Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: R2v6xQAVzHXBqaERnmywO1WvfdLk8ySOBbHUNHEm6NQ=
Subject key identifier: 8E:6A:7D:F5:B9:0B:C9:BC:F0:3E:DE:2D:53:52:3B:95:01:9F:48:A2
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019672D4221ECC13BD54C2D7725CB7DCDC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 0E5D
Signing time: Sat 26 Apr 2025 16:00:27 +0000
Manifest this update: Sat 26 Apr 2025 16:00:27 +0000
Manifest next update: Sun 27 Apr 2025 16:00:27 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: 04EkUG56EQ2J0rVQAis6dh+GZ4HEdGly19od4a7//DA=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:22:1e:cc:13:bd:54:c2:d7:72:5c:b7:dc:dc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Apr 26 16:00:27 2025 GMT
Not After : Apr 27 16:00:27 2025 GMT
Subject: CN=8e6a7df5b90bc9bcf03ede2d53523b95019f48a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:ba:96:f7:fd:f1:31:54:1d:e2:35:6f:c9:
1f:51:b9:76:aa:04:a4:2e:8d:7c:01:0b:25:77:a3:
8a:2b:ec:45:c4:63:f0:b9:c1:04:55:f6:da:fc:08:
a2:4d:b3:db:13:4a:70:6d:ce:b3:75:84:13:5d:32:
78:f4:2e:b1:0f:56:ea:a2:d8:ad:dd:af:dd:f0:e1:
5b:be:f2:1e:08:d7:0c:a7:a6:b5:05:ba:6b:df:aa:
fe:ea:5f:3f:a0:2c:23:e5:d0:d2:0e:d6:a4:84:df:
4f:cc:c6:f9:4b:f9:c7:3e:75:c6:15:7a:b6:68:a8:
86:19:17:1b:01:b2:9d:86:e4:d1:d6:d3:ab:ff:fc:
f1:ca:09:a9:4e:3f:be:ef:cd:24:89:44:1d:5b:8b:
4b:6b:5f:6f:29:84:c6:c2:da:52:55:dd:2e:82:6c:
5c:bf:70:76:79:10:e5:14:67:e5:d8:d6:ef:a9:3e:
4a:32:62:e0:f5:35:06:d4:c3:5a:9e:79:dc:20:ab:
c9:6a:7f:ef:74:f1:27:b2:f6:b8:2c:4d:64:d6:4f:
6d:24:73:90:b1:56:46:b0:da:c3:d8:c9:9c:91:45:
d1:81:ee:2a:d0:7d:85:7f:86:2c:a9:d6:cd:70:5c:
e0:0f:79:f9:00:6d:eb:27:06:9e:de:52:84:b1:55:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:7D:F5:B9:0B:C9:BC:F0:3E:DE:2D:53:52:3B:95:01:9F:48:A2
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:34:37:e8:b6:e2:f1:98:c3:2f:00:c5:d7:fa:fa:d0:81:
ef:ff:79:17:48:4e:ad:ac:37:64:3d:3c:55:0d:e9:9c:8c:c3:
de:12:95:68:be:c3:7b:ff:d9:fe:7a:24:ab:60:d3:bf:59:ba:
a7:f6:b8:a9:75:db:cc:1e:90:53:62:0d:cf:7c:fc:36:24:7a:
3d:39:f6:22:cd:7a:8c:72:b9:b5:e3:b4:ba:e5:0e:e4:74:9b:
88:06:71:ef:c2:52:cd:d5:99:8b:dd:67:50:6a:3f:52:44:1a:
fb:57:f3:86:ec:8d:cf:8b:00:41:ab:04:9d:84:50:ba:46:47:
25:70:04:6d:d2:8e:7a:82:48:28:49:f2:09:c4:1e:28:95:a6:
1f:7c:ea:65:2b:65:3b:85:a6:79:51:2f:c6:20:88:26:6f:e8:
ff:e6:7c:f5:5a:99:ad:b7:f8:32:29:11:37:c7:00:be:5f:be:
b5:73:8d:fb:f7:45:74:a9:90:4a:0c:aa:a5:4a:f9:ce:d0:be:
cd:e5:e8:30:9d:78:a7:f4:b8:dc:9d:6e:3f:6a:44:39:09:80:
f3:64:2c:a9:82:3b:1a:cd:87:87:07:2f:3c:86:7a:1f:cc:01:
ea:6a:4c:77:4f:e6:da:fe:1a:b5:25:c8:2e:0a:55:11:ee:06:
15:da:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:33 2025 by rpki-client