Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: oyLu4Xq8jYCarXrBBJ/GMBXyBkN+kN5MDtnu/fX+jO0=
Subject key identifier: 3B:A2:E9:4D:37:16:CC:19:FB:F1:92:5F:B3:E0:CA:3D:C0:8A:B4:D9
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 0196914C44C0DE1433FFFDC1F46E3247701C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 14:00:16 +0000
Manifest this update: Fri 02 May 2025 14:00:16 +0000
Manifest next update: Sat 03 May 2025 14:00:16 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: PE7188HD/YT8qBQJsDRa7D1E+qTUChDSyVyqHmaPwqc=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:44:c0:de:14:33:ff:fd:c1:f4:6e:32:47:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: May 2 14:00:16 2025 GMT
Not After : May 3 14:00:16 2025 GMT
Subject: CN=3ba2e94d3716cc19fbf1925fb3e0ca3dc08ab4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:5f:82:98:8f:f4:0d:0b:19:c3:88:6f:9a:
55:f6:26:a9:8c:be:76:a0:38:15:a8:24:94:03:c0:
4a:10:de:8a:34:79:0a:70:da:d7:d7:f5:a4:36:b3:
85:19:b8:64:0f:7a:a8:37:4a:1b:cc:3b:cd:a8:89:
21:66:de:66:7e:f5:a9:96:70:07:ec:7c:93:ab:ff:
27:7b:bc:48:e9:5d:c7:35:7b:21:ff:50:e4:52:df:
b5:66:6c:41:89:e6:f6:ce:6b:4f:54:d5:bf:d2:74:
db:d8:a2:bb:30:97:e0:97:40:ad:2b:8a:9d:b5:65:
53:68:95:57:6c:16:bc:93:cb:76:6a:54:4f:b8:15:
be:5d:5a:ab:75:b8:ad:15:a1:c5:ae:13:27:12:a0:
ca:09:ee:64:84:33:48:cd:f1:1d:63:19:96:42:cf:
64:77:2c:02:6c:26:c0:2d:d4:31:61:3b:e3:0a:c6:
f4:1c:0f:d3:a1:aa:74:90:d2:c7:06:d1:0b:19:fd:
47:42:0a:aa:2b:58:a8:c7:8e:02:81:44:ba:d8:c0:
69:22:27:9f:15:b4:4e:0d:2c:3a:7f:79:03:95:b6:
dc:88:e2:26:ba:88:d7:fe:ff:b0:38:b4:81:cb:21:
e8:14:3a:c3:33:59:dc:a8:06:9c:d5:fe:99:19:6b:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:E9:4D:37:16:CC:19:FB:F1:92:5F:B3:E0:CA:3D:C0:8A:B4:D9
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ec:6a:2c:97:6c:37:65:8b:d5:e5:bf:f3:1c:1e:87:73:df:
02:9d:59:99:3d:1b:f6:65:3b:9b:4d:e2:a7:e0:fd:64:0a:1a:
eb:a7:d3:75:e4:60:19:32:86:32:d8:ff:6c:0f:a4:05:f5:4f:
63:48:3c:7e:70:60:1d:9b:1b:ab:41:cc:72:3a:69:90:19:9b:
b1:52:d2:ca:de:14:e0:ba:1e:f1:c1:a8:6f:df:61:3b:4c:3a:
f4:fd:58:24:39:04:b5:d0:7c:1b:d3:48:d7:93:66:fd:34:18:
09:27:90:f5:e0:1b:fb:98:38:f5:b3:09:5a:df:3e:c4:4f:72:
49:d5:54:4e:b2:d6:ee:57:90:f5:bc:4a:a0:c3:71:78:19:a7:
63:61:34:ee:96:b9:26:4c:95:66:85:be:6f:df:cb:66:1a:c8:
59:48:14:b6:24:02:36:cb:4e:09:37:17:40:ac:cc:e2:ce:76:
ac:1f:86:dc:f1:8b:30:d9:65:17:bc:80:e5:42:ba:80:83:75:
67:30:5d:a7:17:78:71:50:19:52:b7:c4:48:f7:73:98:8e:15:
bc:47:59:f8:d7:86:02:90:69:0a:79:80:37:1b:64:43:57:a2:
d0:27:4e:e9:a1:2c:cc:1c:ff:88:ab:0a:49:de:bd:3d:2f:b7:
01:74:54:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:25:48 2025 by rpki-client