Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: Cqhv0RdwFmLiZ5kjeu2hexhwCSWW3TTtRBaFwg/E0VE=
Subject key identifier: F9:0E:D4:28:B2:86:45:1E:2B:3C:5F:A2:C5:FC:B6:A7:65:40:AF:C2
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0196790D1758A437E88B711D16019B1CFD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 093C
Signing time: Sun 27 Apr 2025 21:00:23 +0000
Manifest this update: Sun 27 Apr 2025 21:00:23 +0000
Manifest next update: Mon 28 Apr 2025 21:00:23 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: EOMQcW4nWRJuJAVmhLjAmIM66dN5UHX8gLxO8HQGFnk=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:17:58:a4:37:e8:8b:71:1d:16:01:9b:1c:fd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Apr 27 21:00:23 2025 GMT
Not After : Apr 28 21:00:23 2025 GMT
Subject: CN=f90ed428b286451e2b3c5fa2c5fcb6a76540afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:ac:74:5d:a7:d9:97:7e:98:10:92:ff:d9:
cc:16:e9:7a:49:48:e4:d8:8a:bc:7c:49:18:2c:62:
fc:c1:79:d0:85:ba:43:8b:33:54:92:26:2f:7c:ea:
9e:bb:d0:46:e5:1c:96:9f:cc:b4:5d:54:d2:88:7f:
31:bb:7b:f1:5c:48:05:ae:6b:3d:4c:b6:1d:46:b0:
11:85:17:fb:aa:8d:c8:5d:eb:ac:84:63:60:49:19:
f2:6f:27:fd:be:84:46:b6:12:ad:6b:de:66:ed:75:
ba:33:d1:41:37:27:26:e8:45:bf:be:d0:eb:6c:2d:
97:95:8e:10:34:4e:de:5e:f2:94:80:7a:d1:0e:b0:
29:09:b2:de:f0:87:85:b6:2f:65:b3:a3:88:2a:ff:
ab:07:3d:bd:c2:30:2f:77:63:df:b8:11:3d:a7:09:
87:39:a1:2e:2c:58:ee:f0:ed:06:96:73:01:52:78:
61:5e:14:f9:f8:69:96:2c:4e:34:55:b3:44:3d:79:
df:d6:d7:5b:73:60:ae:41:40:73:3c:d4:33:28:75:
9e:8c:8a:7d:9a:01:5c:5d:11:ff:a5:63:29:1f:ac:
12:40:98:8a:9c:80:1c:a3:fe:2b:30:61:67:0c:70:
bf:cc:95:f2:bf:92:5b:72:e6:a4:1b:59:0f:7f:78:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:D4:28:B2:86:45:1E:2B:3C:5F:A2:C5:FC:B6:A7:65:40:AF:C2
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:98:71:2e:5d:90:cf:4e:3e:fe:30:aa:fa:cb:52:be:59:88:
33:39:ae:14:47:c0:55:73:05:84:6c:98:a0:67:2a:89:19:83:
3e:69:a6:1a:8f:be:44:c9:b0:a9:08:07:fa:a6:d1:70:65:aa:
58:59:f6:4a:2c:ee:c4:e4:72:78:d8:15:de:37:07:52:3a:34:
38:39:2b:b9:bf:65:89:bf:fc:5e:ea:6a:76:ec:50:d4:8b:b2:
f9:87:f2:fc:4c:79:0a:2c:42:0f:d2:aa:c0:3d:e0:bd:ef:c7:
11:0a:67:0d:f8:c8:14:77:d3:3a:8c:c5:6b:45:bc:07:b3:26:
0d:08:95:1b:38:fe:5b:66:1d:5a:21:8f:26:02:2e:1e:18:15:
4c:21:c7:de:5e:03:9d:7b:b2:19:3f:cd:1e:6d:57:8c:8a:3e:
a3:13:ea:0d:31:5e:ea:4a:8c:fd:0f:72:34:c7:d2:5e:4c:c5:
f4:1f:81:53:3f:98:e8:8f:32:61:57:e5:1e:24:a3:0c:89:ee:
a3:4e:b6:b0:b6:7e:a0:ce:84:08:a7:f0:f0:b5:95:95:49:2a:
90:51:8c:d7:ce:1b:c4:6f:7c:c7:cc:01:84:c1:1b:84:3e:82:
58:ab:79:61:53:45:02:14:6b:83:0f:88:77:e9:ef:b3:4f:1e:
9b:09:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:44 2025 by rpki-client