Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: yJAspovoQNyxDCUYc7v2w9+niIN+D8yU/3oJFSCnhLs=
Subject key identifier: 91:89:B4:47:4F:19:4E:A0:02:93:32:AA:55:B1:C6:11:7E:54:CC:D7
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019691BAD19F46F0E47C3CF388FD86074A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 16:01:01 +0000
Manifest this update: Fri 02 May 2025 16:01:01 +0000
Manifest next update: Sat 03 May 2025 16:01:01 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: /kxvPGPWY4T1NxTtrITbymh3I0AnkcH//9PbuWNCafQ=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:ba:d1:9f:46:f0:e4:7c:3c:f3:88:fd:86:07:4a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: May 2 16:01:01 2025 GMT
Not After : May 3 16:01:01 2025 GMT
Subject: CN=9189b4474f194ea0029332aa55b1c6117e54ccd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:45:59:46:db:de:b8:c2:b9:cc:e9:d6:4c:
30:88:fb:7f:83:52:a9:76:ca:40:b6:30:be:9e:7c:
67:d6:fb:87:4e:e5:58:32:e6:c4:a8:ef:7c:ef:0a:
78:79:c5:1b:b4:6b:cf:1b:0f:a0:2c:ed:55:ec:f8:
79:b9:68:c8:5e:09:1b:75:2f:44:5c:7d:3e:c8:5c:
bd:a1:53:88:cd:46:d6:36:ef:c2:42:ea:41:5b:e9:
c1:3c:54:12:f7:1d:f0:94:b3:c2:d5:4e:83:a7:1c:
6e:59:87:7d:6d:8b:d6:1b:fb:66:f7:1d:eb:48:c8:
9a:dd:3c:84:11:28:a9:9b:f0:71:76:0e:29:48:ab:
7b:4f:fe:3d:aa:b3:34:ec:97:ff:50:3e:ac:7a:af:
6c:72:53:54:1f:50:42:a1:5a:36:e2:ff:39:ad:a7:
4b:93:0c:e4:dc:23:0d:25:7c:fe:55:27:06:c6:42:
7b:a2:71:b2:5c:57:08:73:74:d5:74:d4:f1:46:2f:
e3:8e:0b:92:11:54:0a:82:83:04:36:06:92:42:92:
e9:c2:2d:be:30:02:e3:39:a7:e8:73:b7:12:97:91:
33:b0:ca:78:86:f2:5f:ad:8a:c5:97:b5:9d:3f:2c:
b9:43:59:c9:6c:ef:1f:7d:fc:ff:ea:e6:d6:24:53:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:B4:47:4F:19:4E:A0:02:93:32:AA:55:B1:C6:11:7E:54:CC:D7
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:55:7e:36:ee:fc:fb:92:36:7e:c3:4f:8f:b4:69:da:cb:ae:
9d:fe:eb:73:c0:40:e0:37:7d:50:de:db:0c:16:42:67:18:e3:
fe:fb:e9:84:66:a5:93:48:2b:49:e7:ac:6a:b3:e1:26:5d:02:
fb:09:ab:2b:ce:a5:29:91:0f:b7:84:74:2a:64:da:65:48:d1:
bd:9d:1e:80:0d:9c:72:40:bf:45:fa:ba:f1:3c:82:f9:2d:b4:
d0:19:b2:8b:0c:3f:a6:74:e7:96:73:9a:9f:16:f0:ad:59:ca:
87:88:77:7c:8e:2f:d5:32:88:ae:a6:2e:21:00:e9:34:dc:05:
9b:99:9e:e3:cc:95:48:19:ec:cf:85:c7:df:4b:e9:7e:05:f8:
8c:73:dd:70:db:5a:fa:3c:07:48:96:07:f5:67:f9:d0:b9:25:
e7:73:11:0e:67:16:d1:f0:e9:6a:38:0f:2e:58:ca:2e:11:b5:
7d:bd:47:a0:b0:1c:22:85:3a:b3:00:e2:ba:95:7e:ee:e5:6f:
ea:65:a4:5b:8f:8c:29:56:66:b3:93:40:2f:0a:75:12:b3:dd:
80:08:85:2f:2d:f9:35:49:3a:be:13:f8:ca:40:d5:a9:99:13:
9b:20:5e:8d:d5:6b:15:d8:96:a7:5a:48:d6:fb:f2:50:a2:e1:
6c:ae:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:59:50 2025 by rpki-client