Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: hCBGVgh++ZB7LSZkMVpiO1XivOQS0MTeaq+8OBmxcoE=
Subject key identifier: 00:4C:AA:18:58:9A:19:9F:5F:94:C3:9F:8B:29:79:7F:C0:2F:5E:FF
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 01967E33C5AA67614246F1DFC6309ED1990B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0461
Signing time: Mon 28 Apr 2025 21:00:44 +0000
Manifest this update: Mon 28 Apr 2025 21:00:44 +0000
Manifest next update: Tue 29 Apr 2025 21:00:44 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: 97oYCF7lsaHuJ2CnWd0wkW8DL2zlxd4CBRvDoFFuUrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:c5:aa:67:61:42:46:f1:df:c6:30:9e:d1:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Apr 28 21:00:44 2025 GMT
Not After : Apr 29 21:00:44 2025 GMT
Subject: CN=004caa18589a199f5f94c39f8b29797fc02f5eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:0d:c0:df:41:78:8a:97:d2:fd:7a:91:85:
a4:fb:78:c7:1b:f2:30:30:7c:39:05:cf:fc:64:fd:
d5:08:82:f3:7c:bf:1b:2a:94:9f:3d:fe:27:af:61:
71:05:c9:3b:af:ef:a2:a8:2d:bc:13:c4:b0:0e:a4:
c5:04:f2:2f:b5:0b:62:52:4a:3b:1a:53:9a:24:84:
85:eb:37:33:fa:dc:8a:a4:70:e3:cd:5a:fc:92:71:
cd:66:42:af:99:1f:28:e4:a4:37:93:67:de:b9:ae:
a8:74:e7:11:12:2f:96:75:6c:5a:e8:a1:89:6d:b4:
9f:8d:e5:4e:9a:2c:45:cb:38:30:67:36:dd:d2:2c:
77:b9:1b:4e:cd:fa:52:51:7c:04:81:f5:27:10:d3:
7f:73:15:7f:c0:2e:76:df:1a:d4:e8:b1:93:59:99:
a1:ce:73:6f:8e:3e:35:a9:d6:0a:47:99:44:41:43:
ea:0e:29:a4:ed:ed:19:e2:33:61:f5:45:a0:b8:3d:
bc:76:58:a9:0f:81:0f:8e:4a:68:35:af:5f:3c:53:
51:ed:4d:e8:8c:d9:93:7e:4e:a8:83:76:a3:02:88:
21:ba:02:bf:14:81:ff:a3:6e:af:55:4f:8e:52:4a:
6c:8c:0f:8a:29:3b:5e:32:69:9b:51:14:1d:f7:92:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:AA:18:58:9A:19:9F:5F:94:C3:9F:8B:29:79:7F:C0:2F:5E:FF
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9b:10:b7:d1:6f:f1:b0:20:87:4b:15:f4:d1:f8:db:1a:0c:
eb:48:98:8e:4e:a0:fc:bf:5e:44:85:99:9f:d9:cf:cf:de:56:
9c:bb:81:65:74:bb:99:bf:95:b2:28:ef:ec:35:f5:e6:31:98:
5b:27:95:32:fc:90:a2:9d:e9:9e:48:20:15:3a:db:64:29:34:
5f:e0:55:3d:b2:a2:83:46:9d:66:fe:dd:ef:35:2c:22:95:11:
25:17:37:39:c4:97:4b:e4:3d:64:9d:d4:07:7b:cd:7b:10:f1:
67:41:f5:4b:d8:d6:7e:03:72:c6:70:49:da:76:29:d9:ef:83:
c9:37:37:c9:09:ac:a5:05:ec:86:2c:10:b0:6d:f6:fc:03:c6:
43:78:6c:b0:66:45:2f:98:9c:27:d9:0e:3e:e2:7a:12:90:ec:
e9:d1:2f:8d:9e:26:a0:e5:a2:8e:a6:58:82:13:50:12:c8:d0:
f2:2e:50:ef:7b:88:d2:dc:e5:8c:12:f8:78:35:25:2d:1a:c0:
ce:a6:7c:4a:1c:04:d0:5e:a4:df:23:e3:f7:2d:b4:8f:ab:9c:
ac:96:87:18:b8:e7:35:c8:7d:1e:fc:6c:2e:b7:67:87:92:90:
36:e3:61:24:72:5c:98:a6:fc:00:cd:bc:8a:51:4e:54:44:ad:
53:9a:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:10:19 2025 by rpki-client