Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: 4+CRyfNuWYKVpDzaKttzOnLsZj+znpfhV8xjU2jzLXU=
Subject key identifier: CD:86:24:0F:27:20:6A:09:7C:BE:A9:59:9B:FC:C8:98:C2:99:BE:AC
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 01967FEAE4989D74541AE1092C8F6F69291C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0685
Signing time: Tue 29 Apr 2025 05:00:22 +0000
Manifest this update: Tue 29 Apr 2025 05:00:22 +0000
Manifest next update: Wed 30 Apr 2025 05:00:22 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: EoT4TzGwbtzqyuArFNBo/aVZu8qhsn7hwpuHHvyNtIQ=)
2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:e4:98:9d:74:54:1a:e1:09:2c:8f:6f:69:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Apr 29 05:00:22 2025 GMT
Not After : Apr 30 05:00:22 2025 GMT
Subject: CN=cd86240f27206a097cbea9599bfcc898c299beac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:7b:85:53:c0:59:a1:c4:39:2e:c6:de:4c:
8d:b1:65:da:a1:f1:c5:a4:ff:1e:23:5f:ad:08:c4:
5b:66:95:a7:00:0b:0c:5b:1e:c1:02:0c:94:29:4f:
a4:d0:1b:40:c2:97:77:c8:70:95:21:b1:07:54:9e:
02:b5:10:f9:a1:71:8e:2f:20:d2:ee:c7:23:1c:65:
81:c8:2a:ea:e2:62:03:80:de:18:a2:7d:a5:d4:85:
c6:7b:da:ff:21:cc:c1:fb:eb:7f:8a:1b:48:39:1f:
e6:fe:9c:64:26:9c:24:6b:15:ed:20:d8:08:06:10:
17:0e:d4:bd:32:9e:b2:86:9b:e4:8f:d5:50:41:54:
35:c6:a2:71:00:cf:8b:dd:46:58:86:f2:0b:52:f5:
e8:b7:fc:2e:f9:b6:12:27:51:52:fb:6b:a8:ff:13:
75:6b:ba:58:d0:89:66:27:aa:85:e0:7a:9d:48:51:
62:b0:ec:ed:2f:67:e9:77:30:3d:ab:47:da:51:ad:
04:f0:09:02:03:58:36:39:9e:e4:c1:f1:50:41:fd:
8c:29:75:d0:5b:59:25:b3:51:4a:02:e5:e6:4a:3f:
69:8a:2a:71:2d:28:0b:62:9d:5e:d5:18:99:89:ce:
48:48:b1:ab:48:91:32:fd:b5:c6:7f:f7:f7:1d:eb:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:24:0F:27:20:6A:09:7C:BE:A9:59:9B:FC:C8:98:C2:99:BE:AC
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b6:70:4b:89:7c:78:3b:8b:f5:e2:25:52:99:81:7c:d9:c0:
64:4e:56:90:9a:a8:27:ae:07:79:d6:aa:cd:85:b6:81:ea:97:
0d:0d:61:7e:78:92:6b:60:f5:19:73:6a:59:21:a3:05:8a:ed:
21:a0:3d:a0:c4:d2:58:34:05:9e:5b:60:32:77:8b:2c:3b:9b:
2a:31:06:34:70:0d:c6:ac:89:0c:9f:fd:45:64:21:c9:48:26:
d6:55:a5:83:c9:5b:d7:8a:40:97:55:be:33:e1:a2:cc:8e:fb:
09:12:fa:a0:2e:b6:cb:a9:0d:a5:5e:b5:32:ee:da:b0:73:f9:
63:fd:03:44:ef:11:1e:17:6a:33:26:7e:04:14:7c:72:e5:81:
ff:31:7c:87:f8:74:59:70:c0:8d:7f:70:ce:5c:95:f7:3a:5e:
35:cd:73:17:28:4d:28:80:66:fa:31:f0:4b:18:c7:cb:88:7a:
cc:2d:ea:93:fd:a4:de:c6:f4:ad:ea:20:b0:32:c9:35:5a:b0:
a8:12:0a:de:4e:c6:d3:55:14:46:79:b8:7a:be:81:6c:79:f4:
77:0c:01:f6:c3:21:90:d6:d6:b3:ba:37:a9:4b:97:18:5d:d9:
00:bf:b5:d9:d7:3c:48:e4:ac:79:2e:4d:e7:3f:cd:be:16:ce:
99:86:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:15:32 2025 by rpki-client