Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json)
Hash identifier: e/fCfCuaHmWoozXmOdI0N2Ldc+fnKLTStE62OH+bzls=
Subject key identifier: 52:91:B3:23:8B:13:86:9F:27:BD:40:B9:19:09:B9:8B:78:C0:94:A7
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 01965C833EEE4EEB2B44B43A75991C5B866D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
Manifest number: 0EC1
Signing time: Tue 22 Apr 2025 08:00:27 +0000
Manifest this update: Tue 22 Apr 2025 08:00:27 +0000
Manifest next update: Wed 23 Apr 2025 08:00:27 +0000
Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: 4O/CInOOjPgtg3MgUUU2hYsVyB/dqWZ+sMACmSnelAY=)
2: avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa (hash: bTeIBIORZ+OkOR+FlYPPZ72JZn7A9KzpF9twp78JJjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:3e:ee:4e:eb:2b:44:b4:3a:75:99:1c:5b:86:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Apr 22 08:00:27 2025 GMT
Not After : Apr 23 08:00:27 2025 GMT
Subject: CN=5291b3238b13869f27bd40b91909b98b78c094a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:04:96:4d:f8:9b:65:ac:26:5c:78:f4:91:
25:dd:80:34:ab:5c:de:a4:0a:ad:b9:39:8a:b5:37:
ff:da:93:b4:4a:1b:a7:a5:33:1f:6c:4c:22:05:51:
f4:7e:d3:62:e4:5c:a4:eb:f7:6e:23:33:fb:1e:35:
34:ca:ad:11:7a:ca:04:7c:74:35:d5:56:9e:e1:09:
a5:d9:5c:4f:1c:c4:d9:6a:7d:b9:4b:ed:07:1e:f1:
d2:98:6e:03:f2:8f:1d:f7:56:46:02:f3:48:00:2d:
39:b6:72:ea:32:bb:ab:c4:ae:8a:5d:76:cf:d6:51:
ca:d0:a0:55:8f:1a:5c:5a:e2:3c:fb:c2:f4:02:19:
de:a4:06:a9:fa:79:14:1a:63:ea:49:d5:e8:bd:2f:
51:5f:a1:c9:4b:21:b2:3c:22:aa:9b:22:f0:7b:d7:
7c:ad:ef:7c:de:e9:f2:a3:37:4c:44:44:82:07:f9:
2d:95:d1:f5:5e:f8:18:24:42:6d:a3:76:b7:4a:3a:
96:9c:9c:b1:6d:b1:f1:3a:22:64:ef:3d:4b:28:e8:
12:13:30:cc:c0:38:ce:ea:0c:22:41:61:1f:3b:ab:
45:7e:b5:4a:0c:18:f9:08:ee:74:f2:e2:66:e5:76:
9f:de:bb:d8:6e:08:0f:47:4e:59:31:b4:96:0b:d2:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:91:B3:23:8B:13:86:9F:27:BD:40:B9:19:09:B9:8B:78:C0:94:A7
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:c7:14:e8:36:1d:c4:3f:cf:e9:c6:41:78:56:ad:32:70:
36:88:cf:12:0e:e3:a9:24:2d:68:62:3d:c7:dc:a8:69:38:29:
50:7b:aa:89:20:25:cd:5c:4c:72:62:e6:77:fc:df:94:41:08:
95:46:c8:5d:dd:f9:82:9e:19:f4:8f:8b:58:44:f5:e3:16:10:
a2:69:d2:f2:f2:36:b7:7e:bd:20:95:e1:50:0e:d5:3e:f6:2d:
04:97:f3:3d:92:74:81:ce:f8:67:d7:36:68:e3:bd:7f:b5:7b:
62:20:d7:f8:72:d4:77:cc:0d:f7:d3:73:86:91:23:af:8f:94:
89:14:ff:c3:49:0c:f1:34:c1:c3:4c:58:49:e9:3e:1f:8d:10:
c2:c9:aa:67:8d:ee:71:ba:ed:ed:95:66:45:24:54:20:c8:66:
a8:7e:49:e3:10:ce:ff:3e:9f:4c:78:fd:46:0e:bc:60:c3:e5:
1a:a8:8c:68:e6:21:7c:73:c7:fb:71:8c:53:94:dd:59:57:8f:
6f:72:6f:7a:86:b2:e4:63:6e:dc:34:86:ec:ed:45:07:a7:51:
43:38:95:69:3d:1a:b5:55:4b:1f:8e:58:cf:67:e3:7a:69:d8:
6f:49:cf:77:be:59:f7:9d:9b:74:1a:27:20:63:ce:9d:fc:bf:
53:92:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:06:50 2025 by rpki-client