Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: jYovT7aLrYE8Xs4JXcJoX8Tq1l9HcXf4Eai/e31T9sc=
Subject key identifier: 82:22:33:0D:12:31:52:A7:F5:20:EE:C5:83:C8:36:2F:ED:84:1C:18
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01967454BA2F45B65D7B5831438DFADBE8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 04EF
Signing time: Sat 26 Apr 2025 23:00:31 +0000
Manifest this update: Sat 26 Apr 2025 23:00:31 +0000
Manifest next update: Sun 27 Apr 2025 23:00:31 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: Ea9Tu2200b4UyYtImohicFCPVdkPEf5CRYcCoGSRKFM=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:ba:2f:45:b6:5d:7b:58:31:43:8d:fa:db:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Apr 26 23:00:31 2025 GMT
Not After : Apr 27 23:00:31 2025 GMT
Subject: CN=8222330d123152a7f520eec583c8362fed841c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:67:ae:08:6d:39:c6:43:44:c2:c7:8e:d0:
e2:cf:88:ca:3a:85:17:c6:0c:05:9e:ec:af:84:88:
59:27:84:a9:ab:c8:4e:91:92:13:c5:99:9b:98:0d:
5c:c6:3a:1b:cd:b6:c0:c2:44:06:19:30:14:a3:a8:
d8:2f:21:97:95:dc:5c:ae:56:f0:d9:35:ae:5c:10:
c8:6c:eb:eb:2a:a3:00:3f:3a:c5:b0:71:c0:3e:8d:
d5:45:ab:45:31:82:80:7b:78:d5:41:74:37:dc:9f:
b2:43:61:a7:f6:72:e9:60:e4:54:79:83:e9:82:4f:
0e:6d:be:e8:e1:28:de:51:f3:8e:7b:25:4a:09:6f:
98:48:6a:94:53:68:90:d9:4b:50:43:57:80:5e:8c:
34:77:36:f3:11:cd:9b:48:60:8f:da:28:0d:99:d0:
dd:da:5a:20:d9:60:fa:fb:4f:b1:0d:47:a6:74:94:
aa:1b:98:b3:e1:97:dc:bb:e2:c8:28:7b:4f:3b:b9:
da:35:eb:23:a0:4e:9f:4e:13:95:1d:7f:d1:51:ad:
ee:44:62:f9:1a:bd:60:dd:60:68:f1:87:96:1c:d1:
e6:cf:1b:63:79:18:34:ca:6a:7f:1f:4a:1e:ae:68:
52:56:c2:4c:da:e5:ae:21:89:77:6b:2d:94:d3:39:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:33:0D:12:31:52:A7:F5:20:EE:C5:83:C8:36:2F:ED:84:1C:18
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ee:de:7d:0f:b4:87:bc:6f:3a:de:bf:43:5f:09:de:19:23:
bd:9a:ee:6d:37:9a:2d:79:e4:2f:98:2d:d7:ef:20:2a:e6:40:
9d:f1:f7:e6:a7:a8:65:aa:dc:02:e3:02:c8:96:90:a6:d5:14:
f8:12:f2:c7:c6:9e:a5:41:9e:b3:6c:10:06:85:35:ff:6a:20:
0f:d1:2b:69:e4:35:36:f8:a6:e4:7f:91:0c:bf:3f:31:f9:43:
27:23:55:dc:6b:d2:ed:8e:f1:0b:81:ce:8e:b5:c7:bf:ad:a6:
c0:67:da:be:67:20:b1:2a:d4:27:f1:65:37:90:a1:f4:72:e4:
b5:01:3a:46:c5:23:9c:73:3d:ae:1e:a2:a2:16:d1:cf:76:cf:
1f:9e:73:ef:31:4c:b8:1a:a4:06:bd:3f:24:2d:94:3a:40:bf:
1f:81:18:ac:94:b7:ff:f2:a7:14:bb:20:b8:c6:5f:8d:46:5b:
f6:e9:fb:6b:99:ae:74:f0:7f:cf:61:4c:4c:cb:46:f6:8c:f1:
00:fc:3f:2d:97:2e:c0:09:5b:28:ea:4c:48:ea:d1:03:bd:da:
22:b6:43:2b:bb:7b:83:87:a5:0c:e6:ec:4e:69:f9:25:60:88:
ee:07:d7:2b:d4:22:dc:7e:50:e3:4a:c0:77:9d:ce:3b:1c:8a:
34:f7:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:13:28 2025 by rpki-client