Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: RyCROzjonCO/qtUO2fTqHALq88t90azUTAdZDP/TZWQ=
Subject key identifier: 95:1A:E9:CD:6C:77:FA:6C:65:10:EC:42:05:A3:9D:57:CE:C1:85:1D
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019683FF1004D4EFDDA0FC9ABC4BBE44441D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 035E
Signing time: Wed 30 Apr 2025 00:00:53 +0000
Manifest this update: Wed 30 Apr 2025 00:00:53 +0000
Manifest next update: Thu 01 May 2025 00:00:53 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: +m9L73F1AT53WvNwtGHxIc88cuRlOa+gP38/YIBQnM4=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:10:04:d4:ef:dd:a0:fc:9a:bc:4b:be:44:44:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Apr 30 00:00:53 2025 GMT
Not After : May 1 00:00:53 2025 GMT
Subject: CN=951ae9cd6c77fa6c6510ec4205a39d57cec1851d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:9d:95:53:0b:7f:99:ef:2d:7b:3e:d8:16:
78:13:a4:33:2a:5b:24:91:31:d1:2a:2b:d1:11:05:
75:a6:e7:26:13:4b:bd:fc:7b:2a:53:4a:88:89:38:
f5:04:c3:f1:9f:df:a3:c9:c7:3e:12:12:10:5c:91:
19:77:03:5e:44:ee:0a:34:d9:57:29:99:f2:69:ca:
99:51:15:82:e1:70:4f:86:61:09:f9:0a:c1:9f:49:
a2:e9:43:1c:63:5d:83:a8:90:53:66:cf:75:79:4e:
f9:5f:f8:f6:ee:59:f2:a3:ee:77:19:75:b1:3a:25:
47:79:28:27:22:b4:11:e8:a3:30:65:75:56:8a:2e:
b7:63:af:90:2c:e4:9d:d4:7a:71:3a:a7:aa:5e:09:
22:4c:1b:c7:ec:31:98:76:69:8e:27:b4:5a:92:c3:
ba:05:c8:60:46:27:6a:ca:af:19:19:db:fc:44:c0:
44:c9:6c:49:de:7c:f5:90:08:b7:da:93:f0:38:f0:
9e:17:7a:18:73:e6:4b:bf:f7:5b:09:89:de:2f:5a:
4c:ba:06:2a:5e:0d:3e:93:b1:7b:d2:4f:5f:b4:31:
76:19:17:88:fb:06:55:af:15:62:78:79:39:72:12:
d0:52:ea:d0:74:e6:ad:75:8b:21:78:34:f2:f4:5c:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:E9:CD:6C:77:FA:6C:65:10:EC:42:05:A3:9D:57:CE:C1:85:1D
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:39:eb:b9:d4:1e:83:9b:6a:a7:fc:67:b9:c3:01:7f:31:fb:
e3:1b:19:de:df:27:80:73:da:00:55:26:a8:f7:5c:3a:c0:ae:
f3:10:48:c1:08:61:e1:8a:16:d1:b0:da:df:0c:f4:e7:67:35:
bd:25:79:fc:5e:2f:1b:8e:70:15:8d:c6:92:15:e8:07:e7:a4:
6a:bb:e7:e9:64:4e:ef:85:aa:d6:5c:2f:70:c6:cf:f5:af:1c:
c2:26:48:b5:3d:d0:b2:f9:b1:7c:06:48:24:bf:4a:f3:07:b0:
4b:dd:d4:08:34:0b:e2:db:f7:f5:30:72:aa:38:90:0a:69:73:
5a:54:49:1c:b2:6d:49:ab:40:14:dc:2c:04:b0:e9:58:4e:ed:
31:c1:d0:73:b4:60:8b:78:e6:d0:a9:4d:14:76:bf:3f:d7:f8:
e8:da:49:b3:99:fb:15:ab:e9:90:74:5f:b7:df:c7:94:05:bc:
a1:d0:71:66:d2:7b:41:ed:be:7b:54:19:52:2b:c9:9d:ca:95:
7e:2e:d1:8a:eb:7a:03:a6:c3:53:7b:87:70:8f:2d:70:6c:3d:
b4:7d:0f:a7:9b:b8:ec:b9:55:c2:91:d5:a6:0a:85:f1:6a:a9:
c0:19:8f:4e:20:8d:98:17:d1:4e:eb:c1:2c:12:f0:52:5d:fb:
17:d3:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:59:17 2025 by rpki-client