Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: qlxLxWMVSfcJraYe5hSfXt+2AAdcOB2liM54hab2fzM=
Subject key identifier: AC:4B:BF:15:6C:6C:74:84:95:86:4D:68:B0:5B:7E:CF:1B:6B:08:8E
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 0196794405F58FFD1996F353395F1A5C97D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 14E1
Signing time: Sun 27 Apr 2025 22:00:23 +0000
Manifest this update: Sun 27 Apr 2025 22:00:23 +0000
Manifest next update: Mon 28 Apr 2025 22:00:23 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: RYu0aRQGeritxyZBFOm7pmyDcNnn93FXR5PaqlFMkec=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:05:f5:8f:fd:19:96:f3:53:39:5f:1a:5c:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Apr 27 22:00:23 2025 GMT
Not After : Apr 28 22:00:23 2025 GMT
Subject: CN=ac4bbf156c6c748495864d68b05b7ecf1b6b088e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:cb:85:2f:a6:30:c2:47:e6:8c:dd:a6:6f:
c6:ac:12:c5:69:ef:b2:f1:03:c8:38:cf:a0:6c:ee:
5f:67:19:74:fe:0f:33:ba:99:79:ac:5e:cf:95:7c:
28:13:1b:89:a0:22:f8:6d:e3:28:b4:e3:3d:0b:92:
49:9a:ff:59:cf:c2:0f:ce:a9:56:40:d4:56:b7:35:
d3:35:69:e1:e9:58:e2:e3:67:a9:55:26:da:de:3e:
30:95:81:3b:16:94:57:dc:cc:92:e9:3d:0a:ac:fe:
59:3b:69:df:0d:2f:4c:90:57:c6:d7:b2:18:d2:75:
ea:78:07:b9:72:92:30:4d:1d:ec:26:57:cc:28:24:
fe:6e:f9:c7:36:7c:f2:89:f3:ec:12:1c:6a:12:00:
ca:06:fa:b5:b3:5b:44:a8:ad:91:12:66:47:df:74:
2b:bb:08:fc:19:af:59:92:0b:52:a3:75:ba:65:c3:
a2:46:02:3e:69:88:bb:ec:ed:32:1f:1d:b8:45:40:
0c:96:d3:b6:76:55:a6:24:d3:7c:5e:28:2e:50:63:
9f:ee:83:3c:08:e8:1d:46:15:e8:7f:f0:63:0b:3d:
5c:56:39:9d:e0:5a:52:78:a7:00:ed:d5:e7:2f:01:
d1:78:d8:9d:8a:44:82:bb:b7:69:4f:86:95:d1:ad:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:BF:15:6C:6C:74:84:95:86:4D:68:B0:5B:7E:CF:1B:6B:08:8E
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0f:46:a1:e4:00:30:1f:95:61:3f:37:f3:9f:36:86:d2:6a:
95:85:a2:30:08:cf:7d:5d:3d:92:e3:16:7d:c6:97:c2:d3:01:
d4:e2:67:a0:c3:3f:91:5f:0d:7b:ea:0e:9c:35:91:87:e9:41:
8a:e7:78:a9:89:35:87:61:ca:e7:62:0c:c8:9b:3a:4c:1c:9e:
9d:9f:2d:9d:4d:a2:c1:e9:20:f8:07:68:34:8b:df:02:17:64:
74:48:a1:86:4a:74:ce:3c:71:71:1e:dd:b4:f1:64:76:c4:63:
db:a0:bc:8f:00:9c:13:c3:49:b6:53:5b:5f:72:9b:b8:f8:f2:
b5:d2:6a:d3:0e:93:be:7b:13:2f:fd:69:fe:ed:f8:01:f3:ac:
92:0c:dd:93:2f:6c:be:2f:0e:0a:84:fc:9a:3f:e9:ef:86:8f:
4a:b4:b3:66:f4:6b:e1:fa:8e:95:e7:79:ba:23:02:be:51:8a:
9b:3e:d6:c7:87:1e:18:46:c8:d4:81:99:97:5a:7a:cd:a7:ea:
70:0c:20:82:39:49:f3:cc:c6:7d:0d:51:c8:40:a7:b5:74:59:
50:6f:b2:01:d0:6d:62:8c:95:3e:45:b7:09:31:e8:f9:c7:ec:
b2:85:07:b2:97:f4:e8:78:e9:15:f0:ce:a7:6f:4b:85:2b:59:
f8:5e:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:06 2025 by rpki-client