Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: 8coBD057Hk9aarmicIawdeAFv+K23SJxrCVoXyUXRnU=
Subject key identifier: AB:43:6E:53:77:4B:90:09:4B:A7:D8:E9:35:B2:85:E1:0C:C6:8E:F0
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 01964FA348A90FF3ED7A9B708A720D992B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0642
Signing time: Sat 19 Apr 2025 20:00:23 +0000
Manifest this update: Sat 19 Apr 2025 20:00:23 +0000
Manifest next update: Sun 20 Apr 2025 20:00:23 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: 3jbg5D8WUARt2+/srJuz/p5mLtPyLaAwoGew1l2MaSo=)
2: 6r4H1bkA6HQBHKzqndzkbGN-fLc.roa (hash: aHRcxKC7eM9v241orSIrtl55ETVWmoxd9czIqtemS2Y=)
3: yZKr3MkjOL236i5PxJm5JOrjeZQ.roa (hash: P3Sg9X6HUsmoHVeRhUz452rlFrDzI8l8SS7MoZsVvQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:48:a9:0f:f3:ed:7a:9b:70:8a:72:0d:99:2b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Apr 19 20:00:23 2025 GMT
Not After : Apr 20 20:00:23 2025 GMT
Subject: CN=ab436e53774b90094ba7d8e935b285e10cc68ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9b:14:9e:7b:10:4a:3d:18:26:72:92:26:4b:
2e:af:dd:05:b8:7d:62:c6:08:ac:4e:72:c5:d2:74:
80:1d:a3:84:17:c2:33:d2:a8:45:44:78:31:02:7e:
5f:77:0c:24:d1:a9:3c:9a:f3:ca:e8:c3:4b:e6:61:
d4:3b:42:10:f2:9a:db:72:d5:34:db:55:6d:fb:0a:
14:56:6b:b7:9f:46:4c:ee:7d:c0:29:77:92:34:e8:
39:4c:1d:2b:26:c2:46:ce:99:ca:de:49:e4:3b:c5:
be:21:07:f9:73:a6:93:f1:8f:43:72:7b:d9:ac:a8:
63:6a:ea:24:87:1b:45:9a:31:7e:4f:cc:af:ab:e8:
21:aa:e1:c0:61:b4:d8:34:5c:28:b7:51:ba:8d:b2:
54:b6:2f:a6:58:d0:5d:fb:91:29:26:ee:a6:e9:d9:
90:66:58:2a:a6:5c:0b:d4:7a:95:92:76:2d:9e:01:
ae:69:ef:2f:b4:1a:44:94:c1:9e:fe:ad:a8:69:38:
65:55:92:a6:05:ec:53:82:7c:60:09:62:3f:97:49:
a1:b0:2e:ef:09:dc:a5:c3:75:fb:ed:c4:3a:46:2f:
6b:19:70:b5:3a:f4:4d:8c:0c:7b:3c:44:1c:6f:91:
bc:a6:c1:f7:38:78:42:7d:48:9b:3f:07:bd:fb:af:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:43:6E:53:77:4B:90:09:4B:A7:D8:E9:35:B2:85:E1:0C:C6:8E:F0
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fc:f5:ac:72:f1:8f:30:70:77:b1:79:80:ca:c1:f7:71:ef:
5e:c5:3f:2b:3e:6a:12:f1:cc:24:ec:02:8c:92:07:35:40:86:
87:83:36:32:dc:b4:7a:96:f2:32:f4:27:86:02:08:c8:b2:11:
16:56:f9:af:d7:bc:1f:ca:6f:d9:53:f7:83:d0:1b:79:b4:3e:
cd:38:e7:ac:e0:d2:19:88:5a:4b:0c:d9:26:1f:0b:b3:00:f0:
97:a0:dc:7d:0a:54:2a:63:33:ec:6a:5c:ad:b4:88:a8:d0:ce:
95:6f:16:88:8d:fc:75:fc:de:f2:f9:2e:cb:d0:fb:77:25:58:
94:6d:44:6d:b7:ea:ba:2b:ee:d9:a9:d9:28:76:5c:28:3d:b9:
52:72:6f:95:64:80:c4:e5:6b:41:8d:dc:c6:17:07:7a:68:b0:
84:02:8d:ae:f7:48:6f:62:a2:db:9a:dd:d3:f0:05:c4:85:89:
61:01:4b:48:91:78:8d:75:44:c8:e7:70:ec:28:4c:a5:70:61:
8b:0f:8f:8a:a9:a5:81:a7:d8:23:15:cd:e3:62:0a:ef:e6:56:
27:c6:36:57:ce:a4:a1:03:28:b3:e7:a4:dd:47:ca:18:38:bb:
42:eb:cc:23:e9:3a:43:23:99:da:92:e7:bf:01:ff:c1:72:47:
c3:11:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:29 2025 by rpki-client