Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier: 2qNtkB35SXeGucVTIUDsbgEsdXRBPYe0aj8ZiMNAWTQ=
Subject key identifier: 54:68:BE:6A:E0:DE:D4:FF:8C:FA:18:1E:CF:CA:A4:7D:17:64:2C:20
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 0196827DF670E5B1A66241435098B7179978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number: 1523
Signing time: Tue 29 Apr 2025 17:00:15 +0000
Manifest this update: Tue 29 Apr 2025 17:00:15 +0000
Manifest next update: Wed 30 Apr 2025 17:00:15 +0000
Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: 6l1Oc+mfS+uK4GysCxzSOfch2sStZO1mMTWQDzJW2vE=)
2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:f6:70:e5:b1:a6:62:41:43:50:98:b7:17:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Apr 29 17:00:15 2025 GMT
Not After : Apr 30 17:00:15 2025 GMT
Subject: CN=5468be6ae0ded4ff8cfa181ecfcaa47d17642c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:fd:22:f1:4c:fb:76:d0:2d:8c:08:c3:82:
9d:31:d6:28:82:bf:60:50:70:ef:1b:23:35:41:47:
37:5b:44:e4:0b:fa:9e:b4:d5:cb:3a:f8:5b:be:6a:
b9:e9:7c:8d:99:d3:b9:26:26:92:6a:ad:31:f9:47:
c8:ca:fb:91:7b:d7:11:07:39:4e:c0:de:47:86:f4:
06:61:de:e2:fe:59:7c:31:46:ca:09:8a:0e:2a:eb:
e8:bc:25:02:c4:bc:51:d9:3a:1a:c8:17:2d:35:e8:
df:a6:d3:ac:ad:1f:19:12:3c:5f:1f:ad:f3:d7:5e:
f9:77:3a:28:3a:ff:80:b7:bd:ce:da:a6:5a:ee:7e:
6b:e2:cf:d6:10:2e:e4:c1:47:38:9d:00:9a:94:ea:
fb:7d:ed:d0:fe:59:a9:76:84:c3:98:1f:cd:4e:a7:
6a:fb:d0:3b:1e:a7:93:e3:d8:0a:78:9f:17:d9:c8:
ff:cf:33:1d:ec:0f:ea:dd:6f:c6:80:28:3f:27:de:
1a:a7:a3:00:f8:0e:18:ae:f5:7c:fc:d8:d4:03:fd:
ca:81:ef:65:4e:8e:c5:27:91:10:81:29:aa:7b:b3:
cd:33:1b:bd:f4:a4:4d:e2:1a:7f:5b:c2:81:3e:19:
8b:b4:ed:c9:65:05:0e:11:34:94:81:0b:d0:bd:7e:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:BE:6A:E0:DE:D4:FF:8C:FA:18:1E:CF:CA:A4:7D:17:64:2C:20
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:75:f8:3d:aa:67:55:ab:8c:28:d4:35:b1:a0:3c:96:77:c7:
64:cf:19:81:4d:a9:ff:dc:21:92:05:df:d0:5d:61:77:6b:46:
95:93:5a:1c:bf:6f:b9:d6:4b:25:30:96:a5:fa:0f:1e:80:b4:
db:5c:15:1f:bd:b9:7f:1d:5a:8a:7b:07:fa:e3:30:44:58:f0:
bd:c8:d9:60:db:fd:28:42:ff:5e:4c:2f:77:a3:73:56:36:33:
fa:63:31:a3:f0:0c:f7:c4:d9:31:09:c8:eb:b6:a6:7b:e6:4e:
b8:f8:5f:76:97:27:e9:99:fd:14:08:0d:b0:a3:d2:e6:b0:bf:
6f:06:d5:d3:74:39:b2:5a:9b:dc:72:b1:07:60:d7:60:1d:ed:
43:ad:f3:c7:83:e1:da:04:11:d9:ce:5e:d0:a9:53:ae:a6:a0:
51:05:4b:c1:0b:42:a8:d6:b7:f6:d6:43:61:e0:cb:f4:53:6b:
44:61:0d:3a:b1:49:f3:63:d9:ea:8f:ae:9d:4e:39:bf:67:6f:
4c:37:24:c7:e3:34:6c:e7:82:cf:a1:6a:bc:7e:43:77:11:25:
e6:30:82:19:f2:a6:1c:be:3b:e4:55:27:95:e9:98:41:9b:1b:
40:1a:4e:45:c8:0b:ed:f6:9b:6d:32:98:40:3f:6d:f3:15:4d:
b3:e2:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:22:19 2025 by rpki-client