Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier: BZwpdRBMoWGQCty+sVfGsH20/08asaHxoqT5Xfrw6bE=
Subject key identifier: 2B:CB:84:85:66:8D:C9:28:F1:1B:2A:FD:A0:53:7E:F0:B3:7B:98:B8
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer: /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial: 0196865B4B8195F5D444CA4ED157EAEB4793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number: 03B3
Signing time: Wed 30 Apr 2025 11:00:52 +0000
Manifest this update: Wed 30 Apr 2025 11:00:52 +0000
Manifest next update: Thu 01 May 2025 11:00:52 +0000
Files and hashes: 1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: 7dlkNNVUmVS3kEOxOgaXGVpSYUJ/px3ddJ9eLlacsKE=)
2: bdIq5nOBWGITXlJ9zml2Pg0QFbI.roa (hash: k0q9hqwpfMQ2WeyDd3IadaGT9hLdAeghDeVvZBVh6H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:4b:81:95:f5:d4:44:ca:4e:d1:57:ea:eb:47:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Validity
Not Before: Apr 30 11:00:52 2025 GMT
Not After : May 1 11:00:52 2025 GMT
Subject: CN=2bcb8485668dc928f11b2afda0537ef0b37b98b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:ca:3d:0b:a3:19:92:be:13:31:e9:10:dd:
f1:ad:d1:c1:ba:51:69:4f:40:8c:bb:61:8f:2f:48:
3b:64:ab:2b:01:36:4f:3d:0b:c9:6d:14:13:37:6b:
2c:ea:cd:60:71:41:1c:bf:ed:22:70:80:32:cf:20:
7f:ff:90:b1:cf:d3:47:d2:89:7e:7d:d2:96:43:dc:
60:92:e7:16:2e:86:1e:e0:75:4a:85:16:3d:83:e5:
3d:93:0b:2f:88:ed:10:9d:6e:38:58:50:16:7c:08:
41:0f:13:57:ea:ee:bf:e0:81:0d:09:9b:33:e5:db:
e6:57:12:de:c8:13:ef:af:eb:26:19:c2:cf:15:d4:
ef:2d:66:53:d4:ce:8e:04:bb:42:0d:ff:cf:15:7e:
fd:71:d6:d0:33:7e:39:59:9c:40:6d:1c:8f:38:ab:
8e:06:5d:57:57:fc:83:70:90:d7:32:0c:92:bc:b8:
6f:68:26:c5:97:ad:79:af:ba:24:0d:ed:86:0d:b6:
17:7b:dc:ab:87:e7:c0:a2:9b:4a:85:8c:9b:25:60:
06:0f:6e:0d:8d:28:f2:c7:64:ea:74:32:37:56:a0:
b7:65:98:ef:30:a6:08:16:2d:50:bd:5f:43:7e:b4:
6c:f4:85:40:22:35:27:ca:03:5d:f9:86:db:17:22:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:84:85:66:8D:C9:28:F1:1B:2A:FD:A0:53:7E:F0:B3:7B:98:B8
X509v3 Authority Key Identifier:
keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ab:a0:c0:e9:98:11:7c:ca:0a:a8:8a:d6:88:f2:cd:5a:58:
6d:a0:eb:ac:a0:ff:eb:a0:97:f6:a2:e8:77:c0:4f:21:0b:a7:
d0:0a:11:65:0f:b3:f2:dd:c0:73:16:af:57:49:49:81:50:a6:
22:b2:40:79:3b:ff:e2:cd:c0:4a:0f:59:d4:97:24:f6:18:d8:
c2:6c:b6:f0:db:35:b5:28:fc:f8:59:98:97:ae:82:75:e2:56:
de:2e:11:fb:0b:0b:05:af:0b:bb:84:48:1c:87:c3:b8:ed:1b:
19:f2:5f:33:9e:26:e1:f8:75:b9:a6:b6:c0:36:0c:66:ec:d0:
0d:e3:ab:8a:b0:0d:d2:06:59:39:b0:62:d3:b1:a1:8b:f6:12:
9b:43:b3:de:41:f6:7e:df:5d:ff:7d:54:98:a7:3a:55:24:94:
6e:99:fb:83:84:23:e7:77:7a:f0:69:c3:3b:a7:96:9d:38:5a:
9d:3b:39:c8:19:b5:57:9e:fc:e5:c7:8e:8b:71:24:b2:84:60:
cb:da:cb:1f:3b:02:32:3f:16:93:f6:2f:c4:8f:c2:fb:97:34:
94:15:06:6b:10:71:f9:91:40:80:63:14:90:ad:7a:78:9a:c8:
50:e4:e5:bb:c6:a3:fc:c2:71:cc:bd:81:fe:59:2c:ba:e0:0d:
49:68:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:46:58 2025 by rpki-client