Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: tlhX/3ozBi3Sl6Ouj01RwEvZI81Y4fZo5PC1zJoIS1U=
Subject key identifier: 1A:69:D1:07:F9:59:4D:14:B6:F6:A1:D0:51:BB:66:92:67:24:CC:AD
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 01964AB40D5F0A5E949AE392C879DA94C0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 05A7
Signing time: Fri 18 Apr 2025 21:00:35 +0000
Manifest this update: Fri 18 Apr 2025 21:00:35 +0000
Manifest next update: Sat 19 Apr 2025 21:00:35 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: 7Ps30BLny9d15/jGj9H78ohyD4+0SQlEl8HIvl1uxkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:0d:5f:0a:5e:94:9a:e3:92:c8:79:da:94:c0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Apr 18 21:00:35 2025 GMT
Not After : Apr 19 21:00:35 2025 GMT
Subject: CN=1a69d107f9594d14b6f6a1d051bb66926724ccad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:2d:f0:05:f9:06:3d:7f:74:fc:09:1b:4d:
1d:10:da:d6:3c:ea:4d:18:63:1b:b9:f7:d3:7e:78:
dc:ad:2e:c3:07:f1:d9:79:29:94:d7:38:fc:f1:b8:
0e:68:ba:e7:f9:4c:3b:88:6b:82:57:a2:61:00:17:
54:c1:5d:06:04:fa:05:a9:d3:f3:7e:5f:09:8c:c1:
3e:71:d1:f1:ad:e1:7f:8a:02:a1:36:af:dd:b7:0f:
02:cf:83:56:3f:cf:51:58:f7:65:dd:86:43:cf:0e:
31:88:c5:48:48:64:61:a1:8d:12:e7:d8:91:a2:af:
74:08:47:c0:0a:11:53:1b:83:59:a4:4a:00:d7:b3:
74:33:f0:c8:6c:e0:c9:8d:4a:32:a6:f4:34:55:2e:
0c:73:d9:77:ad:5d:9e:07:1c:43:ce:d6:c5:f1:bc:
35:a1:72:3b:3e:f3:17:86:b3:1c:ec:e1:43:e2:e0:
38:56:96:de:b0:99:32:0b:39:26:19:27:f6:73:42:
fa:04:87:b5:49:26:5b:18:9d:86:a7:84:1a:26:48:
bc:13:70:23:91:77:1a:aa:3e:c3:14:58:13:e9:78:
f5:95:0e:15:17:4b:e5:5b:77:6d:8c:79:db:ff:a3:
ce:41:36:22:5d:14:ca:86:ed:68:f4:81:e4:af:a7:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:D1:07:F9:59:4D:14:B6:F6:A1:D0:51:BB:66:92:67:24:CC:AD
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:5b:83:e4:e7:17:ed:07:06:ea:6d:83:3c:2e:65:40:7c:
fa:e7:61:9a:a4:18:a3:34:e4:d4:99:d6:57:ff:eb:fe:83:84:
4e:8e:27:fe:eb:85:af:7f:75:6e:b2:96:21:9f:30:50:3c:8f:
38:3f:3d:74:b7:ad:e2:be:d1:9d:67:d3:22:82:d0:b0:ad:91:
4a:8c:c8:ef:c1:e9:bb:92:d3:ce:70:54:20:e7:90:e7:6f:92:
68:cd:20:c3:54:f4:ed:66:ec:ca:ae:ee:0c:a2:e5:88:5b:5a:
0a:22:1d:96:53:b9:b1:04:8f:e6:90:19:86:15:7d:79:76:17:
f3:a5:ac:4c:47:d6:d5:8d:ac:23:f9:55:5a:f9:ae:09:91:f1:
35:bb:c5:ee:25:06:59:08:ea:14:77:c3:c7:01:50:a0:fb:ad:
30:dd:c8:20:f6:a0:06:2d:c8:20:6d:0d:c6:87:1b:1d:ac:fb:
38:dd:14:cf:58:c2:1a:5f:30:1d:c6:f8:02:10:d6:11:92:b5:
d4:a4:84:48:e9:6a:1c:1e:47:15:e9:4c:69:46:71:b3:df:8f:
49:c2:81:69:f1:3d:76:6b:9c:95:ae:e8:2f:2b:93:75:54:82:
6b:5b:40:b6:7c:ff:62:a6:4d:f5:ae:98:7a:5c:74:f1:a7:74:
9e:1c:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:03:44 2025 by rpki-client