Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: OPYSKlfsa4r7vW6xXqndYcXZ6NOU5uPUlfzuf1PRJ4I=
Subject key identifier: 07:FC:A3:13:01:DD:8D:32:6F:C3:BD:CC:36:78:DE:91:A7:30:8E:7A
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 019686FFFC9BDB39D79317D70D235ECC9A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0AEB
Signing time: Wed 30 Apr 2025 14:00:45 +0000
Manifest this update: Wed 30 Apr 2025 14:00:45 +0000
Manifest next update: Thu 01 May 2025 14:00:45 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: o3cLDC+0A9t5s/meQG89ZPetkPFysuaTKvC1/pMm5KY=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:fc:9b:db:39:d7:93:17:d7:0d:23:5e:cc:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Apr 30 14:00:45 2025 GMT
Not After : May 1 14:00:45 2025 GMT
Subject: CN=07fca31301dd8d326fc3bdcc3678de91a7308e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:38:50:e9:eb:f3:20:ec:92:f5:5f:ab:93:
75:70:a8:c7:90:52:4b:e3:0a:33:a7:a4:43:b2:ea:
35:a6:89:d8:2f:1d:4e:49:a0:e8:dc:78:70:1d:49:
a5:98:2d:63:0e:6f:a6:1f:a2:4f:90:ef:38:57:2d:
ea:b1:c1:65:ad:f9:d0:a3:96:c5:58:1d:b4:25:30:
da:f7:af:3f:00:cb:14:ac:79:36:3f:c4:ea:3f:f7:
5d:dd:55:bd:06:32:e8:c1:57:8c:c3:4b:d7:8d:c5:
89:31:78:c8:31:fe:77:15:fc:35:86:3a:6d:35:5a:
5e:33:8c:12:eb:bf:63:23:f4:8f:04:18:ad:24:3a:
a8:bd:b1:40:c4:fe:68:1e:f7:ac:f4:ae:c8:f7:e6:
a8:fa:e5:9a:ed:75:94:99:e9:b5:0e:3c:e7:36:48:
51:e8:20:60:a7:e1:18:3b:1e:c6:89:6d:f9:62:a7:
06:3a:35:84:32:07:59:c7:9c:6f:c0:f3:26:91:fd:
41:21:b7:6d:2c:cf:1d:29:d8:31:5d:97:c0:a3:4f:
e2:f4:4a:25:2c:d4:70:23:c9:e5:40:35:6c:ce:39:
b3:11:c2:9c:a9:13:52:f1:18:e8:28:f4:15:ee:70:
8d:85:55:cc:db:db:cf:5d:9d:35:97:e2:ef:7c:d9:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:A3:13:01:DD:8D:32:6F:C3:BD:CC:36:78:DE:91:A7:30:8E:7A
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:74:69:9b:3e:3d:dd:1a:25:0a:ae:06:4d:00:0f:64:1d:b3:
33:bb:e4:14:9c:e9:f9:95:0e:c2:41:04:9a:bb:cb:fd:d6:d8:
6b:f9:5a:a1:a8:bf:01:15:bc:88:fe:e9:db:b0:e0:dd:55:ad:
81:ac:49:24:f0:fd:3e:fd:a7:d6:92:bb:40:c0:30:8d:f1:b4:
39:3d:b0:9c:60:f7:e9:7a:e1:ac:48:da:2c:71:23:da:4e:4b:
23:13:8f:ac:cb:6f:7c:75:79:f6:fb:10:ef:95:31:f4:c1:80:
73:d3:64:c5:9a:13:75:22:39:d9:e7:1b:c1:ad:4f:70:92:86:
b5:5a:84:eb:3e:be:16:41:66:4a:9a:f4:2c:54:09:58:eb:50:
36:9d:86:65:8d:7a:24:d4:c4:8d:e4:f4:da:83:e4:22:dd:03:
a1:9d:08:33:7a:52:dc:c0:e9:c1:72:61:97:a1:df:87:74:8f:
6a:e5:45:b1:95:0b:b2:4c:48:f7:b7:9c:3c:c0:23:44:51:0d:
e5:07:50:a7:02:f0:ea:da:2c:0a:33:f2:3d:e5:b6:dd:3f:34:
fe:75:05:4d:11:3f:e6:c4:82:ea:b0:8f:c9:2a:55:75:d9:7d:
3e:40:83:a4:6e:bb:e3:87:7b:79:95:85:b1:f0:f1:e9:51:eb:
b1:e3:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:55:47 2025 by rpki-client