Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: EbElUJWVBJ9I8CLMswYVL8IbZkc8z0MSWnFNzBnIwzk=
Subject key identifier: DF:8C:E0:61:1D:73:54:49:29:96:53:C6:5C:C7:20:E1:7D:03:94:11
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019692962389292ABA4B8A9F476A0096C620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 149C
Signing time: Fri 02 May 2025 20:00:35 +0000
Manifest this update: Fri 02 May 2025 20:00:35 +0000
Manifest next update: Sat 03 May 2025 20:00:35 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: Gbh0cTnIe43jqK03yLg/kGKTM212W55cwKQrnauOiQc=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:96:23:89:29:2a:ba:4b:8a:9f:47:6a:00:96:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: May 2 20:00:35 2025 GMT
Not After : May 3 20:00:35 2025 GMT
Subject: CN=df8ce0611d735449299653c65cc720e17d039411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:68:d6:c8:ce:63:a3:be:2f:50:12:c4:1c:
b3:47:09:ba:f6:f7:94:9f:74:b6:e7:44:84:41:f6:
11:05:60:bd:d7:49:27:dd:ff:45:f4:80:76:8f:7d:
c9:40:1c:78:1a:02:51:fd:7d:ca:56:d2:70:a9:4e:
33:01:5e:55:42:4d:7f:ab:7a:7f:88:86:29:a0:6f:
75:94:f5:87:67:1f:19:a4:b0:f9:0b:2c:ad:8c:5b:
ad:3b:6a:20:c8:eb:7b:ed:6a:84:9e:e4:6d:0e:44:
d7:94:62:38:0c:23:4f:a7:21:11:c5:99:cc:c1:08:
1e:14:b3:14:13:e4:35:5a:3e:85:c1:f4:8d:60:17:
2b:f1:82:84:61:4a:49:f5:ae:89:5f:83:6d:a7:cf:
6e:11:90:41:cd:d4:3d:f0:31:17:10:57:c1:1f:14:
30:68:d5:9d:0b:f2:f6:0e:d7:a0:1f:31:ba:46:92:
0d:ce:e5:2c:a4:dd:61:c9:11:67:de:5d:7a:8e:22:
25:88:57:48:e9:b9:8a:a3:b7:5f:4d:fc:39:0f:d7:
1b:c3:86:b8:8a:85:dd:8e:3e:2f:bf:d2:d3:06:ca:
8b:dd:e0:bd:e7:63:1d:38:c9:2c:a1:d2:71:4e:57:
47:47:2f:d9:1a:65:d8:08:e7:d0:2f:68:0a:7f:43:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:E0:61:1D:73:54:49:29:96:53:C6:5C:C7:20:E1:7D:03:94:11
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:56:0f:68:90:12:39:6e:6d:ce:6a:97:52:8d:08:e8:f6:7d:
7f:cc:3e:a5:e4:fa:96:ec:e4:88:98:ef:6f:ca:9e:84:27:b3:
3e:24:6c:ae:c2:48:85:f3:d9:df:26:ef:ff:a4:b6:a6:5e:d1:
29:d3:a2:bf:5c:9a:14:e5:37:50:1a:d0:6c:ae:37:4f:4e:87:
79:51:33:18:ca:b4:f6:e6:84:d8:9f:a3:1a:de:75:ae:d4:69:
cf:bf:7d:9c:64:9e:47:06:8c:64:ca:d1:1e:ef:0d:71:6a:2d:
de:71:7b:b5:b8:99:4f:02:8a:d2:20:2f:85:2d:20:21:cd:21:
cd:b1:73:c3:d1:d8:da:27:c5:a7:f5:4f:32:d3:b0:bb:f6:d6:
0b:e4:c6:b4:45:6d:92:c1:f9:33:11:3f:48:59:05:23:e7:16:
19:55:fc:b7:48:7d:a1:56:79:19:fc:3f:05:90:60:7c:bc:a6:
b9:21:a4:83:fb:d3:81:03:6f:11:ce:45:b0:70:67:30:09:48:
99:1a:7a:aa:91:ae:28:3f:75:dd:df:dd:7a:1b:8f:ac:04:73:
09:91:ea:ca:49:65:6a:79:cd:62:42:b8:d4:b0:ad:7f:82:56:
4d:5a:44:96:2c:6c:64:95:29:87:35:08:f0:68:f4:7c:a2:48:
7b:97:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:25:57 2025 by rpki-client