Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: M5fTtvsY5y2Ox4cpgDOq0wEtgFcQpuR2vtGWbny7ajw=
Subject key identifier: 12:DE:B5:CA:59:14:A8:BD:B6:98:19:84:F1:E9:DC:E9:D1:0A:1F:76
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019677C36152ECD9E3B45773FCDABBDC69E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 0FC1
Signing time: Sun 27 Apr 2025 15:00:15 +0000
Manifest this update: Sun 27 Apr 2025 15:00:15 +0000
Manifest next update: Mon 28 Apr 2025 15:00:15 +0000
Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=)
2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: 11Dlues0IURuAxxZ/vhLxfTzbRax7TUmggKyVQ9hRiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:61:52:ec:d9:e3:b4:57:73:fc:da:bb:dc:69:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Apr 27 15:00:15 2025 GMT
Not After : Apr 28 15:00:15 2025 GMT
Subject: CN=12deb5ca5914a8bdb6981984f1e9dce9d10a1f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:b6:d4:a0:3e:cc:de:dd:c5:b2:73:61:be:
63:f9:0f:36:21:2c:e0:bb:ea:5b:e9:d3:d6:f0:fe:
18:9d:0f:b4:75:69:4b:1e:c9:3d:d2:91:08:b2:cd:
1b:51:ea:35:89:6e:db:06:9a:94:32:de:3c:93:82:
f0:a3:5f:cb:29:2f:a7:5a:0f:3e:94:63:89:99:29:
21:b3:a6:0e:81:f5:eb:b5:06:87:6e:a9:98:95:0c:
2c:39:9d:ae:b5:e9:e0:03:02:e4:73:1d:b9:96:28:
6d:b3:58:9c:38:47:35:e8:7c:1a:55:57:03:b4:c1:
4e:8f:5c:ae:b9:92:59:d2:ee:7e:9b:9c:ef:cf:96:
71:41:85:ce:ba:be:5b:59:89:7c:ba:85:6d:54:e6:
cf:a0:3b:06:48:84:32:8b:b4:c0:e3:11:b8:c0:14:
d9:06:42:f6:da:5f:ef:10:8e:9a:ab:13:bb:cd:1d:
e2:22:b1:2f:59:b2:59:0e:d0:20:0d:4f:a7:ef:a4:
25:23:00:86:5a:a0:15:18:15:8e:2d:20:c9:55:4e:
7a:7b:2d:be:49:84:69:a0:6d:b1:bb:08:24:a8:4f:
f4:f0:03:28:21:12:c5:58:78:5c:83:45:29:7a:02:
9e:28:83:05:67:28:0e:81:a0:5d:8d:77:9d:80:40:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:B5:CA:59:14:A8:BD:B6:98:19:84:F1:E9:DC:E9:D1:0A:1F:76
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:b6:48:9a:0e:2c:d3:cd:4f:b3:5d:8f:f7:e0:f3:46:72:
c1:1b:af:40:91:55:0e:8a:c1:85:50:62:28:c7:38:11:75:fd:
42:c8:64:44:b4:83:d4:7e:fd:f1:ad:c5:b7:bb:71:91:b9:9b:
8e:e7:48:4d:39:fd:8d:99:4f:ac:53:60:44:97:04:54:52:de:
6b:61:de:df:1a:4a:6d:47:64:7a:f6:45:41:6a:ff:c7:81:73:
47:73:7e:55:94:dc:92:c5:ce:59:5d:f3:a3:fa:d9:ab:b4:14:
00:57:4d:c3:5c:96:8d:cc:e8:a1:cf:c7:13:84:29:8a:6a:d9:
1c:1f:45:41:c3:40:be:4f:ae:a1:a9:28:f3:1f:da:78:7a:46:
54:03:9a:7c:17:f1:6f:49:54:0d:7f:8b:49:3b:19:ac:a5:99:
dc:4c:0a:e8:d4:cb:59:37:b9:03:49:c3:b3:ac:31:aa:b8:d9:
6a:50:3f:b4:c4:3f:81:b5:4b:48:73:74:48:e5:ed:21:d3:62:
a3:cb:5d:22:af:c7:1c:cf:f3:45:05:4d:17:50:ad:e1:7c:5c:
0c:06:37:c7:1b:ab:df:8f:5a:ae:67:92:b3:7a:3f:c7:64:58:
72:10:9c:c1:a4:0b:c9:76:78:b5:11:ba:9e:16:32:35:bc:fc:
a6:8d:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:18 2025 by rpki-client