Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: RxMY+j9bUh6ZtQtRWoOMR4OND/9eI0AyR5Dp0FcJUAU=
Subject key identifier: 73:EF:5F:7F:62:40:1E:2F:F2:04:4C:84:8A:9F:DA:6C:65:68:7C:0A
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01964F6C9F87B5FA7814A7DCD9BFBB52E33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 19:00:40 +0000
Manifest this update: Sat 19 Apr 2025 19:00:40 +0000
Manifest next update: Sun 20 Apr 2025 19:00:40 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: jZZYdPsI/DRdxTWpF2kQSdMidzjNAGGUBRkIrzscVj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:9f:87:b5:fa:78:14:a7:dc:d9:bf:bb:52:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Apr 19 19:00:40 2025 GMT
Not After : Apr 20 19:00:40 2025 GMT
Subject: CN=73ef5f7f62401e2ff2044c848a9fda6c65687c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:dd:5b:cb:89:01:66:c0:c5:de:75:2c:6f:
52:f5:dd:17:78:de:22:e8:a9:4a:1b:f0:a4:42:e8:
ea:8c:29:58:b9:18:ae:17:c7:75:10:42:2b:ec:d2:
79:9c:dc:b1:bc:26:9b:90:00:5d:85:95:a1:03:41:
cd:c4:11:3d:ab:3e:cc:7e:4d:8b:58:2b:17:92:88:
cb:49:9a:07:03:0a:a3:9a:ca:dd:af:a2:33:58:ea:
98:8b:c6:b1:62:3f:e9:bf:8e:95:19:14:53:12:e4:
cc:01:be:07:fd:ed:11:e3:93:42:f7:cc:a6:e5:85:
2b:b2:a2:0e:b0:2e:c7:2f:9e:29:11:b7:a9:d2:37:
47:b3:57:c9:88:77:97:a3:f0:2e:55:3d:bb:da:89:
1c:2b:75:7f:2f:6f:21:e6:98:8b:a8:8b:b7:23:65:
57:d0:3e:76:2d:b3:40:c7:8b:21:f4:e3:42:97:2c:
46:b6:fd:b2:87:38:c8:88:c4:21:38:6e:b1:27:48:
26:a4:fa:01:a6:8e:d0:9f:a9:cb:89:91:bc:1f:7a:
58:8f:b1:f1:d4:a4:55:ed:70:3e:4a:20:90:da:50:
68:b7:d4:de:3e:f7:42:6d:5c:3d:b4:d1:c4:ed:d3:
2a:a6:b4:37:c5:8a:2c:8c:b7:45:4b:e8:56:34:1d:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:5F:7F:62:40:1E:2F:F2:04:4C:84:8A:9F:DA:6C:65:68:7C:0A
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7c:10:8b:cb:23:0d:84:f5:12:9d:bf:f3:18:7b:c1:a2:18:
74:c1:13:c6:98:07:e6:81:1d:03:0f:6a:ce:ca:a3:bd:36:35:
4e:d8:6c:12:f2:00:52:2b:10:5a:f2:b4:06:74:b3:fb:b6:84:
0d:a5:da:4a:65:e7:03:f1:7e:dd:81:f8:14:b3:6d:c7:1e:d5:
42:63:a7:fa:02:22:af:fe:1a:3e:ab:fa:fd:42:a5:23:56:6a:
7a:80:73:6c:bd:ef:d4:ff:0f:3f:cd:63:4e:21:22:4d:11:4e:
39:62:23:a7:9c:c7:3a:34:bf:78:b9:a5:e6:47:1e:a3:11:b2:
76:13:6b:4b:8c:78:01:92:f3:93:78:67:84:0e:4f:5a:8f:0a:
f1:56:35:fd:23:23:60:4e:52:f0:7d:22:2a:86:d2:87:ba:ce:
0a:e5:9a:66:9f:0d:78:30:16:9d:31:e4:da:77:44:da:bd:10:
ed:e6:52:97:18:a2:2c:ea:e5:8e:1f:66:00:b0:0a:9f:9a:f5:
6d:94:3a:fb:2e:25:d4:97:be:44:67:0b:7c:11:8c:9d:6c:e9:
bf:3b:55:b7:b5:47:64:64:5f:51:26:34:e5:e0:60:8a:b1:c5:
5e:f8:a8:f5:5a:40:5e:f2:f6:ca:b2:c0:ea:29:b8:81:7a:83:
98:90:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:53:49 2025 by rpki-client