
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: Bgitp3pzeEm7MTrgI7sFNgKg9FGkRh5ReOsrHSh0RvU=
Subject key identifier: 41:2F:65:46:1D:8E:31:7B:F4:DB:89:42:8A:6D:FE:7B:98:7A:F0:AE
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 0196542587842533964DBD759A8338C08CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 020B
Signing time: Sun 20 Apr 2025 17:01:07 +0000
Manifest this update: Sun 20 Apr 2025 17:01:07 +0000
Manifest next update: Mon 21 Apr 2025 17:01:07 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: qQhE4TVJzX7easptLIiu4t20vvClrTQURmvcMX7DZNo=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:87:84:25:33:96:4d:bd:75:9a:83:38:c0:8c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Apr 20 17:01:07 2025 GMT
Not After : Apr 21 17:01:07 2025 GMT
Subject: CN=412f65461d8e317bf4db89428a6dfe7b987af0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:85:f7:03:e0:48:54:cb:01:22:b5:ac:08:
db:b3:37:aa:fb:95:8f:d6:8e:45:85:52:7e:72:b7:
8f:d9:9f:a8:46:fc:33:c4:33:58:04:0a:66:e4:65:
da:2e:00:a2:43:bb:28:28:59:21:7f:6b:b7:e7:67:
c5:a3:fd:9c:97:61:d8:ed:4d:f7:1d:f0:4a:c1:5d:
fd:a8:c5:57:be:df:eb:bb:a0:48:44:7f:eb:c0:20:
d6:e4:e4:8c:fb:95:20:e3:c5:25:8d:45:39:00:92:
92:1e:b6:b3:fc:85:ea:e0:7c:15:43:05:93:f2:b1:
aa:78:03:01:b6:2e:3e:97:1a:2b:21:c0:70:0b:4b:
46:20:06:df:7f:2d:26:1b:66:63:e6:0a:0a:38:9a:
de:36:f8:5e:e7:13:f2:e2:5f:71:f9:92:15:12:fd:
c6:64:3e:79:0b:3b:dd:a3:10:4d:3a:a4:17:73:7f:
9d:89:a0:d5:3b:6f:9a:46:02:9c:41:98:af:77:1d:
5f:b5:31:f6:98:0c:76:09:09:09:96:0d:fe:c2:72:
e3:bb:a3:99:21:d2:eb:db:29:10:73:b8:29:95:c5:
28:d7:70:2b:a3:35:b3:0f:73:05:92:0e:d2:64:66:
8a:0f:87:a7:eb:f5:db:d8:51:a8:4f:70:e6:08:68:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:65:46:1D:8E:31:7B:F4:DB:89:42:8A:6D:FE:7B:98:7A:F0:AE
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:24:68:47:9d:ba:00:56:79:c9:91:3c:3b:f6:7a:82:2d:
d9:75:66:51:d6:78:d1:8c:81:e2:ab:88:72:ab:1d:ef:94:20:
07:47:fe:32:04:67:ae:8c:0a:66:39:c9:06:57:ab:a3:c0:40:
4e:d8:1a:15:37:91:00:20:c8:02:7b:03:2b:87:28:27:01:8f:
55:33:10:7a:02:5a:fb:67:43:b7:1e:2c:a6:e1:73:a5:eb:65:
27:1e:63:08:23:cf:2b:c7:c7:e3:62:94:23:41:41:a7:76:8e:
75:37:b4:ae:96:91:dd:76:94:82:ec:28:0d:fe:f8:15:ef:d7:
4a:89:78:25:3f:d0:2d:b4:64:6e:4e:3e:1c:50:ab:e2:24:f3:
1b:be:66:02:a2:55:cf:fc:9a:a0:4c:40:db:8d:e5:6b:32:c7:
97:db:4f:ac:b3:e0:a0:73:c3:f3:a4:28:94:b7:37:d7:73:01:
c9:c8:ed:55:92:23:73:96:a8:8f:aa:ca:87:70:b1:bc:6a:f7:
e3:e4:29:3f:6a:52:54:1c:65:0d:10:3f:b6:0c:78:fa:7e:ca:
b1:ad:2e:64:2f:5c:b1:0f:f8:aa:c4:5f:66:2c:25:3f:20:8c:
63:7c:c8:b4:79:5e:5c:93:98:b7:0a:30:4c:2b:a0:05:6a:f0:
a0:32:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:29 2025 by rpki-client