Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier: YXp3gNKa4Z2FWs0MQ8XQ3QxjQ4+BqGrGpCaZu0SqwIk=
Subject key identifier: C6:32:C6:12:5A:B7:75:3E:34:AE:D3:E3:77:C1:58:7D:8D:89:E2:CF
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer: /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial: 01964D7EB46A172CBDA148456061997FC9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number: 0BA2
Signing time: Sat 19 Apr 2025 10:01:11 +0000
Manifest this update: Sat 19 Apr 2025 10:01:11 +0000
Manifest next update: Sun 20 Apr 2025 10:01:11 +0000
Files and hashes: 1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: TnTktcFRnkBJvep1pXVhWHiuRRohQe09sPn79TeVmTY=)
2: 1-eEKcv2-HlB3jOunD8sGEQP3iuo.roa (hash: 1bxmvhYpMOeABQ7wYp60dzQC7ktJL7nqMNn/zKkAUDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:b4:6a:17:2c:bd:a1:48:45:60:61:99:7f:c9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Validity
Not Before: Apr 19 10:01:11 2025 GMT
Not After : Apr 20 10:01:11 2025 GMT
Subject: CN=c632c6125ab7753e34aed3e377c1587d8d89e2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:a6:22:04:72:cc:01:e5:75:78:61:99:03:
00:fb:da:e1:3a:86:83:61:6d:af:35:ee:a8:ce:31:
3a:14:eb:71:42:6c:3b:79:9d:7d:04:9c:5a:d9:b4:
5b:fc:03:32:09:73:f3:29:c6:23:ff:6b:8f:93:d1:
e4:04:59:8a:36:35:e8:8d:69:e7:03:92:8c:c6:8a:
7b:72:d7:3c:8d:28:83:6e:03:18:a1:f8:ce:b1:15:
de:65:6a:98:0b:19:81:9e:fd:cb:cf:e1:d1:25:ce:
84:3c:d7:a1:95:1b:29:73:e1:d5:c5:42:8d:a3:7d:
80:bf:64:a3:a4:76:c8:c2:6d:2a:84:64:c0:c4:3b:
1e:9c:21:b1:1d:bb:28:f5:e0:64:d0:18:0a:8f:78:
44:92:c3:7c:4a:0a:81:25:04:6c:c7:db:0b:36:37:
9f:75:f9:56:4a:86:f9:27:fe:78:6e:83:bd:c9:88:
12:5a:c2:c7:5d:27:60:40:92:12:ae:78:e3:12:0e:
64:67:1a:57:09:ff:72:96:6e:21:04:38:7f:80:e6:
51:ee:2e:49:40:14:8d:46:0b:64:16:27:3d:d8:ae:
08:05:ed:83:4a:71:29:70:03:80:26:ed:38:73:ce:
ac:ac:64:a3:7c:2a:38:7e:c1:84:18:a8:87:89:06:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:32:C6:12:5A:B7:75:3E:34:AE:D3:E3:77:C1:58:7D:8D:89:E2:CF
X509v3 Authority Key Identifier:
keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:01:6d:c2:79:ec:63:d3:f6:9d:26:e3:08:d2:87:b7:22:
71:fc:af:c4:d9:7f:b5:76:98:c8:30:ae:92:32:a8:92:16:7b:
0b:e0:c3:35:4b:2c:44:89:71:56:6d:77:fb:3f:93:84:e9:f9:
a0:45:e9:9f:5c:aa:d2:10:98:1a:f0:fa:30:47:ae:03:72:dc:
5c:c2:b9:e1:0e:8c:06:1a:a6:7e:5b:cd:25:48:dd:e7:b8:5a:
43:eb:f6:e1:73:ea:8e:ca:55:3f:b1:af:3d:ff:9d:a4:c5:49:
f3:30:b8:ad:23:6e:61:d7:c0:18:b6:05:95:59:3c:4e:91:ae:
4a:79:c7:3e:0b:51:7a:fd:29:b8:63:12:c1:5a:c8:d8:03:a9:
04:3c:8a:9e:f4:c7:3f:7c:31:53:e2:df:52:50:84:e6:82:05:
5f:cd:13:ab:55:c2:9c:f7:d2:ae:40:d7:04:46:62:51:12:18:
80:01:00:cf:1f:1c:69:38:ac:d4:9a:0e:71:23:3f:58:bd:b5:
ef:e6:a3:39:3c:b6:01:18:19:3a:fd:f5:16:5a:f1:7d:1c:16:
59:6d:ae:87:99:ef:e2:ca:72:42:05:33:38:e7:31:05:2b:ba:
5a:a3:d8:0d:6b:74:23:f7:9f:92:7d:45:f5:af:0b:18:45:86:
54:77:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:29 2025 by rpki-client