Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: 5cr0GJjXua5nzNIiWZPsmfDU7xEjNS/24QNharruVCg=
Subject key identifier: 52:04:75:40:20:C7:3D:E7:71:26:B8:95:39:D1:A8:2D:18:3B:61:6E
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019677FAFF24F61C302DC32108AECBAB787B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0E69
Signing time: Sun 27 Apr 2025 16:01:00 +0000
Manifest this update: Sun 27 Apr 2025 16:01:00 +0000
Manifest next update: Mon 28 Apr 2025 16:01:00 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: vGx6y0rwdVH9JWCSuF8+pRARCEsA4DKajg+B9vNq1Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:ff:24:f6:1c:30:2d:c3:21:08:ae:cb:ab:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Apr 27 16:01:00 2025 GMT
Not After : Apr 28 16:01:00 2025 GMT
Subject: CN=5204754020c73de77126b89539d1a82d183b616e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:3e:16:a2:43:ad:77:b9:24:97:eb:e5:cb:
17:e9:5b:f1:6d:e1:86:8a:78:c4:c8:8a:8e:08:eb:
7a:6b:66:97:ef:fb:df:54:7f:34:14:14:3a:6d:5e:
af:04:29:25:13:de:7b:e0:21:61:3a:c7:fe:f5:55:
fa:05:ef:f3:b9:ef:14:48:fa:3d:99:36:8b:98:05:
cc:32:aa:e1:1a:76:42:c7:cf:5e:10:dd:5f:49:6f:
20:93:d8:e5:f0:45:0e:cd:5a:27:ea:f2:dd:10:de:
9a:22:b0:a7:22:94:32:7f:ce:2c:97:ab:5b:b7:4f:
23:65:82:bb:13:6f:fb:bb:8b:62:70:7a:10:05:e6:
95:9b:83:70:f6:5b:51:d6:7b:3b:d4:1f:be:43:fb:
d5:ac:c8:42:59:00:22:2f:ac:7b:fb:cc:c9:24:e9:
ee:70:90:e2:d3:d8:e6:03:84:fe:0d:13:31:6c:5e:
65:f9:08:c9:2b:68:c6:d4:dc:97:c2:8a:e7:93:13:
d6:dc:2e:9f:0e:aa:56:d9:ff:49:26:14:e3:a0:0b:
03:c0:ed:08:51:78:6d:9a:e2:fc:7c:5b:3a:74:3e:
7d:38:d8:64:cd:d2:b3:16:14:c6:93:e7:f5:f0:90:
ea:e6:a4:69:ed:0e:1a:60:fc:4f:a8:d6:53:f0:37:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:75:40:20:C7:3D:E7:71:26:B8:95:39:D1:A8:2D:18:3B:61:6E
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c0:cc:8e:a2:f4:f7:fd:54:cc:bd:5e:4d:97:26:b3:70:17:
53:74:99:68:e7:f7:a5:85:8e:8f:fc:1b:9c:64:1e:a3:c7:ca:
b4:84:90:cd:9d:fe:29:d1:83:79:dd:68:bb:15:2e:42:2d:c1:
be:93:f9:8c:c0:a3:16:97:bc:fb:dc:f7:c7:a6:db:98:bd:94:
fb:b8:68:da:51:ad:74:ca:2d:65:f5:07:d7:37:da:1c:72:3a:
4d:58:d7:f7:9c:25:ea:a7:4a:23:b6:07:b1:4a:8c:f5:3d:bd:
84:8d:fd:29:b1:32:40:83:50:c1:07:a9:bb:48:cc:09:62:05:
fe:a6:6c:d2:96:84:95:2e:a2:cc:85:e5:ba:ba:05:04:96:da:
7e:88:1f:49:30:bc:cb:a5:f8:a4:96:11:2b:5b:11:d2:28:fb:
fc:46:4c:52:75:94:73:18:26:b2:c2:ee:55:b5:2f:fa:cf:43:
9b:4b:68:04:3d:98:5b:69:39:ec:a8:e2:5a:cb:2a:db:ed:39:
c4:f2:1d:68:c1:11:ea:82:db:a3:b0:fc:fe:44:ea:7c:a9:d7:
d4:42:82:c8:e0:7e:ac:f4:7e:15:17:69:84:ab:fb:c4:fe:28:
fc:42:e1:d0:62:c2:bc:4d:29:fd:36:a8:53:c6:a2:99:6f:e0:
a3:f6:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:53 2025 by rpki-client