Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: +JaPW8c/Ii0+hGAnCF+7wc0CO8SeR3kq1g8QAefC0d8=
Subject key identifier: 8D:45:9C:32:F6:DF:BB:A2:B5:03:CB:A9:C3:04:35:15:3A:79:23:59
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019677FBCD5B6348B2FF1C5164CA356E3983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 13F7
Signing time: Sun 27 Apr 2025 16:01:52 +0000
Manifest this update: Sun 27 Apr 2025 16:01:52 +0000
Manifest next update: Mon 28 Apr 2025 16:01:52 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: Vc0v+zb5drL57sBAwy2cMIcD1s6/DBk9Cb2ytikwsDE=)
2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:cd:5b:63:48:b2:ff:1c:51:64:ca:35:6e:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Apr 27 16:01:52 2025 GMT
Not After : Apr 28 16:01:52 2025 GMT
Subject: CN=8d459c32f6dfbba2b503cba9c30435153a792359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:78:8a:1c:c0:4c:c2:ad:9f:7f:47:4b:c9:
b2:00:f4:ad:19:3f:e0:65:04:73:86:3d:75:6e:c8:
bd:9d:9c:41:d0:32:7c:c1:0e:03:44:6d:30:d9:9b:
87:c4:23:68:1c:25:3d:f4:af:ab:2f:45:ff:a7:9d:
cf:93:e1:ac:f1:6c:ff:8c:b8:dd:1f:95:ab:3e:cd:
9f:40:c1:44:9a:c4:57:d7:7b:8c:c9:f4:61:ca:2e:
7a:a1:bf:d1:21:21:11:96:aa:d9:aa:e9:6a:33:71:
1d:2e:a3:3f:f7:5c:c8:2a:b5:53:a7:e8:be:ef:5d:
c9:fd:cf:21:77:04:7e:8f:b6:08:aa:4e:d4:0e:ad:
93:e0:25:85:e3:56:12:19:71:3b:86:27:d2:70:68:
1c:93:8d:e5:ff:40:31:ff:b4:ef:88:35:a1:47:0b:
7e:a6:42:64:f5:9b:95:c4:23:3c:3f:8b:86:9f:f2:
23:a2:bc:06:31:e3:03:c4:ef:2e:54:49:2c:35:52:
67:6a:a9:70:35:20:c0:02:d5:4b:3b:a4:12:04:43:
5c:9b:94:f0:a2:51:dc:b2:0b:a4:9a:ca:13:a7:ac:
90:ef:8f:60:4f:4a:fe:3a:41:6d:cd:41:ae:2a:7e:
c1:1e:01:d8:40:df:57:18:4b:f0:05:f2:39:24:3e:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:9C:32:F6:DF:BB:A2:B5:03:CB:A9:C3:04:35:15:3A:79:23:59
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:aa:9c:ed:e4:b9:e0:2a:7c:88:f0:75:b2:47:d9:4f:57:
3d:ef:dd:86:02:1f:57:58:8c:a4:3c:4e:db:4f:eb:0c:ff:47:
8b:c0:6c:c5:85:6f:6b:f8:04:ec:91:ac:50:c0:69:09:14:af:
0e:b0:80:df:36:68:7a:19:1f:65:ec:1d:16:e3:d3:76:c9:96:
9c:7a:16:ea:51:03:47:84:a8:54:e3:14:cf:a8:0d:34:ac:4a:
81:e8:06:da:2b:97:56:2b:35:25:98:ba:92:25:64:4e:da:95:
95:f1:13:f7:40:c2:8c:bd:d8:13:53:f2:60:e9:1e:a6:94:90:
03:79:0e:4e:21:b9:9b:b5:cb:9c:45:f8:90:c5:9b:dc:0a:47:
5e:4e:8b:0d:78:55:70:22:3e:a7:e7:8d:d9:d9:2a:c0:cc:06:
6b:d1:cd:72:a4:42:cb:06:db:b3:39:03:f3:f3:fc:21:a8:fc:
04:00:7e:3b:a9:9b:74:a7:e4:9a:6f:ad:98:e7:ef:b5:f1:bc:
2c:6c:ec:94:bd:d7:c0:5e:f9:18:34:a3:ea:97:69:92:26:94:
e2:93:ef:d4:89:52:82:84:cb:f5:b4:30:16:2a:29:68:95:5f:
87:f4:49:f1:d2:d0:c3:67:62:4f:7e:ad:6b:ea:e8:8b:f0:02:
9a:0a:7b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:31:38 2025 by rpki-client