
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: zLcw4G1uOVNOCULqc9veYxYMKADBIR3/Rhrh36HNbGw=
Subject key identifier: C5:4B:4C:8A:6B:F5:4F:8A:A0:A9:EC:A0:1C:74:F4:B5:79:19:1B:5C
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019691159D14BBC191120DB39EB3E59C5BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 084C
Signing time: Fri 02 May 2025 13:00:34 +0000
Manifest this update: Fri 02 May 2025 13:00:34 +0000
Manifest next update: Sat 03 May 2025 13:00:34 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: AB/YWJ5O1sKxe6JOOCCnYSJ8jzCIxlHySRaDD0oVeCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:9d:14:bb:c1:91:12:0d:b3:9e:b3:e5:9c:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: May 2 13:00:34 2025 GMT
Not After : May 3 13:00:34 2025 GMT
Subject: CN=c54b4c8a6bf54f8aa0a9eca01c74f4b579191b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:97:33:db:8e:5c:b8:75:6a:11:7f:2f:45:
b2:64:d4:22:42:27:41:b1:b1:74:8e:8e:92:88:f4:
34:ce:c3:f0:07:50:b0:eb:e2:89:6a:ea:76:9b:e7:
82:ac:6b:e6:ae:fe:a7:96:73:f6:0f:95:17:cb:4e:
a1:c3:3a:05:a6:52:2a:0c:92:d8:be:a0:38:bc:12:
51:94:2e:6b:0d:c2:e7:4f:70:e0:08:15:93:68:fc:
16:40:84:e1:d6:dc:bc:7b:39:c6:b9:c7:17:45:a3:
30:2a:d9:91:e9:ca:69:80:b5:3e:10:6e:47:d0:d7:
a0:99:b1:83:b8:9e:f1:4a:3f:76:63:55:ea:4e:52:
ef:49:e3:0a:0d:51:c6:74:dd:6e:57:9f:49:68:15:
bf:63:72:a6:9c:80:ec:f6:d4:25:97:c4:e9:e2:36:
13:77:6c:b2:71:ec:9f:6a:cf:f8:6d:db:c9:a5:d9:
6e:34:d6:b6:07:0d:00:b0:8c:e7:f0:4f:53:37:fa:
a6:ee:de:bd:98:d8:88:40:09:25:9c:6a:0f:53:47:
aa:a7:93:39:8b:a6:0b:b6:59:98:1f:b3:1b:3a:b0:
ae:00:a6:d2:0b:e9:94:c2:ff:3f:69:aa:18:f2:03:
83:ee:44:1f:d9:69:dd:29:8b:c3:76:af:eb:0a:17:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:4C:8A:6B:F5:4F:8A:A0:A9:EC:A0:1C:74:F4:B5:79:19:1B:5C
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9f:20:e9:65:77:d6:65:fe:eb:ac:98:a6:65:53:98:75:85:
08:09:e8:86:ff:67:c1:71:7c:1c:c6:af:ae:e9:06:e8:f7:4a:
c5:1c:66:40:24:a5:08:6b:7a:b4:a5:ef:26:31:6b:ad:cb:e8:
c0:a0:e3:ca:01:f2:48:22:22:7c:d1:a7:bf:5b:5c:08:6f:de:
e4:c6:bc:74:00:17:ef:6c:ae:3b:f2:05:96:0e:77:98:15:5e:
a0:6f:73:29:6a:8c:75:ea:7b:ea:05:4c:a7:98:51:81:07:76:
fa:6b:70:9d:6d:12:42:b3:bd:90:92:63:cb:83:e2:2d:46:2a:
03:04:64:ef:0c:7f:8c:fe:0a:1a:59:15:c0:e3:8d:1b:d6:bb:
57:57:cd:80:80:35:97:75:d2:c7:a4:7e:b1:8b:f4:4b:44:4c:
72:f8:8d:61:23:9d:76:86:7c:4f:ca:7b:91:21:7b:6f:26:ad:
2f:0e:e7:17:08:5a:ff:a5:9b:12:ad:22:7b:3e:47:98:aa:7e:
3d:ae:80:9d:6b:4c:99:2f:e2:d5:56:fc:05:c9:98:7b:a0:a2:
d8:11:af:75:da:53:2f:40:01:fa:f5:21:af:6f:b3:20:93:f6:
22:9c:55:07:d5:b2:14:72:ce:7e:e1:3e:fe:a2:47:b8:4d:ea:
94:24:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:49:30 2025 by rpki-client