Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: t5a6qWXYakoZ2a/rVPghKmv7EsFwxmx1DfvQ0Hp7EN0=
Subject key identifier: C9:43:A5:A2:28:73:46:14:A6:A2:6B:F1:DD:08:CA:82:04:50:57:FF
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 01958F2A57B865EDE4DC4247CD9156B7B76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 149E
Signing time: Thu 13 Mar 2025 11:01:11 +0000
Manifest this update: Thu 13 Mar 2025 11:01:11 +0000
Manifest next update: Fri 14 Mar 2025 11:01:11 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: 3Q4RWVwy8pzZRbFUIBj3JR3cAuN28AYcEDB52lKU6aE=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:57:b8:65:ed:e4:dc:42:47:cd:91:56:b7:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Mar 13 11:01:11 2025 GMT
Not After : Mar 14 11:01:11 2025 GMT
Subject: CN=c943a5a228734614a6a26bf1dd08ca82045057ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:1f:61:5f:1b:73:b8:fc:70:0e:66:0c:34:
b0:19:b8:c8:87:ba:b3:66:28:e5:0b:d1:02:4e:65:
b9:d8:71:1b:a4:b2:45:55:1c:93:c7:f6:f0:98:05:
ce:b9:a2:e6:da:d7:bc:09:30:5e:d7:fa:54:01:5a:
90:0a:74:2b:49:da:12:32:2f:fd:d1:39:a6:a4:d4:
17:9f:b9:2a:10:67:ff:9b:98:a2:e0:c3:f3:80:3c:
4e:e7:5a:ff:e4:9e:25:cb:e5:22:ea:86:ac:85:57:
99:06:e3:d0:f6:c1:f2:63:5f:f1:5f:6e:62:f1:1a:
cf:1a:34:16:f7:82:da:97:d6:51:3f:f2:bf:df:42:
fd:13:8f:8e:ae:5e:3e:f4:12:48:04:27:06:02:fe:
ee:08:0e:14:9f:8c:24:e6:a6:11:fe:78:3c:61:7c:
02:d0:06:fa:fa:75:ae:65:e2:36:b9:15:43:7a:c7:
a3:d0:8a:f0:a8:ae:88:fb:30:cb:1b:ff:06:27:ee:
94:e9:3b:de:02:ef:a3:94:ea:4f:b6:a0:9c:60:9a:
5a:eb:0b:15:3a:d4:63:1e:4f:7f:33:60:25:78:7f:
2a:92:1e:df:2b:f9:82:2f:f9:11:a4:52:2d:1f:1f:
e4:18:6e:15:4c:1c:c1:8a:97:30:5e:d0:80:8b:d6:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:43:A5:A2:28:73:46:14:A6:A2:6B:F1:DD:08:CA:82:04:50:57:FF
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:31:87:7b:0e:15:d8:55:75:1e:17:e7:2f:39:25:85:8a:16:
e0:6a:30:37:24:35:d8:4a:ca:f2:a5:26:6b:60:df:28:fd:5d:
aa:85:bd:26:5f:45:33:01:e0:58:52:1f:4a:85:94:4f:26:20:
81:9a:fa:a2:36:34:56:8e:43:54:84:98:80:6d:6e:0c:eb:f1:
8e:76:f1:59:81:86:85:d2:64:e7:cd:1c:b6:cd:9f:ef:8c:ba:
04:8a:45:27:c1:39:36:12:04:da:2c:64:53:5f:41:58:f9:6e:
d8:7b:fc:4d:0b:c4:bc:c8:d7:9f:e4:ff:2e:f0:22:75:41:9b:
27:5b:89:54:b9:18:72:e3:57:c6:06:44:3f:f3:8a:17:c8:61:
ca:75:e5:ca:95:cf:33:a5:4d:d6:90:5c:bc:ef:ae:61:8f:3f:
23:1d:79:6b:ad:1c:9d:3a:4e:c2:fe:ec:a5:fd:ad:79:1b:67:
37:b1:b0:03:74:9c:f0:14:9e:a8:44:66:40:b1:82:cb:fe:25:
b5:36:5c:26:ae:eb:04:d1:4b:43:9b:26:6d:00:38:d1:55:3b:
08:f4:bc:98:72:2a:95:a2:d1:2b:4e:20:88:72:22:b7:fc:5c:
69:f4:42:18:91:39:7d:ca:4e:61:68:d1:bf:dd:69:f9:be:13:
79:50:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:13 2025 by rpki-client