Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier: jSSoMWvoTXP5iZEfccscD70rxRNfpfwMzPBcqKMX+Og=
Subject key identifier: AA:64:A7:53:70:32:D3:D6:3F:86:34:68:33:DA:3D:FF:74:DE:99:56
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 0196899302A827A52C814BAFEDF7005DE99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number: 0A22
Signing time: Thu 01 May 2025 02:00:35 +0000
Manifest this update: Thu 01 May 2025 02:00:35 +0000
Manifest next update: Fri 02 May 2025 02:00:35 +0000
Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: uI2kS9h5zz6aMXz7a3yolB5KOvILc892y7mKtSX6mVM=)
2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:93:02:a8:27:a5:2c:81:4b:af:ed:f7:00:5d:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: May 1 02:00:35 2025 GMT
Not After : May 2 02:00:35 2025 GMT
Subject: CN=aa64a7537032d3d63f86346833da3dff74de9956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:d1:40:5e:fa:59:1b:6e:37:8a:52:e2:27:
b3:29:97:c2:b0:8d:32:a8:0b:73:2a:22:b8:6d:af:
d2:3d:bd:b7:46:35:3a:a7:d9:c7:b1:c7:86:ee:30:
b7:c8:6f:ae:55:f0:b4:7d:f7:27:0c:bf:62:63:ad:
db:77:6f:24:a1:d2:36:e6:26:7d:d4:3d:c3:d8:55:
0d:4e:f9:23:a1:86:23:19:0f:11:52:a3:07:25:31:
8b:9f:ca:04:72:e9:77:f9:b2:b3:3b:75:b0:f7:b4:
69:4c:3e:8c:ef:14:0b:47:54:ed:96:ca:35:76:be:
72:c1:97:24:1a:39:b6:46:aa:85:61:3f:2e:1c:29:
b8:fe:5d:bb:19:10:0c:cc:3f:d2:c6:eb:e6:37:60:
68:0b:f5:9d:68:4d:80:88:ca:f3:26:7c:64:d6:94:
04:c5:75:11:c8:f2:45:76:22:1a:d7:d5:48:68:94:
3b:ca:74:37:6a:14:c0:f5:0b:f6:54:89:37:51:b9:
c0:9c:11:15:a8:ab:ce:90:d8:25:35:5a:a4:07:69:
65:da:87:ef:93:7f:66:14:22:30:a2:67:16:80:43:
15:88:00:57:c2:07:69:ac:37:6b:66:75:df:1f:e3:
03:9d:8d:98:45:c9:da:9c:7a:e0:44:12:fc:52:7d:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:A7:53:70:32:D3:D6:3F:86:34:68:33:DA:3D:FF:74:DE:99:56
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:75:4a:7b:40:fd:45:40:34:b5:35:fd:2e:f6:6d:f4:85:
32:ae:3e:7e:6a:83:86:7b:72:b6:9f:7c:72:30:4b:80:d5:04:
b0:b8:79:02:7e:df:6f:f2:f9:47:47:72:7a:09:51:cc:d0:a1:
2b:b7:91:15:47:0d:38:47:78:29:b3:72:c3:ab:04:6d:2a:c5:
be:ef:c6:69:15:6a:75:e1:3b:b7:c4:ab:de:bb:7c:56:aa:7c:
74:69:44:a5:eb:c1:30:6d:1b:84:f6:ec:40:2e:5a:b6:f1:16:
09:32:3b:30:dd:ab:54:77:ea:1c:80:af:fd:36:f6:45:0d:c6:
70:c3:d7:9c:7f:40:89:77:0c:a2:20:76:a4:05:9d:c0:04:fe:
0d:05:c6:2c:4a:55:5d:1e:fe:ca:c2:a2:1d:7c:ef:71:e3:2b:
08:be:ad:fe:d0:4a:ae:d5:dc:a7:b1:a7:1d:d5:7d:3e:f4:40:
d5:e3:48:eb:21:4f:50:7b:0e:62:bb:43:6f:ed:ab:05:8c:d8:
63:fc:dc:76:af:ba:df:eb:6b:2a:42:1f:e3:94:67:4e:57:c0:
e2:25:d0:0f:69:eb:cf:a8:75:ad:cb:7e:bf:4a:1d:64:de:14:
5d:9a:eb:90:89:20:1a:8e:51:89:5d:22:7c:91:35:74:8f:a4:
3f:60:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:47 2025 by rpki-client