Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: pj70w2SYEVEd/Fee/CGWJhxORazLQDuqviEyYmofBoU=
Subject key identifier: 0C:E5:1E:C4:38:9F:A0:BD:28:69:2E:E7:C3:03:BA:BC:5C:A1:3A:1A
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 0196876DC398E64AC078085E589647253511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: A1
Signing time: Wed 30 Apr 2025 16:00:39 +0000
Manifest this update: Wed 30 Apr 2025 16:00:39 +0000
Manifest next update: Thu 01 May 2025 16:00:39 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: WczrfGRAD5yV06xM3bccW28THIbOgQ3CM20WaWlBPuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:c3:98:e6:4a:c0:78:08:5e:58:96:47:25:35:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Apr 30 16:00:39 2025 GMT
Not After : May 1 16:00:39 2025 GMT
Subject: CN=0ce51ec4389fa0bd28692ee7c303babc5ca13a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:17:eb:f1:97:9f:4b:fb:da:80:07:7d:91:
89:d4:b4:ff:74:f5:c4:43:28:b4:62:28:95:20:17:
b7:a1:93:16:42:a4:82:0b:08:e2:67:c0:5f:68:e9:
43:67:e4:38:2a:e6:3d:22:bd:ad:d8:e8:de:07:76:
f1:4c:c5:bc:c7:18:31:93:6d:09:9c:a6:06:eb:cb:
36:8f:8d:cf:f3:c8:14:09:65:1e:7f:57:5a:01:8c:
10:cc:59:4d:a0:c4:52:af:4b:31:de:e2:b0:8a:a3:
ee:90:ed:37:fe:02:c2:2c:f9:6b:4b:cd:8b:54:ba:
4d:4b:6b:78:f5:bd:d3:20:53:f6:6b:5f:71:70:68:
37:f2:a5:92:8b:64:72:a0:51:f5:a6:60:c9:a2:34:
80:c1:87:c0:69:aa:1f:2e:fc:aa:05:a4:42:28:b0:
ce:90:91:76:1d:e5:ab:71:32:2e:6c:44:18:68:eb:
f3:cf:4f:32:67:0b:c4:5b:21:ed:1e:2d:71:4f:50:
48:c7:ed:f5:56:d4:a5:39:69:42:61:d3:cd:6a:81:
38:6f:53:b9:fd:72:26:63:cf:99:30:f9:69:29:b8:
48:bb:c2:03:2d:50:de:c1:c3:2e:9b:e0:e6:d8:9f:
35:5c:4e:bd:17:ff:07:55:5b:50:e7:d2:00:15:f7:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:1E:C4:38:9F:A0:BD:28:69:2E:E7:C3:03:BA:BC:5C:A1:3A:1A
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5d:db:a3:df:c5:0d:cb:03:bd:31:94:bf:bf:04:a3:1b:d4:
dc:13:78:fd:51:48:f1:0a:04:b6:f1:1b:96:58:3c:61:44:ed:
0b:85:0b:77:66:3c:24:2f:9f:1d:48:18:26:23:7a:32:ee:a5:
b1:2f:3b:10:33:54:09:7a:7b:5a:c9:7f:49:fc:d6:20:a9:7b:
ab:b3:0a:f9:fb:6b:7d:dd:cc:c4:47:6c:e4:65:2f:3f:48:b7:
c4:ba:30:6b:ac:4b:10:59:74:a7:58:8c:e6:c7:f0:2e:f9:10:
a8:89:31:6d:c7:df:7f:d9:78:c2:94:01:3d:47:58:f6:00:89:
a2:22:f4:47:bd:a3:75:2f:af:5d:4c:ce:8b:0a:db:5f:0c:89:
d4:48:95:fb:bc:02:99:97:0d:a7:b6:47:a6:d0:e7:bc:a2:8e:
db:a2:29:ab:21:cd:11:ab:aa:3c:fb:74:43:9f:11:ff:4e:85:
19:06:ee:d9:66:b5:67:39:5b:67:2e:d3:07:0c:ec:ac:85:e1:
dd:d6:bd:73:9c:36:13:59:da:3f:f0:8b:11:f4:a1:af:3e:f4:
1e:b4:ce:e8:2d:a6:c6:47:3f:20:90:5f:ea:48:8f:e7:19:c9:
0f:c7:e4:9c:92:46:ea:4b:57:6f:31:f0:2e:3d:c9:ec:52:84:
ec:44:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:55:37 2025 by rpki-client