Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: XZTB3Y2MC2tXtI1IFnmJLyZ0Q/tfkS6qEXDWqwIsgIU=
Subject key identifier: 0B:FF:D0:9F:76:25:E4:51:E9:28:04:22:69:E9:8C:70:55:28:55:99
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 01967F0F634F014E098A3F6BC7BF96BB3490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 1321
Signing time: Tue 29 Apr 2025 01:00:36 +0000
Manifest this update: Tue 29 Apr 2025 01:00:36 +0000
Manifest next update: Wed 30 Apr 2025 01:00:36 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: wg2GopYHO3fqdB4l/I1VqtrpI2bBbIywY3UZmblxS1I=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:63:4f:01:4e:09:8a:3f:6b:c7:bf:96:bb:34:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Apr 29 01:00:36 2025 GMT
Not After : Apr 30 01:00:36 2025 GMT
Subject: CN=0bffd09f7625e451e928042269e98c7055285599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:52:6c:b7:23:ca:56:d2:eb:20:4c:bb:1c:
86:a9:e8:49:ae:c8:1c:61:2b:8e:41:2b:eb:19:e5:
7e:c0:51:76:0f:ad:0d:3f:f7:ec:c6:36:f2:84:b3:
6d:c0:1a:4f:bb:bc:9e:e4:c0:13:c8:f7:67:82:c2:
2c:77:d1:e5:ad:3c:d5:7a:38:7f:07:44:06:7a:09:
e3:52:39:6d:2f:e3:db:5c:a0:79:ff:e3:74:44:ff:
2c:f5:80:83:4e:74:c1:0a:17:78:ce:b3:aa:be:1e:
7b:eb:79:f7:ce:31:00:aa:5b:d3:fc:f2:8b:8d:66:
02:14:bd:08:7b:19:11:1c:5e:d5:40:4e:7d:b0:97:
f1:f9:86:56:0d:66:35:2c:ab:27:c5:4f:5c:8f:bb:
98:5e:95:c4:9e:11:f6:50:ce:f5:f9:bb:44:f7:59:
92:18:17:f2:04:9c:ae:eb:f7:55:08:60:01:da:09:
c6:73:ef:38:a6:39:2c:bf:4d:01:9b:16:49:81:64:
ac:58:36:5a:e4:8c:cd:32:99:28:c7:4e:7b:f7:99:
8e:6d:b9:6a:dc:a5:4e:36:0e:b8:10:db:a5:b1:c7:
de:29:14:c5:8d:f5:b9:9c:d1:8f:75:57:8c:8e:f4:
91:ce:de:cc:31:b5:91:99:5f:18:9b:ba:8d:ae:4d:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FF:D0:9F:76:25:E4:51:E9:28:04:22:69:E9:8C:70:55:28:55:99
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:ab:ab:53:ef:d6:53:42:53:09:40:1e:a2:50:cb:0b:09:
71:71:f4:36:65:37:b4:22:00:d5:a7:c8:91:ef:fe:13:d7:f5:
2e:84:85:60:82:cf:08:ce:3e:bb:6b:97:10:1c:55:d1:6c:79:
dd:63:c2:45:92:64:00:9b:d1:96:b7:39:16:78:6d:b7:84:03:
77:4d:11:dd:7c:02:78:21:7d:ce:c9:da:f0:5d:44:b0:21:fa:
2a:8d:f6:35:87:29:4b:4f:16:f1:65:e1:c6:61:63:ef:5f:96:
ae:57:71:3c:b6:ec:19:e1:50:3d:69:a9:da:70:3d:70:8b:62:
9d:48:53:d3:2d:36:4b:2f:3b:2b:b7:b8:3d:04:48:08:cd:06:
62:a7:62:a0:99:3f:82:20:6b:9f:aa:13:bc:64:3b:6c:b0:b0:
af:37:15:53:fe:7d:37:be:d6:01:2c:80:cb:a4:14:c4:2f:a2:
34:42:41:ab:97:0a:5d:d8:9e:52:17:33:4b:30:a3:1f:c9:b2:
47:19:73:22:33:24:9e:f3:5c:82:29:6b:47:4d:af:7c:21:9c:
3c:38:4c:17:91:68:be:7b:2c:f4:5b:ac:47:65:a8:b5:d6:70:
9a:12:92:1f:8f:a0:4b:29:db:f3:00:0e:25:04:fa:65:b1:7c:
19:3c:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:11:11 2025 by rpki-client