Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: gKQpGsYorQkX7trOhVh1CP9f07MVDFhRsIAbN3mRxZw=
Subject key identifier: 8C:51:B1:D9:D1:5E:AA:04:C2:19:DB:DC:10:55:52:CD:99:AC:25:78
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 019674F9A9EFFC24EB5CB332B760B7B14649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 02:00:40 +0000
Manifest this update: Sun 27 Apr 2025 02:00:40 +0000
Manifest next update: Mon 28 Apr 2025 02:00:40 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: DRxqSp/rBRgQ6icOqvihT2DfM5RAliHJEmOBEzZ8EF8=)
2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:a9:ef:fc:24:eb:5c:b3:32:b7:60:b7:b1:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Apr 27 02:00:40 2025 GMT
Not After : Apr 28 02:00:40 2025 GMT
Subject: CN=8c51b1d9d15eaa04c219dbdc105552cd99ac2578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:b3:eb:8a:d0:61:ed:c7:66:70:a5:df:d3:
8f:10:45:9c:3b:bc:02:91:f8:d5:eb:9b:0e:31:64:
86:4d:98:76:46:a4:2d:a6:52:eb:dd:a2:89:db:b2:
6b:55:a4:4b:50:f3:66:78:d3:47:7a:87:b9:96:ca:
7e:f1:de:60:ff:0b:29:31:6d:e3:d3:46:3f:10:39:
17:4d:9d:a5:fb:ee:23:03:59:99:80:b3:90:77:c2:
25:20:0f:0a:43:4c:96:e0:47:30:69:01:d4:f1:61:
51:e9:81:ca:1d:28:00:7a:b4:58:86:cd:eb:bf:5b:
8f:f5:34:6c:62:44:79:28:5e:d3:9e:fc:5c:64:5c:
6f:be:77:50:4a:b8:e0:14:86:34:79:17:71:89:f5:
a3:99:aa:3c:e3:46:0f:67:18:15:d9:9e:28:e3:b3:
f0:63:ab:f8:53:81:ed:7e:a5:05:88:03:79:d8:94:
82:0a:3f:57:3b:14:61:57:a1:70:56:5e:72:4c:db:
99:fc:68:a9:15:c7:22:1a:bb:9a:a5:00:b9:57:af:
c6:7a:64:ab:45:e7:d5:86:04:df:8d:0b:e5:03:2d:
15:fa:0d:89:0f:19:47:e8:8b:00:4d:aa:2e:49:f0:
d6:38:96:26:be:91:2c:70:99:7c:48:46:42:9d:89:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:51:B1:D9:D1:5E:AA:04:C2:19:DB:DC:10:55:52:CD:99:AC:25:78
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ed:4f:f8:ee:77:38:53:b9:92:21:78:ab:a2:84:77:70:66:
70:2f:25:50:3b:b1:93:12:c3:ea:46:8d:d8:f2:6f:76:e8:98:
e5:63:a6:3f:40:c6:8f:b8:bb:28:63:14:b8:d4:86:a5:f4:90:
fb:cb:01:cf:79:04:b4:6c:06:7e:83:b6:e6:ed:eb:5c:15:dc:
72:13:d7:6d:0a:3b:81:23:ce:6b:6d:23:51:43:85:a7:46:29:
55:c0:8d:4a:f2:54:d0:26:11:cf:91:30:ce:a3:1a:12:a8:7c:
b2:1f:53:ac:fa:03:c1:95:66:ce:be:ca:fd:fb:45:b4:53:2e:
9b:50:7b:ee:01:f1:e4:0e:26:a2:4d:0c:d3:e2:f2:8c:58:e7:
93:44:aa:b9:86:3b:2b:2a:35:98:1e:5d:6b:9f:da:10:0a:26:
cb:92:e7:c0:6c:f6:0b:c1:28:c7:8a:d5:a3:d0:59:b4:9c:7f:
1b:69:19:c8:57:f8:b9:06:ff:4b:2d:4f:11:c9:15:ca:f0:26:
71:15:b8:69:58:30:7e:4a:f4:9b:a7:17:98:fe:2c:c2:89:6e:
76:48:02:b0:0c:db:c1:4f:38:54:df:2c:6a:f8:38:f9:99:94:
3f:c7:df:2b:70:49:d7:ff:25:21:fa:81:67:61:80:d7:54:d2:
66:16:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:10 2025 by rpki-client