Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: pspXfEkj0sYyXhFAtrFxzO15kxL/cbOT3w5froPzz3Q=
Subject key identifier: 43:C1:A2:DC:F9:16:3D:1B:08:FC:AF:B6:F5:79:DE:82:60:6C:0F:65
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019677560F7123F2F2547CE250A8B92CFFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 13:00:50 +0000
Manifest this update: Sun 27 Apr 2025 13:00:50 +0000
Manifest next update: Mon 28 Apr 2025 13:00:50 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: 8MVXBE6vG0uv4FLFEB43eN/aIDcfjqpx/03ynoFNXQM=)
2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:0f:71:23:f2:f2:54:7c:e2:50:a8:b9:2c:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Apr 27 13:00:50 2025 GMT
Not After : Apr 28 13:00:50 2025 GMT
Subject: CN=43c1a2dcf9163d1b08fcafb6f579de82606c0f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:bc:78:51:78:32:96:ec:28:6f:e7:dc:e9:
ef:1b:c6:9e:d0:46:c8:e5:2c:2a:5e:0f:04:0a:cd:
3e:5a:49:75:36:a1:fe:dd:d7:a4:41:f1:8e:2d:07:
2f:a2:df:ff:3e:f9:c5:5a:96:95:83:cb:fe:67:f8:
8b:ee:ee:b7:4e:a4:f2:47:f2:cc:9d:f6:87:57:eb:
03:e7:98:86:28:2e:f1:a2:e1:6d:c7:e4:c0:94:e8:
84:27:5a:33:88:43:42:94:05:8a:cb:3a:92:95:e1:
d1:98:74:6f:c7:be:ae:07:33:ae:8a:7f:d7:cb:e4:
b8:25:36:89:a8:4e:e9:7b:e5:6c:06:e7:ee:6e:5e:
ea:63:78:58:e8:f0:98:83:fa:65:22:12:93:60:a9:
ab:1a:fb:ed:81:fa:90:32:72:04:c1:df:9c:26:96:
42:89:0d:10:4d:bf:28:4f:da:e2:25:95:dd:b0:34:
90:51:01:ab:ae:5f:9a:a9:b6:1a:d4:93:63:ce:1a:
7c:f9:4c:b5:10:ca:16:c2:70:54:fe:ea:81:c8:2b:
ab:9f:d0:69:c2:c1:6a:d0:aa:0b:73:1b:ab:cb:d1:
fd:09:3a:b4:5b:2d:ac:3f:17:1b:bb:6c:16:24:f9:
64:6f:83:51:55:bb:47:3f:d3:28:ee:91:7e:99:7e:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:A2:DC:F9:16:3D:1B:08:FC:AF:B6:F5:79:DE:82:60:6C:0F:65
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:6a:86:9d:e4:73:29:db:5e:a9:bf:15:0e:12:47:0f:81:
6a:0a:f5:fc:77:bb:f3:98:bb:6e:4f:c2:0a:30:de:0b:24:e8:
6d:fe:8e:6c:87:a9:88:81:81:07:89:2a:63:63:4c:04:7b:79:
a2:5e:15:bc:a0:c2:72:c4:44:54:1d:84:76:e0:50:d0:92:27:
31:38:cf:8d:4f:35:08:32:b8:4f:78:4d:c4:50:c0:df:2b:e2:
62:f5:86:7c:5a:30:e1:b7:ee:56:2f:f1:ea:3f:6c:12:d2:aa:
11:74:db:2c:5e:e4:b9:6b:8f:43:0d:99:f8:05:51:5c:8b:2d:
ad:8b:cb:fc:ad:25:9c:8a:b4:24:85:b2:a6:10:e0:c3:78:58:
2c:83:ba:bb:d9:ec:40:3c:c1:d3:0c:11:29:06:e2:bf:7d:6d:
90:33:4a:a1:5a:23:19:3a:e4:df:c2:47:da:30:07:1d:4b:97:
29:65:cc:21:ab:cd:28:82:bd:ae:9f:8b:9f:1e:37:fd:56:94:
74:d3:75:5a:ad:6e:49:f9:4f:40:9a:ea:3b:c4:b1:f7:2b:4c:
97:82:d5:8f:b2:5a:4e:f7:5e:ec:e4:0a:4f:05:51:a4:e6:69:
5b:d5:e9:be:dc:f4:28:00:33:f7:3f:aa:22:18:3d:d6:72:8c:
f5:47:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:44:33 2025 by rpki-client