Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: hG6sO/gC0E7pG+TYUSo1Y2GPdh1rHFNF6MfwRZerQ/E=
Subject key identifier: 1B:F6:95:71:60:F2:65:97:D2:54:51:11:DA:D6:6D:9C:BB:26:E6:7A
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0196545C0454C30C13153ADB6D2EE1C02081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 02F3
Signing time: Sun 20 Apr 2025 18:00:38 +0000
Manifest this update: Sun 20 Apr 2025 18:00:38 +0000
Manifest next update: Mon 21 Apr 2025 18:00:38 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: y9SzgLj3pdIHLtZhhVQa7PWlFC/RSvBcwF6bngColew=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:04:54:c3:0c:13:15:3a:db:6d:2e:e1:c0:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Apr 20 18:00:38 2025 GMT
Not After : Apr 21 18:00:38 2025 GMT
Subject: CN=1bf6957160f26597d2545111dad66d9cbb26e67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:96:81:86:fc:ef:6c:76:04:67:5c:5d:67:
a8:f2:c8:a6:6a:8e:cb:5e:27:be:61:f7:fe:e4:34:
47:79:4e:bf:b5:b2:15:d0:3e:ae:61:ca:60:77:f3:
c6:bf:23:8d:91:16:c3:c7:5d:92:9a:12:b8:20:3b:
95:b2:fd:36:d7:e2:25:3b:aa:d7:9c:99:3e:9c:a7:
47:27:12:5e:81:48:a5:05:4d:fe:ee:66:5f:17:de:
6f:b6:dc:35:fb:bb:c1:40:e7:3d:82:3d:3d:f3:1d:
0f:80:9e:11:20:2b:bd:8a:84:c4:88:b8:8b:14:1d:
bf:c5:c2:b7:d0:0b:14:35:d2:d5:ef:07:41:67:53:
c5:70:0b:d1:dc:32:cb:ce:24:5d:c9:00:f5:d5:01:
d2:a1:05:7e:7f:ab:c4:82:23:5a:e6:be:1e:76:84:
96:a4:e7:08:68:47:4f:20:a6:a1:4f:9c:29:2c:c1:
49:57:d5:e0:2c:74:b9:9d:bf:fc:30:ac:22:3b:12:
18:20:5c:f0:16:d3:f8:4f:d9:f1:19:2b:c2:6a:2d:
88:3c:97:73:8b:63:2e:32:37:06:9d:7a:35:02:31:
af:c6:dd:3d:e9:3d:70:54:b5:e7:fa:3b:59:9d:d6:
69:1e:dd:36:9a:5b:c2:8b:f3:ed:55:6f:4a:b9:28:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:95:71:60:F2:65:97:D2:54:51:11:DA:D6:6D:9C:BB:26:E6:7A
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:68:08:b1:ec:6d:b9:29:80:ac:bc:d3:58:11:87:e2:ed:f4:
b3:ba:77:f5:d1:8a:ba:f6:3e:d7:5d:8d:1d:4e:e1:db:23:89:
53:ac:12:b4:9b:17:19:99:70:0f:f6:18:ae:b7:43:cb:2b:b7:
e3:4b:14:f0:04:02:ec:3e:e5:91:f9:23:72:18:a7:8a:ee:da:
92:90:1b:e1:5e:28:5c:4c:cd:83:cb:89:7f:a2:db:52:22:5e:
9d:10:74:5c:5c:75:5b:96:73:cc:e9:40:ef:5a:71:f0:25:be:
dc:bf:55:0e:1b:df:5e:14:5b:16:88:c2:4d:51:51:7c:68:f8:
e9:7e:ce:d9:0a:22:82:08:93:f7:83:e1:c0:5f:51:25:9b:b3:
75:e7:43:33:e3:f7:35:a7:da:8e:52:a0:c0:28:67:ef:f2:d9:
75:a6:8c:d9:93:58:88:a9:2e:78:6f:f1:93:39:da:f8:eb:56:
b0:b4:85:3e:88:5d:70:66:f5:c1:db:8e:12:e4:cf:f0:25:8b:
35:e0:18:e7:b7:c0:5f:70:85:e2:7a:af:91:e7:95:a3:5c:6d:
06:0f:51:27:58:78:49:5e:dc:da:96:95:87:70:db:db:ed:18:
4c:3d:0c:02:b6:a9:ab:72:dc:65:bb:7a:d5:53:37:7c:a9:ea:
38:57:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:29:13 2025 by rpki-client