:f8:eb:4c:33:0b:fb:db:5d:
f5:13:60:10:18:b5:1a:ea:1f:88:d4:7b:e6:08:d7:
e0:5a:4a:8c:a1:d4:98:c1:b9:47:aa:ba:7b:df:02:
c1:da:0b:7e:fa:ab:23:eb:59:fa:68:af:05:0f:62:
32:a6:a4:b2:21:9b:71:26:5f:8d:55:4c:c3:75:fa:
12:26:96:d9:13:2c:37:44:8c:7e:1f:ed:64:ac:0c:
e1:90:c5:d4:8f:33:02:d5:da:eb:64:a0:d4:16:b0:
62:ec:e4:dc:fd:58:fc:d9:64:1d:d3:99:42:33:6f:
c6:8c:60:de:76:f8:4c:27:45:74:97:69:ef:ac:99:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:8D:41:21:07:4A:F2:49:6F:7A:88:88:70:79:0F:D8:9A:A2:F0
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:28:6a:67:f0:4a:99:ac:d6:17:94:65:b7:eb:95:47:1b:40:
2a:99:d1:6c:12:a8:bc:45:38:18:ee:3a:c1:e2:4c:1f:e5:f4:
31:f4:15:1e:0e:81:bc:86:18:bc:e2:12:51:c8:5d:bd:b7:30:
89:92:31:b5:9b:c6:34:f7:cd:6b:28:3a:f9:7e:30:e3:f1:2f:
a9:ce:b5:68:8a:33:cc:74:5d:9b:b6:c7:54:a2:95:78:9c:0c:
22:a3:42:fb:a9:df:83:38:f8:54:e8:be:5b:d7:f7:24:1c:66:
2b:da:8d:5c:a1:55:a9:e1:8b:f9:8c:e6:bd:91:31:ca:85:3a:
df:4e:af:68:66:fd:77:52:aa:31:71:05:97:de:ad:c4:f8:0c:
d6:8d:2e:68:b4:90:b6:70:dd:55:d1:f2:a1:8c:eb:cd:e2:6e:
aa:21:56:57:d7:3d:65:be:0d:ba:a0:fc:17:a7:fb:a8:64:2b:
84:39:5f:7a:bf:3f:5e:0b:33:69:ab:02:a2:c7:30:00:fd:64:
6f:25:6b:8c:f8:32:a3:fe:4d:40:8b:ed:73:90:09:ea:9d:0a:
70:5a:62:65:0a:ee:67:b5:06:ce:59:03:f1:87:f1:77:b6:4b:
a4:a7:dc:4a:d8:f5:0c:55:53:e9:41:16:cb:1b:78:0d:99:ae:
1e:b8:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:28 2025 by rpki-client