Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: 6t5NSGyjK0R/HxTf7FxW6kvUYKts5CwrNj9NhNGzRA0=
Subject key identifier: 1D:B8:36:D9:FF:D5:E0:7B:CE:19:39:CE:2A:12:AE:E3:8A:F2:C9:3B
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019644445C349CBD0FD8CE375F953888A56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 14F1
Signing time: Thu 17 Apr 2025 15:00:52 +0000
Manifest this update: Thu 17 Apr 2025 15:00:52 +0000
Manifest next update: Fri 18 Apr 2025 15:00:52 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: FhBv9F28CkxK3PWpqPz0TQwbFrfQUD0JpHu50v9sCsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:5c:34:9c:bd:0f:d8:ce:37:5f:95:38:88:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Apr 17 15:00:52 2025 GMT
Not After : Apr 18 15:00:52 2025 GMT
Subject: CN=1db836d9ffd5e07bce1939ce2a12aee38af2c93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:d2:fe:19:46:26:c4:3e:00:fa:8a:06:26:
19:f6:61:f4:80:07:d2:f0:d5:32:a1:e7:30:1c:fc:
a8:7c:ce:bb:44:60:31:de:9e:a8:4c:fe:49:b5:9f:
6f:e5:bf:4b:f2:59:20:20:00:d9:84:e9:21:a0:51:
e5:b1:61:06:16:c3:3c:d3:79:fd:28:08:0b:b7:38:
a0:a6:96:a8:c6:67:d9:11:82:34:30:b0:6d:26:db:
0e:27:27:7e:93:23:5c:e0:c7:ad:c9:16:1b:45:1a:
13:61:b0:22:3b:14:1e:ef:1e:fe:64:94:90:10:f2:
d9:9a:20:a0:5c:40:99:4f:26:87:61:8e:1d:f1:1f:
69:7a:91:f2:58:10:e4:99:f1:16:61:61:65:83:f6:
2b:45:50:cb:e7:d4:91:88:37:96:13:76:f9:ff:82:
18:09:f5:3b:e6:93:ff:1a:69:d0:12:f1:9a:fe:a2:
7b:67:ae:bf:76:df:31:66:fc:4a:d0:3b:9d:8d:0d:
6d:e4:b3:41:2b:01:93:34:03:48:e2:20:6b:9c:01:
a2:6a:1f:b4:00:98:9b:ad:6a:11:80:71:a7:5f:d8:
de:0a:85:10:36:32:50:1c:2f:f5:15:71:b4:06:cc:
40:1f:c5:50:96:9e:fe:a1:8a:56:70:3d:6b:98:1e:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:36:D9:FF:D5:E0:7B:CE:19:39:CE:2A:12:AE:E3:8A:F2:C9:3B
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:66:ef:40:1c:c9:da:a5:b7:f3:02:b7:65:eb:ca:0a:12:a8:
c1:13:1b:63:37:4f:fb:53:06:7f:61:f3:a0:5c:94:67:04:ba:
4e:6d:9c:86:aa:d6:7b:d9:26:0d:18:52:2d:2f:de:c6:3a:ef:
c2:e0:89:ff:f8:d4:3c:31:ea:93:df:ba:3e:3a:eb:99:b1:57:
10:48:f2:c9:7d:07:64:30:fb:0f:97:e3:68:3c:f6:03:fc:3e:
97:69:af:76:9c:34:5b:10:1a:a8:23:be:d1:bf:3f:e2:71:03:
ec:ee:10:3e:42:f8:51:ce:f4:26:e0:36:db:84:27:52:0f:7a:
9a:43:a6:b0:0f:08:51:b6:4f:30:b5:78:54:c5:7c:a0:fc:15:
c2:72:7a:82:21:9a:90:e2:6f:1f:1b:37:80:d3:fb:1b:4e:d7:
a1:d3:3f:17:4e:98:54:35:d7:61:38:b4:ce:29:13:06:94:9b:
f9:c9:79:fc:b6:28:db:28:b3:25:ce:93:50:d9:82:ce:75:bd:
6f:55:8a:92:6b:df:92:b2:88:20:10:e3:c6:9b:76:77:c3:22:
7e:20:ef:d2:69:ef:c7:5b:1f:da:bb:0f:ff:3b:b7:dd:7b:9d:
97:12:39:5e:53:5d:32:a0:1a:19:c9:bf:f2:9d:9a:98:1b:4a:
80:6b:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:55 2025 by rpki-client