Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: V6zL0N0KdoJq5hbjaRLFEik0UkzD13Ida1O8OFkHTsY=
Subject key identifier: 92:D6:83:B7:3C:3D:CC:F4:9E:05:92:50:2E:F5:08:0B:BE:94:98:E6
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 01964B90158F04EBA03654646389747A942D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 1314
Signing time: Sat 19 Apr 2025 01:00:55 +0000
Manifest this update: Sat 19 Apr 2025 01:00:55 +0000
Manifest next update: Sun 20 Apr 2025 01:00:55 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: RR+THYM2/nA8DIDbNRqu9p9AroUhU8WNciSb+WYW7DA=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:15:8f:04:eb:a0:36:54:64:63:89:74:7a:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Apr 19 01:00:55 2025 GMT
Not After : Apr 20 01:00:55 2025 GMT
Subject: CN=92d683b73c3dccf49e0592502ef5080bbe9498e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:0d:c9:64:e4:0e:3d:d3:c6:35:4f:9c:b6:
1e:50:79:47:a2:02:8a:ed:82:70:22:3a:ce:33:de:
ea:a2:5f:c3:e6:81:9a:3c:d4:a8:2d:b2:cc:91:fc:
40:91:67:7f:68:30:ac:7e:a1:91:8e:0e:e7:ca:7c:
ac:db:de:6f:d3:3a:b3:c5:5a:f0:6d:76:67:7a:fe:
24:36:58:1f:d6:c2:a0:b4:94:53:af:bd:8a:86:c6:
cc:c2:7b:d3:67:33:f6:36:53:f3:0e:d4:f9:eb:ba:
75:31:bf:f9:e0:e1:db:26:67:28:d5:29:47:2c:3e:
bf:ff:de:36:36:70:4f:4f:ba:e6:a2:8e:80:cf:91:
ab:db:e8:f0:fc:aa:93:1d:b0:b0:c1:2c:d9:06:cd:
dc:18:d4:f1:be:80:1a:a9:62:1b:a3:08:3d:12:34:
7f:e5:f5:c8:1f:a2:ad:86:c3:73:51:88:d0:15:93:
bd:82:f4:19:72:7d:eb:b0:fe:8c:9b:f9:6f:95:38:
4b:b0:0b:5e:86:80:30:0e:8e:c4:ea:8a:8d:86:a5:
41:4b:39:8a:da:4e:28:5c:97:cb:f5:69:03:b6:d5:
42:f5:90:c4:19:e9:77:e2:29:7f:ae:cb:cf:d2:49:
47:26:0d:c9:87:7a:4c:9a:e6:a0:db:a1:61:51:11:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:83:B7:3C:3D:CC:F4:9E:05:92:50:2E:F5:08:0B:BE:94:98:E6
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:03:9a:60:1b:03:0c:cb:55:4b:f7:97:e4:41:e1:6b:d2:b5:
48:1f:62:84:17:44:23:24:3c:7f:e0:de:a4:34:fa:df:1c:9b:
70:f8:ca:e0:89:24:02:e9:88:76:aa:4e:56:00:38:17:50:8d:
57:79:b2:75:d5:3a:83:1d:e8:39:e3:7e:8a:1d:1f:3a:c3:20:
98:cf:15:fd:de:fb:f3:41:ca:ae:96:7d:15:b6:e5:c0:d7:e3:
62:78:4b:da:85:1c:58:3e:f5:f2:e8:18:7d:59:91:d9:a5:43:
3b:44:1e:ec:01:4d:ea:12:36:9f:fc:2b:e8:d1:46:ca:a3:8f:
a3:95:93:b8:cb:ff:b9:41:ad:2c:4a:3b:bd:54:e4:32:a0:4f:
73:2b:a7:54:38:ed:52:72:78:2c:25:3f:d9:fe:45:a4:ee:0a:
6f:92:08:b0:73:09:30:15:21:4e:e9:72:63:dc:f7:cb:c0:59:
91:ab:b2:f1:f6:5d:47:a8:a5:c2:e2:92:4b:14:77:94:66:7a:
bb:6a:47:f4:20:a9:e2:bd:08:60:b0:3e:21:16:f5:60:21:22:
a3:f3:16:c5:35:44:69:14:d4:a9:3d:58:04:06:c7:79:83:0f:
1b:cd:d9:49:aa:ae:28:69:ce:26:2e:05:e4:1d:fc:3b:d3:46:
37:f2:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:52:33 2025 by rpki-client