Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json)
Hash identifier: wk2W3qFhPGJW62WwN/En2wwmsOmq6PFT+pvD2Yz5xGQ=
Subject key identifier: 40:68:A5:DE:DB:33:97:23:A3:49:17:80:A2:DA:93:57:43:BB:32:BE
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial: 0196553817FB58505934B9BCA0B5D7A0600A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
Manifest number: 0C1A
Signing time: Sun 20 Apr 2025 22:01:01 +0000
Manifest this update: Sun 20 Apr 2025 22:01:01 +0000
Manifest next update: Mon 21 Apr 2025 22:01:01 +0000
Files and hashes: 1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: mqCxNqLDgjH4KMGcKSlyixSEpJTw+pr6wMpW11bIF/g=)
2: M1kVheswqf8ij0x2nrQ-DKJ80bw.roa (hash: yMSCzGCO+yw4klt7Sg0l/zNTUp3KJulcSXgC+xqFL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:17:fb:58:50:59:34:b9:bc:a0:b5:d7:a0:60:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Validity
Not Before: Apr 20 22:01:01 2025 GMT
Not After : Apr 21 22:01:01 2025 GMT
Subject: CN=4068a5dedb339723a3491780a2da935743bb32be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:a0:8a:67:e0:d8:de:1c:84:84:69:eb:3f:
00:46:3f:4b:be:9b:4b:a3:0e:18:ce:f3:bf:79:c6:
59:ad:b7:c6:13:45:7d:1d:21:43:9b:d6:81:be:37:
31:fd:80:53:5c:53:d7:ae:b6:d9:26:3b:e6:79:5f:
c0:69:f1:2b:6c:d6:59:16:4f:cd:1a:6b:81:06:81:
c8:8f:a5:da:ae:04:49:6f:c1:63:03:77:c0:93:3e:
c6:b2:95:b2:97:4e:38:7a:27:96:88:89:da:6f:90:
4a:6c:2e:bd:cf:a2:aa:d6:26:81:77:c3:51:cd:bd:
a2:f3:38:5b:b8:23:c4:be:d2:cb:a2:54:4b:66:8d:
8a:98:28:7c:fc:c8:60:b7:fb:31:37:7d:fe:67:0a:
18:4e:98:3a:6c:0a:00:e2:a0:0d:85:54:d5:32:00:
c8:82:25:d9:da:6f:3f:aa:39:e3:cc:8b:d4:43:65:
d9:8e:b9:0f:27:90:e2:51:ac:1b:9a:28:30:cd:67:
ec:79:8f:8e:66:dd:91:27:ed:a8:26:de:27:16:76:
9c:d6:d4:ab:c2:e7:30:7b:bd:56:32:55:3d:ef:1f:
ef:88:08:0a:60:bb:68:c5:ba:48:39:7b:02:e9:d5:
dc:21:7b:8c:2e:96:f9:b5:a3:50:ef:da:23:ff:f4:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:A5:DE:DB:33:97:23:A3:49:17:80:A2:DA:93:57:43:BB:32:BE
X509v3 Authority Key Identifier:
keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:16:dc:0b:b9:26:89:b0:28:4b:13:c9:02:f0:c7:7d:dd:1b:
3f:7f:85:a9:00:0e:38:69:76:ed:94:ff:8b:f4:93:7e:ef:da:
d8:76:0d:79:96:ef:fb:ff:a6:11:d7:b9:07:48:db:22:44:d7:
68:e6:e7:3a:ea:52:a7:8c:13:5c:3d:29:3e:b5:03:d2:82:19:
a2:e9:00:88:b1:28:be:e0:47:47:ad:86:49:fe:8d:bb:d5:14:
34:7b:dd:c3:07:e4:da:bb:d9:25:3e:46:cf:68:37:d2:54:3a:
ea:17:64:64:aa:e3:82:e3:c2:8b:c4:a7:d2:6a:52:bc:e3:5c:
ba:95:05:d4:47:dc:31:10:78:5f:00:d3:1a:04:3f:a1:d7:f6:
08:9e:1f:9b:14:cc:d4:1f:f4:9c:09:4d:00:2b:08:df:57:50:
91:fd:1d:ed:be:e4:a8:dd:03:a2:37:83:cc:de:fc:2c:cf:c8:
fe:9a:30:7f:6a:f6:bc:82:c2:c7:3f:34:22:a7:1c:c2:fb:be:
bf:53:00:5d:11:d3:98:fa:88:3d:7e:7c:72:f3:b0:e6:08:f0:
f2:bf:fe:4e:6b:27:4f:b1:cf:a3:2e:80:2d:34:2a:ca:91:42:
16:ee:fc:b5:f2:f4:0e:26:35:8c:6e:16:38:b9:40:5d:b8:d0:
5e:ce:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:25 2025 by rpki-client