Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: UHXZXKCQUyyJY4MBw4UdlEiRtaj2EsGxxMQnZHskzVQ=
Subject key identifier: F1:BF:C7:F2:19:F3:98:AE:43:93:0D:FB:3C:67:41:A3:EB:5C:E0:64
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 0196759E7C780CCACD0383F02FFF4B9864DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 03D6
Signing time: Sun 27 Apr 2025 05:00:42 +0000
Manifest this update: Sun 27 Apr 2025 05:00:42 +0000
Manifest next update: Mon 28 Apr 2025 05:00:42 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: W/vdI+UkQDcRmQPUCdOhWN2QYSwKwLPVixiMDKb57Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:7c:78:0c:ca:cd:03:83:f0:2f:ff:4b:98:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Apr 27 05:00:42 2025 GMT
Not After : Apr 28 05:00:42 2025 GMT
Subject: CN=f1bfc7f219f398ae43930dfb3c6741a3eb5ce064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:16:e3:6b:0e:84:6e:ea:3e:eb:e6:c8:ff:
bd:d3:ab:b4:e1:f2:ff:5a:0b:bd:2b:9f:7c:8d:75:
ba:79:99:e7:1f:f1:45:56:d6:8a:ee:58:bf:50:ac:
e9:a1:8a:83:8d:69:89:79:35:1e:76:6e:4b:87:99:
65:cd:65:29:42:51:ec:d8:2a:f6:c1:70:9f:57:4a:
4d:0b:ef:05:41:77:a9:72:a9:e4:37:2d:d9:9d:03:
bd:7d:8f:7e:c9:64:98:23:8a:e0:d0:18:f4:c9:3d:
57:81:76:a9:ee:c7:cb:1b:dc:09:94:87:df:8f:d1:
b7:b7:f1:b9:2e:4c:99:88:17:3c:d4:70:eb:42:62:
5a:8a:3d:0d:4f:75:5c:c3:33:c7:e5:79:76:cb:75:
d1:f3:7f:95:d4:09:2a:56:3c:b0:9a:02:c7:e9:e5:
49:4f:1d:8e:b1:17:48:7e:79:34:d3:5d:4b:2b:9f:
68:d5:6f:da:77:54:a9:94:5e:78:1f:ae:71:28:e0:
07:92:05:ec:5d:56:cc:e4:80:c5:f2:b6:d0:c8:34:
ca:66:0a:44:9c:a6:6d:f0:7a:81:b7:7b:37:2c:e7:
92:ab:c5:79:58:7f:5b:00:14:33:68:87:c4:e4:2a:
6b:c6:67:2b:87:7b:d4:0b:97:e5:8e:72:c1:f5:6f:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:C7:F2:19:F3:98:AE:43:93:0D:FB:3C:67:41:A3:EB:5C:E0:64
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8c:5e:06:0a:f4:05:46:c4:17:38:2b:ad:5c:aa:b4:9f:4d:
84:c6:e6:0a:5f:39:2a:59:45:5f:6b:b7:e7:12:b1:d7:e2:a1:
55:31:f9:f0:07:e0:0b:2b:d2:a7:8d:4c:67:10:c4:a2:3e:95:
1c:23:f2:d1:26:0d:ed:62:35:13:df:2d:f3:77:b1:40:66:11:
ea:cb:ed:80:1a:17:cd:a1:c0:9e:ad:21:3c:2b:56:d4:eb:6d:
5a:ed:39:c1:76:81:dc:dc:eb:f9:d3:b9:0b:41:d3:ab:9f:03:
b5:a5:3d:f3:29:8e:df:c4:be:ca:2f:0d:5d:92:8f:d8:fb:22:
1f:0e:97:1e:f0:b0:a3:3a:9d:fe:e1:84:70:6a:6f:bb:da:25:
6c:60:20:48:18:a3:52:87:c4:7f:2b:04:48:7d:67:cf:97:ff:
38:43:83:0f:83:3e:94:e7:01:0d:af:6d:45:68:f3:94:e7:15:
ad:5b:8e:91:aa:87:29:f0:49:57:46:f2:89:d0:fc:88:96:54:
b5:23:17:97:86:70:34:9c:e5:f5:72:58:b3:ee:a8:60:61:ce:
01:bf:a7:12:18:ac:32:15:13:35:36:8d:2f:ce:6f:2c:f7:fc:
f3:f4:c7:03:2a:6a:93:f1:7d:18:b4:79:5c:98:53:82:37:ff:
f4:83:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:41 2025 by rpki-client