Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: BFt6xbh6L4vLwzhDelhpFjyzde+b9jqpsgGGHykQUkM=
Subject key identifier: B6:26:AF:0B:66:8F:77:BB:AC:1A:71:25:9F:4C:87:1E:F1:BE:8A:56
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 01964556E40F93337A789A542B555CC259B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 0D73
Signing time: Thu 17 Apr 2025 20:00:44 +0000
Manifest this update: Thu 17 Apr 2025 20:00:44 +0000
Manifest next update: Fri 18 Apr 2025 20:00:44 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: QQDdIOML/Vtc9nbfg2qTnSS/Ai55lOscuMONEewhMSU=)
2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:e4:0f:93:33:7a:78:9a:54:2b:55:5c:c2:59:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Apr 17 20:00:44 2025 GMT
Not After : Apr 18 20:00:44 2025 GMT
Subject: CN=b626af0b668f77bbac1a71259f4c871ef1be8a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:47:80:b1:9a:23:c1:f1:ce:e7:f3:60:7b:
3f:61:f3:92:d5:d5:7c:e7:5f:e5:8a:00:af:38:da:
94:44:ed:d7:2b:b4:76:a9:de:95:2b:da:78:94:3f:
f5:9a:c7:1a:5e:ce:60:dc:c4:00:fa:d3:01:ad:b7:
7e:87:dc:ad:7b:a6:04:d8:f3:a8:e9:fa:d3:ab:75:
97:95:2f:9f:a1:91:19:84:21:5e:bd:cf:ff:8d:e2:
7a:50:f2:da:e1:ef:31:f3:3d:73:49:ff:28:13:fa:
7f:24:99:b9:fc:ec:2d:45:37:bf:7e:1d:e6:2b:f1:
fb:61:24:3f:f5:05:6c:74:d7:ee:8d:8e:dc:f8:f9:
59:cf:8d:ab:72:ac:c3:45:c4:e4:84:28:8c:9d:88:
c4:90:24:60:24:6d:2f:8c:54:b5:cb:57:34:84:f0:
81:ff:ed:3b:91:db:1a:db:6c:fc:a1:9f:46:b4:bf:
3d:6e:21:eb:3f:cf:01:9b:bb:f9:64:45:ff:48:26:
55:4c:6e:7d:46:d6:ee:bd:8a:a6:ca:25:bb:c9:3d:
00:7f:41:6b:fc:81:76:66:4d:d5:f8:a1:40:2d:28:
76:29:f0:74:8b:5e:57:73:11:d9:9c:2f:d0:76:43:
01:5d:4e:09:11:9d:da:76:99:78:2d:75:84:a6:e2:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:26:AF:0B:66:8F:77:BB:AC:1A:71:25:9F:4C:87:1E:F1:BE:8A:56
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:05:94:59:43:0d:a6:0b:11:91:39:b7:9b:7d:57:1b:c5:00:
c3:1a:bf:cf:f5:d5:80:2d:bc:02:08:12:ba:d9:25:cd:9d:21:
17:b4:86:f8:4e:7d:a0:ab:97:71:88:62:1a:95:2d:ae:31:5f:
c9:76:f0:b1:be:ac:b1:ee:08:b7:86:83:5f:b2:6e:17:c9:42:
c6:ae:83:23:5d:3b:dd:b9:eb:b6:10:7b:b0:2d:77:70:84:44:
38:53:75:88:f5:34:43:62:10:74:17:9a:f7:9a:05:a0:bb:f2:
d1:5c:49:34:ca:20:ca:95:14:1d:67:3d:f0:03:d0:65:90:ec:
aa:93:a4:f6:46:2f:47:02:30:fa:aa:b5:be:9e:1c:96:a7:93:
2f:8b:dc:3f:f7:0b:f6:b0:ad:e2:e4:d9:ec:fc:0e:bd:5e:61:
01:7c:07:a5:41:82:61:61:80:cf:ed:23:bf:fb:fa:15:2f:a3:
ff:2d:9b:38:9b:56:5d:b5:33:14:48:91:f1:83:b2:d2:fb:9e:
a2:1d:61:e4:aa:45:93:aa:bd:7c:29:eb:be:8f:39:1c:8b:ed:
cd:fb:24:ad:4f:ec:db:c1:68:8f:81:e5:34:c4:21:90:07:fe:
49:c7:66:82:27:c2:ac:39:32:ce:27:29:74:f0:2a:17:8d:d6:
91:26:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:17:05 2025 by rpki-client