Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File: 1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier: Qj+f4HBfMR/PN8VCBwKY58badqncHdSPumD0M3tqP20=
Subject key identifier: 8B:B9:6D:EC:BD:A5:96:31:C3:DB:2F:DD:61:D6:B7:7B:B7:70:BB:BC
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 019676E815ADCDA70995ADABABF292E5ECB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number: 11FA
Signing time: Sun 27 Apr 2025 11:00:43 +0000
Manifest this update: Sun 27 Apr 2025 11:00:43 +0000
Manifest next update: Mon 28 Apr 2025 11:00:43 +0000
Files and hashes: 1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: EqYZEv1LkWco6H4Y3fwR7dLdLPWJIOHzz55RN+cd55Q=)
2: QajEwkbx04DeU-__NIG_To3nAd4.roa (hash: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:15:ad:cd:a7:09:95:ad:ab:ab:f2:92:e5:ec:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Apr 27 11:00:43 2025 GMT
Not After : Apr 28 11:00:43 2025 GMT
Subject: CN=8bb96decbda59631c3db2fdd61d6b77bb770bbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:01:a4:35:03:99:b1:f0:56:39:43:8d:05:
82:bc:b4:8e:e1:fe:20:2f:83:73:16:4e:3f:1b:ff:
c6:ca:db:fa:5e:21:e5:f8:d3:7c:d2:67:b9:d0:57:
18:5d:ee:6c:9b:c2:01:2a:73:af:6f:3a:bb:24:da:
e5:e2:8f:cc:ea:1d:5d:60:bc:8d:a9:8b:a7:a7:d5:
62:3b:7d:ea:e7:63:a2:87:45:4a:19:c1:f0:dd:c3:
d1:d4:39:b6:01:67:8d:6f:93:89:a6:8f:59:72:18:
2b:82:4e:96:1d:c4:bf:f8:1b:e2:57:d8:f0:bb:f8:
b6:dc:df:0b:05:ee:a3:82:83:40:16:8d:a9:de:24:
44:a3:45:13:c8:c9:80:73:48:e8:08:7b:09:6e:5f:
a4:48:f9:d4:be:0c:6a:a1:49:cf:cb:e4:3f:1d:ff:
8a:88:e2:8f:f5:f5:2b:eb:f5:0a:fa:8d:25:a5:4c:
3b:03:0c:ea:96:2f:b8:67:de:54:70:f5:37:6a:f8:
23:1c:ee:cc:7c:2d:e5:9c:95:4c:0d:4f:84:6c:74:
24:07:1c:30:28:f5:45:6f:9b:16:79:ab:a6:2f:53:
a4:d8:6a:a5:80:43:54:17:38:e6:de:4c:e7:4f:8b:
c3:bc:56:1a:f3:4a:25:a7:f0:57:99:4f:3d:9c:92:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:6D:EC:BD:A5:96:31:C3:DB:2F:DD:61:D6:B7:7B:B7:70:BB:BC
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:85:33:36:0e:d6:98:d0:67:5b:1f:e8:4a:8f:cb:42:1b:b4:
ce:1d:ca:68:35:38:35:e2:94:c5:74:9a:15:c3:3b:64:13:b6:
7e:76:88:5d:ef:f4:35:b0:aa:a5:07:14:b3:29:04:13:88:2f:
fe:05:7b:f7:5b:c4:80:85:50:00:1e:21:e9:24:8f:6c:2c:39:
dc:5e:30:3e:3a:97:67:86:76:0a:71:dc:aa:71:49:60:78:b9:
ef:5b:51:38:4f:f7:a5:00:ee:16:e2:5b:b8:c2:f8:54:ec:1f:
44:15:b7:be:01:eb:28:82:0a:7f:c0:b5:af:9e:59:fe:e7:8a:
60:30:a8:d8:3d:aa:0d:4c:a6:26:2f:68:d5:98:be:ab:fa:9a:
69:e5:e0:ab:4b:f0:3c:82:8a:09:60:ae:98:db:f6:ab:d3:b4:
b0:0d:85:4b:34:7a:32:7d:7e:0c:e5:5a:3b:d4:76:5e:6e:d1:
52:fa:e1:54:8a:28:d2:98:ae:4d:43:96:30:28:10:ab:92:6e:
1e:07:b9:e5:ab:dc:e9:15:e0:5f:9d:34:00:e2:a8:cb:7e:cc:
ec:44:b4:d7:67:8d:ce:6d:f9:56:c1:8e:5f:48:d3:de:0f:bb:
2a:fc:93:85:d0:3e:0f:41:ec:e3:12:43:4c:f8:e3:18:fe:37:
77:cb:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:39:12 2025 by rpki-client