Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: CB27AMyLoqINzEt0FKDmOU2JVS5PCFJXuzMfr4Jd9YA=
Subject key identifier: 28:5F:16:CE:F3:FF:20:23:BD:1C:C2:FA:BF:44:D2:C8:B9:42:83:23
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 01967E3370314C0DA50C8761F57C1575DE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1518
Signing time: Mon 28 Apr 2025 21:00:22 +0000
Manifest this update: Mon 28 Apr 2025 21:00:22 +0000
Manifest next update: Tue 29 Apr 2025 21:00:22 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: aj2QXlODtzBtKtcG3dIKXNJx4hT52FlGsacCC9erZBQ=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:70:31:4c:0d:a5:0c:87:61:f5:7c:15:75:de:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Apr 28 21:00:22 2025 GMT
Not After : Apr 29 21:00:22 2025 GMT
Subject: CN=285f16cef3ff2023bd1cc2fabf44d2c8b9428323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:ed:b6:56:74:ac:1c:1a:35:9e:ff:ba:5b:
39:fe:7e:ac:35:51:19:9f:66:9e:fe:bf:fb:dd:bd:
0f:48:79:e7:51:b9:3d:9d:a5:9b:8b:10:f1:6a:08:
7a:01:88:fd:e8:ba:4f:96:ca:57:f3:23:a7:33:c3:
56:c8:4b:ca:c3:25:a5:78:9b:8f:6c:9b:06:86:27:
a5:d9:7c:db:a2:85:25:ab:f8:6f:de:e5:85:1c:38:
a8:41:43:a2:a8:7c:5c:1b:09:7b:a7:0a:8e:9b:bc:
01:84:16:2a:af:34:56:e1:33:42:46:e7:bf:99:2b:
5d:0e:42:e0:04:6d:58:bd:af:b2:7d:30:26:9c:5d:
3d:68:db:4e:e2:11:c8:31:57:73:93:8c:d8:3f:68:
54:61:16:a4:25:43:af:08:8a:0a:f4:97:09:ce:50:
8d:f1:9d:b4:78:d8:dd:67:5d:e6:f3:2d:19:4d:44:
f4:67:ed:21:d0:79:e6:d8:b6:9a:1e:7d:02:c8:b6:
8c:bb:1d:e8:45:6f:cf:ff:70:10:82:5a:a7:ab:49:
e8:a6:56:fc:a7:9f:5d:1b:b7:f2:ec:2d:db:1d:b8:
e3:23:f3:fd:ba:a7:c1:e4:8f:4e:a8:0c:b1:c3:55:
ca:e0:47:92:df:d5:98:df:59:8d:e4:49:84:8d:68:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:16:CE:F3:FF:20:23:BD:1C:C2:FA:BF:44:D2:C8:B9:42:83:23
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5b:e2:a9:ad:c6:38:61:3b:dd:18:c6:69:46:a9:ab:57:ce:
f9:d7:ce:0c:4f:34:c4:bc:4b:ea:3f:71:e8:60:2d:ec:59:e4:
c7:36:5e:b8:13:2c:22:b7:05:36:cc:67:7c:b9:b7:38:89:fd:
0d:45:83:3e:07:2c:96:f6:e3:66:8b:ce:fe:16:17:92:d2:12:
cd:21:fa:1a:24:26:84:8d:8d:5e:6f:f8:b3:18:e0:ba:f8:ba:
e9:40:7d:8a:4f:b1:fb:51:34:09:9d:b7:b0:5c:58:a2:57:ba:
64:aa:0c:a9:4c:bc:75:c6:49:a0:c9:8e:1c:ad:54:40:0f:70:
29:ad:23:ee:b9:0d:a1:12:87:3a:5e:9d:fe:e1:99:9c:2b:92:
45:a4:8e:18:1a:a5:e3:02:e5:1a:41:f8:55:fc:8e:2c:50:ca:
12:c9:36:cb:24:05:6c:ac:37:ea:d7:ca:54:56:e4:bb:14:07:
18:ed:04:57:e7:e8:a1:5e:77:ac:39:ad:5d:fd:70:4f:47:5f:
47:bd:3d:36:e1:79:9a:07:9a:69:75:16:51:a6:7d:07:1f:23:
67:29:1c:db:af:69:96:b7:4d:49:fa:35:4d:05:68:8d:7e:5d:
aa:b9:95:19:15:29:9b:56:ef:16:de:7e:ca:0d:7a:8d:c7:2d:
4b:60:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:30:09 2025 by rpki-client