Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: bxUuzzwnUt+4OT+fEhvv/Zbv5i8ojoRa63d3E8oqmbk=
Subject key identifier: 23:F9:17:F1:51:EE:2C:33:64:47:92:4A:40:93:28:4F:A7:46:92:E8
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 01962B97FBE8551190A9C90AD89C8D45E920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0549
Signing time: Sat 12 Apr 2025 20:01:42 +0000
Manifest this update: Sat 12 Apr 2025 20:01:42 +0000
Manifest next update: Sun 13 Apr 2025 20:01:42 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: PPQYbdiWCo2pb+oPECtBxEa0YNM9oOGvTijAIyWqMds=)
2: kidKlu5oDBem3t0h8aiG0Vv8dvw.roa (hash: Xo2YDFkznVnl+RRSUSAYifFOhE1syeVNtNcN0kJvN2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:fb:e8:55:11:90:a9:c9:0a:d8:9c:8d:45:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Apr 12 20:01:42 2025 GMT
Not After : Apr 13 20:01:42 2025 GMT
Subject: CN=23f917f151ee2c336447924a4093284fa74692e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:e9:8f:3e:2e:f1:13:3d:7b:20:a3:51:c4:
9c:94:70:92:0b:5b:41:1d:83:b8:b4:1a:b5:83:96:
13:8c:a5:ed:01:d8:57:e9:d2:7c:89:13:9e:82:13:
d2:7c:fa:15:5f:03:94:34:cc:5a:80:5d:1f:d5:ea:
f1:64:7c:2a:34:d2:94:55:7e:fa:b4:9d:7a:cb:39:
18:5e:86:77:53:17:97:c3:e4:05:7c:dd:3c:d5:e0:
6c:cd:bf:cb:85:37:f0:19:80:d7:b0:66:79:0f:71:
78:32:19:05:eb:cf:85:c7:8d:fb:1d:a8:e2:13:34:
20:51:63:d5:62:60:d4:f0:00:aa:33:52:a5:ad:17:
80:7f:81:f9:f5:0e:1c:9e:1b:90:1e:35:c7:2a:57:
6e:7b:6b:bc:60:c7:98:d8:0c:29:af:cc:af:7d:6e:
3c:69:db:7b:11:e3:80:cf:29:1a:8b:ce:7c:cc:7f:
9b:78:4d:64:85:e7:72:2d:a4:c6:ae:6d:05:0c:5e:
2b:c4:a2:1a:1e:6a:ec:e1:48:a7:ab:d6:60:0d:e4:
ac:3b:cf:9e:4f:05:9c:06:fd:f4:b4:cb:44:38:01:
66:0e:ba:0b:ca:bc:c9:ca:c6:9d:53:93:f0:65:91:
3f:5c:4d:f8:74:1f:02:74:08:54:2d:03:c9:e2:8e:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:17:F1:51:EE:2C:33:64:47:92:4A:40:93:28:4F:A7:46:92:E8
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:ed:93:82:fe:1b:d8:ba:b0:09:f9:5c:4f:12:58:b9:ee:
62:e5:00:4e:0b:de:ea:20:91:fd:7c:4d:3e:62:1d:1d:54:99:
f0:16:a3:d8:54:d2:66:d6:4e:39:b8:3f:24:ba:58:0a:5b:56:
28:8d:ba:bf:2d:d4:b2:56:b9:4d:f4:97:dc:17:f7:48:fd:fb:
1a:87:25:4b:86:f6:33:ea:31:9a:81:ec:c0:65:ad:45:35:4c:
5c:cd:80:f2:3d:85:46:6e:b7:21:b9:cc:6f:9e:a6:3f:08:25:
88:cb:ad:a8:9d:dc:0e:27:b8:63:c5:7d:26:03:3d:16:c3:a0:
7d:00:79:72:7c:f7:e4:21:89:e8:6f:2b:ee:c9:7a:30:83:43:
8d:c7:43:fb:2e:b0:54:ba:61:6d:ff:d7:9e:2f:29:e9:2e:91:
e2:b3:51:7d:81:67:bf:72:95:da:ea:a0:02:b2:b6:41:39:b8:
99:fa:11:e1:c0:1d:ea:90:33:ad:ec:a9:c6:2f:79:ae:d2:6e:
b9:08:01:17:04:16:37:a3:22:4e:26:ab:7e:9d:9d:d4:1e:8e:
ba:30:c0:7e:62:e4:90:b6:da:7a:1b:4f:b8:00:ea:e5:8b:72:
8e:c4:cc:68:ee:3a:21:a0:7b:22:0a:bc:62:ef:a7:65:6a:e9:
c0:9c:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:39:39 2025 by rpki-client