Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier: nMFKSsjdP3IwzErL2YNZbhNSxISd1IWOZNiH/tju3CY=
Subject key identifier: 3A:AB:47:C0:1C:91:3A:48:78:7F:D2:A1:5D:41:FC:AF:66:B1:38:12
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer: /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial: 01967F4610080B9684A06AF06F045C903A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number: 095F
Signing time: Tue 29 Apr 2025 02:00:20 +0000
Manifest this update: Tue 29 Apr 2025 02:00:20 +0000
Manifest next update: Wed 30 Apr 2025 02:00:20 +0000
Files and hashes: 1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: tDQHn62RwEZQymmLTuodwQOouFGzL294VsezECU7LNI=)
2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:10:08:0b:96:84:a0:6a:f0:6f:04:5c:90:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Validity
Not Before: Apr 29 02:00:20 2025 GMT
Not After : Apr 30 02:00:20 2025 GMT
Subject: CN=3aab47c01c913a48787fd2a15d41fcaf66b13812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:93:00:53:83:21:a8:49:43:84:32:8c:e6:
46:1b:18:de:b0:19:09:ea:ab:be:cb:31:30:d0:2f:
a3:4c:f6:04:5a:4a:c5:1f:e6:69:30:d6:05:2a:1d:
4d:b3:d4:29:49:b2:ac:aa:2a:e2:47:d8:28:0c:8d:
e4:4f:fd:a7:83:8d:63:ce:de:ef:9e:1f:0b:77:f4:
8a:cf:09:b8:26:68:89:dd:8a:42:5c:a4:a2:a4:af:
c0:14:a7:8f:e6:7e:29:b5:fa:b4:a2:7b:b9:bc:67:
a1:d3:5b:5a:dd:f1:00:98:5b:c4:bb:ea:44:bf:89:
f9:37:4d:5e:dd:84:af:0d:e8:90:d9:c5:18:9a:87:
66:9a:86:67:a6:0b:7a:3c:ac:61:2c:57:0d:4e:21:
c9:7c:26:96:63:1f:9c:4e:47:a2:fe:a5:fb:5d:6d:
4c:f8:fa:0a:df:f9:41:82:e3:6d:d1:21:c7:da:d3:
59:79:9b:c8:de:29:c9:bf:9e:7a:66:aa:02:98:16:
ae:4b:2d:fb:94:c1:91:af:19:bf:52:26:ee:83:53:
c5:f6:57:05:9a:c8:d1:ab:20:f3:dd:88:10:bc:c0:
78:2d:2c:d2:52:71:f8:0d:dc:d3:56:8d:a2:01:0a:
54:ce:94:76:a2:97:00:b1:65:c4:ec:f5:b9:d0:4f:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:47:C0:1C:91:3A:48:78:7F:D2:A1:5D:41:FC:AF:66:B1:38:12
X509v3 Authority Key Identifier:
keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e9:2e:67:a7:4a:7f:a7:4f:2a:47:49:0a:17:9e:1b:c7:81:
f4:6d:88:0e:49:9f:01:7a:b8:c1:d3:a3:76:3e:b7:9d:cc:f2:
18:6a:b9:a7:39:9c:48:3e:8d:75:3c:9b:bb:37:77:67:9f:1e:
a6:da:7e:1f:39:1b:f9:c3:ee:f3:67:bd:3e:46:80:64:3b:b0:
ac:e6:10:e2:4a:6a:d4:0d:5e:48:15:25:4f:d3:5b:fd:44:7c:
5d:08:c4:3d:87:de:88:a8:83:df:ac:fa:a5:6c:96:cb:fe:fa:
15:8b:6f:86:7b:36:78:b2:72:37:34:13:97:12:b2:a4:45:9b:
e1:b4:4d:83:31:f4:00:74:fa:69:40:fd:0d:10:d8:82:62:64:
50:26:71:8f:b2:2b:2b:ca:5c:d2:1c:ab:c3:b9:1a:a2:b3:a6:
4a:fb:a2:38:91:d2:bc:3e:20:61:e1:2d:a2:02:9f:6d:6c:e2:
a8:b2:0d:3f:e0:89:3b:b6:ca:53:08:d3:ca:7b:b4:24:40:6f:
6e:97:49:95:b1:1d:d9:0b:65:02:c7:0b:b0:d7:e5:a1:b6:91:
56:19:70:18:62:66:20:e5:34:ff:4f:25:76:d6:ca:a6:65:88:
0e:b8:82:8d:3c:fa:5d:63:d0:f2:aa:19:05:56:47:ff:08:76:
2b:77:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:30:56 2025 by rpki-client