Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: hW50qdhlB39kjbo3H45tUGscGxkZoy9A99Gvfd7vTpw=
Subject key identifier: 2D:21:13:2A:B3:46:F1:53:41:94:A3:6A:DC:A0:F3:6E:B5:E3:14:F4
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 01965D95ED0753170DB028C47138DD216A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 094F
Signing time: Tue 22 Apr 2025 13:00:28 +0000
Manifest this update: Tue 22 Apr 2025 13:00:28 +0000
Manifest next update: Wed 23 Apr 2025 13:00:28 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: YPfyt7e1kFcI225iyRB7kZ2ynXYZPSMR1UDUoSCtWwo=)
2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:95:ed:07:53:17:0d:b0:28:c4:71:38:dd:21:6a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Apr 22 13:00:28 2025 GMT
Not After : Apr 23 13:00:28 2025 GMT
Subject: CN=2d21132ab346f1534194a36adca0f36eb5e314f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:77:23:09:fd:76:fc:87:19:6e:25:93:5f:
2b:28:e1:ca:77:86:eb:74:8f:a7:69:34:16:8c:76:
97:f4:44:64:ce:b0:a7:02:7e:9d:06:59:4e:76:54:
07:80:c9:8f:24:29:46:a5:18:ac:e8:10:3d:56:28:
d7:75:0b:fc:46:ad:0b:5d:ab:cb:e2:83:0d:ea:cb:
b6:60:7c:b9:2b:a5:31:ba:a7:5b:b8:e7:d4:38:8e:
f2:4c:98:3f:7b:af:90:dd:6f:3e:98:ab:83:e3:95:
40:15:de:ca:03:af:83:94:62:4f:02:44:3e:7a:58:
e5:c7:ac:d4:72:e2:fe:8b:92:54:b3:ba:73:61:73:
aa:76:cb:c5:39:db:75:15:da:74:f9:e7:28:9e:e5:
7a:51:c1:e2:42:5e:70:9e:bc:79:5c:fa:d3:e9:9b:
80:a6:f5:41:43:b1:81:f4:ec:15:28:1a:f9:c8:0f:
0b:4c:7d:d2:4f:19:8a:18:b4:f8:20:58:8d:32:f4:
6a:36:05:9d:34:da:a5:89:aa:d8:27:0f:81:41:18:
ed:00:c4:aa:e0:51:e5:3b:39:d6:66:ba:d9:86:28:
48:2e:1d:f1:8b:16:70:d6:ff:3a:8f:6e:bc:24:ae:
77:f2:a7:12:da:5e:a8:3a:51:fa:6e:e6:1f:57:29:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:13:2A:B3:46:F1:53:41:94:A3:6A:DC:A0:F3:6E:B5:E3:14:F4
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:8e:b7:01:6c:7a:b4:65:10:91:1e:f7:3b:c9:4d:8e:ac:
fc:e1:77:cf:17:5a:90:b7:d1:eb:55:4d:8c:61:7d:83:c3:9b:
37:18:6b:f9:62:95:39:83:02:7f:b8:b7:d0:e3:f6:1a:35:32:
94:aa:f6:54:5c:41:4a:eb:6e:ea:ff:8e:00:35:af:90:70:f2:
0a:26:4f:cc:2f:cc:7d:09:d5:10:97:1f:ab:08:a5:0e:6c:de:
f5:69:b9:63:2f:ec:4b:a6:99:96:1a:bb:07:a6:4d:af:90:d9:
e6:e8:57:70:b0:9e:fd:27:7e:42:26:49:08:7a:d3:bf:6a:2c:
23:ee:a4:9f:67:cc:5d:65:cc:cb:dc:8d:57:c2:fa:a1:cb:2f:
fe:8f:04:d9:4f:7a:cf:ed:b7:30:59:0b:e6:40:af:1d:9b:9d:
de:af:7d:ed:a5:66:51:1c:a4:49:d2:f1:e2:86:da:3c:d3:5f:
ae:3a:f8:68:7f:78:18:a0:be:3c:9c:74:0d:13:16:12:0d:74:
95:63:8d:cb:fa:7f:b9:cc:64:ec:9e:95:50:18:9b:b1:83:5d:
94:0e:31:7e:87:c0:ac:f4:8a:53:6e:be:d1:f2:fe:2d:21:90:
d7:38:8a:3c:ac:63:5c:ac:1b:86:3c:ea:c7:10:10:1b:9b:ad:
e3:f2:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:40:29 2025 by rpki-client