Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: PQQKdeA+mBMub6PRFsT9j7RK1b4UICpVHXbz9X1+uVU=
Subject key identifier: 18:D9:65:F1:E6:BA:51:F9:F0:8E:8C:37:D3:19:23:F3:65:B5:5B:A6
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 01968435EA3335F6CB489C1D5FA08FCC6901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 1552
Signing time: Wed 30 Apr 2025 01:00:47 +0000
Manifest this update: Wed 30 Apr 2025 01:00:47 +0000
Manifest next update: Thu 01 May 2025 01:00:47 +0000
Files and hashes: 1: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: 91Fx4bEafjbl2z0mYKK+TGYdr9JPXa+2FgBcaV6QrLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:ea:33:35:f6:cb:48:9c:1d:5f:a0:8f:cc:69:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Apr 30 01:00:47 2025 GMT
Not After : May 1 01:00:47 2025 GMT
Subject: CN=18d965f1e6ba51f9f08e8c37d31923f365b55ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:46:0f:2c:7e:e4:a5:52:fd:c5:f8:29:c1:
d1:92:0c:74:af:3b:88:06:55:b9:50:21:fe:4e:27:
09:c7:74:00:5c:c0:8d:8c:ce:a5:db:b7:1d:84:8f:
a7:fa:0d:8c:b5:fd:6d:52:da:3d:dd:85:fa:a5:5b:
4f:82:25:7c:e2:c9:83:c8:3b:48:f4:2c:5a:fd:f5:
73:72:8f:7c:55:79:42:9a:49:21:d8:25:a1:da:f2:
87:aa:f6:0d:cc:8c:0c:d0:ee:dc:18:0f:c8:f0:02:
55:ab:40:7d:3d:8b:60:cf:ea:b9:cb:20:18:d6:d4:
9a:4c:23:45:fc:fd:1a:b5:62:58:15:7a:6a:d3:6e:
32:01:6e:4c:7b:25:0e:59:83:09:8e:b3:95:af:5e:
56:ca:6a:9c:18:2c:6f:8b:05:d8:57:78:b8:04:d9:
44:c0:cc:8f:39:86:4f:8a:4d:35:41:24:7c:0e:83:
86:02:7b:fc:1a:08:99:73:b1:18:ad:b3:25:34:6e:
fd:eb:89:a8:48:a2:2d:b7:ce:d0:8c:6b:0c:f3:a5:
9e:29:e3:a6:68:7a:2c:9e:2c:40:bc:18:c7:1b:9d:
95:d4:ea:e6:43:ef:0d:b7:c9:42:d8:27:90:13:17:
14:24:b8:26:bd:47:96:70:31:91:08:90:cf:d1:25:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:65:F1:E6:BA:51:F9:F0:8E:8C:37:D3:19:23:F3:65:B5:5B:A6
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9f:be:ab:48:2b:b5:57:96:a3:4e:d9:f0:ad:48:90:c2:83:
f6:04:30:9b:7d:41:0d:6e:93:e4:74:46:8a:d1:b2:bd:26:d5:
15:47:a4:b9:15:6d:d5:65:47:34:0e:ca:5d:04:6e:69:6a:59:
a8:ad:42:2d:06:83:25:0b:a1:52:ed:55:02:fc:9c:c0:64:e7:
68:3c:4a:d9:a2:30:06:58:ef:a7:ed:ca:6e:31:08:8a:61:1a:
0b:23:43:ce:77:0e:88:fd:7f:a2:58:2d:b9:59:8d:8b:3d:a7:
17:21:1d:bb:c8:58:33:08:dd:ee:33:bc:05:47:89:57:81:a7:
99:bd:20:f0:82:47:0e:c7:27:ff:c3:04:0a:b2:87:38:ca:ac:
18:c1:5c:64:8b:27:27:f5:84:37:c3:78:f8:58:c3:9f:c9:d9:
36:d5:d0:2a:23:7a:1a:46:9f:e9:42:59:6e:ff:5a:69:40:b9:
32:90:65:70:ac:23:91:80:6f:24:e2:cc:a6:03:e1:0e:a5:67:
49:53:3a:64:5c:5e:b5:c4:49:9c:51:f6:b4:3f:65:ba:32:9f:
af:2e:12:ac:e1:1c:c0:cd:f2:8e:a3:cd:50:94:68:da:3a:4b:
51:79:c2:5b:63:d1:92:1e:f2:20:64:b7:04:a9:6c:4b:17:cb:
09:9b:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:31:09 2025 by rpki-client