Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: Ye3t6Xxqip0JPS8GI81FExt8kA6wwuiv/dyR4u45r7A=
Subject key identifier: AD:19:7B:5C:D8:0C:0B:82:39:BD:65:B0:A4:7B:26:07:41:2D:EA:D1
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 01968DA6EB8ABF5EAC81224C5988B2D5D085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 08DB
Signing time: Thu 01 May 2025 21:00:48 +0000
Manifest this update: Thu 01 May 2025 21:00:48 +0000
Manifest next update: Fri 02 May 2025 21:00:48 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: PQYDY02lXf0U1N2xjfxM4yiqG9hdpjMg8xoV9j8MEFw=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:eb:8a:bf:5e:ac:81:22:4c:59:88:b2:d5:d0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: May 1 21:00:48 2025 GMT
Not After : May 2 21:00:48 2025 GMT
Subject: CN=ad197b5cd80c0b8239bd65b0a47b2607412dead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:80:8e:cc:cf:39:71:2f:42:f6:90:3e:60:
dd:a5:57:0f:db:28:57:38:1d:1d:ae:7e:02:d2:0d:
7e:69:1c:69:4e:18:96:8a:6d:45:ed:aa:bd:19:39:
60:c1:0c:a9:d3:89:fc:3f:f4:e1:ec:83:d4:97:b1:
88:2d:04:05:9e:85:11:d3:8d:7d:b7:db:bf:13:51:
f1:27:b3:1a:6f:cd:08:4c:12:c7:e7:c7:0f:5d:16:
2c:00:b9:74:32:99:0d:0b:7c:0a:75:c5:8f:51:89:
8b:ca:00:84:b3:d4:8b:7d:01:2a:66:61:3f:1f:35:
81:89:8e:ec:7f:2d:12:96:a7:e2:01:0d:87:3e:44:
91:a6:c4:04:fd:e9:53:b1:13:ab:fd:ef:f8:97:28:
7f:45:27:d3:11:c4:bf:d1:a4:cc:7f:7c:f8:15:7e:
fd:78:83:ca:f4:57:2e:41:93:e6:cf:ce:c7:1d:2d:
ab:62:94:29:bd:33:7c:8d:c2:a4:9b:8e:bb:28:c1:
7d:e3:74:31:2b:da:ab:23:67:93:c4:08:6e:88:dc:
69:cf:a6:e0:55:6b:c5:7c:0c:eb:c0:70:cb:59:82:
2a:83:2e:0f:12:0f:d2:17:49:23:4b:a8:00:dc:32:
f5:08:44:86:c0:84:2c:7d:fb:0c:27:46:c6:d9:af:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:7B:5C:D8:0C:0B:82:39:BD:65:B0:A4:7B:26:07:41:2D:EA:D1
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:69:9a:82:31:e2:94:d7:64:c2:bb:e1:5d:90:35:d7:cf:e4:
14:3e:bd:11:d0:be:fd:fe:a3:b9:ee:ab:ef:8b:46:d6:59:41:
b4:c6:2f:a1:ef:0a:58:b9:e8:e3:0d:55:56:01:b5:f6:cc:bb:
5f:c3:7f:b9:70:d6:52:ab:4f:f8:29:8f:d1:37:85:f1:fa:fc:
79:0c:40:ba:08:29:88:be:07:6e:bc:95:42:d0:03:da:15:14:
f7:b9:bb:86:6c:ff:f7:1a:00:d0:d6:76:b7:5f:1e:90:11:1c:
49:1e:de:30:f1:d0:2d:c3:0b:54:6f:3b:4f:3f:f5:86:46:36:
d2:56:db:7d:3c:ba:82:d2:11:38:e3:41:be:cf:1c:55:89:63:
7b:a7:8e:24:59:e2:83:74:5b:b2:3e:5e:8f:6c:48:ef:07:1c:
64:03:67:6a:2a:fb:12:a0:ea:a3:44:cf:eb:ef:e1:7b:43:2b:
c9:cc:75:78:75:b9:92:7f:45:7a:11:3b:f1:b8:0f:25:0e:9c:
39:65:9d:12:9c:ee:d6:fa:3f:5b:30:59:d7:37:f2:0e:0f:96:
10:a1:bd:4b:02:aa:a5:bd:d1:02:72:f3:be:21:f3:44:29:d6:
41:88:f6:42:e1:85:4b:9b:43:1c:c8:b1:77:76:ad:aa:42:77:
97:f2:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:08:39 2025 by rpki-client