Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: uzGzUpAOCFpkG+jUpiVB+rX2ixhG95oZ4eVGUNMUrzs=
Subject key identifier: 9E:AD:DC:9C:4E:FB:84:1B:E2:ED:D4:05:8D:61:3D:A9:B4:BC:FF:32
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 01968812A79CA15BF9DD7ADC42D94C0E42C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 05EA
Signing time: Wed 30 Apr 2025 19:00:45 +0000
Manifest this update: Wed 30 Apr 2025 19:00:45 +0000
Manifest next update: Thu 01 May 2025 19:00:45 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: DV2TaPrDp3l1WWgOdEh061RPYNq79ivBrK/2b1i98nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:a7:9c:a1:5b:f9:dd:7a:dc:42:d9:4c:0e:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Apr 30 19:00:45 2025 GMT
Not After : May 1 19:00:45 2025 GMT
Subject: CN=9eaddc9c4efb841be2edd4058d613da9b4bcff32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:86:ac:6e:42:b7:b4:92:f0:7e:29:d0:b4:
ec:f7:8d:9e:7f:92:e8:53:89:c2:c5:59:f9:a4:05:
fd:b3:3e:76:21:a0:73:cf:d7:8e:bc:ac:1c:21:fa:
37:69:44:94:68:1c:7d:59:4f:04:63:23:8c:2a:25:
cf:ce:f5:60:8c:8a:0d:15:d8:c7:da:96:36:02:09:
9a:07:67:5b:1d:65:f9:49:21:80:55:eb:89:e8:11:
99:22:a5:08:53:a2:a5:a2:e5:a4:e3:b7:ea:30:0d:
bd:ab:15:aa:06:dd:45:e6:8f:bd:1c:d5:3b:a5:32:
5d:2f:a0:cc:bb:c7:62:7d:6f:66:f8:2f:24:16:44:
98:d9:9e:f4:0f:a0:07:2d:fd:0a:67:10:3e:1c:55:
0f:eb:d1:e1:e3:f1:38:a8:40:96:75:7e:95:8f:43:
9c:95:a8:3e:09:83:13:52:fd:e0:00:c7:76:60:2a:
b8:af:5b:bd:15:9d:37:b5:9e:74:55:de:c2:ce:09:
cd:72:ae:03:5e:ef:17:5d:e0:09:4d:c3:ac:fc:d6:
d4:42:ae:9b:46:1e:81:98:69:e5:0c:31:65:f0:42:
f5:12:65:28:7a:a1:83:e2:bd:34:ca:4d:57:8c:31:
6a:f3:e4:c6:63:8f:a0:47:d1:5c:d5:6a:d8:11:c4:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AD:DC:9C:4E:FB:84:1B:E2:ED:D4:05:8D:61:3D:A9:B4:BC:FF:32
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:91:b2:22:d9:a7:19:2f:d5:44:d2:80:f8:69:0e:6b:af:2b:
53:80:aa:ac:b4:cf:aa:d1:f7:64:26:ed:08:37:54:54:4a:53:
76:94:bc:25:f2:c2:1f:df:b8:98:07:86:1f:ca:65:3d:97:97:
41:fd:25:73:d1:64:f9:5b:da:58:96:43:56:49:6d:4d:73:5f:
92:21:7e:92:f2:ae:9e:18:1b:ae:5f:31:34:c5:14:9c:ec:6d:
1e:b1:05:5b:35:eb:16:fd:3a:01:0c:35:2d:df:16:b4:c9:5e:
be:92:b8:f2:c5:fa:1a:e9:83:fd:bf:5a:59:65:9a:52:b6:55:
e8:a0:e7:b3:dd:9f:63:e7:85:2f:57:bd:41:8e:36:db:19:41:
d2:3d:9f:65:fb:39:f6:b8:08:c5:8f:43:10:7e:3c:24:0e:14:
19:2f:a5:c1:c1:00:2c:f6:08:d8:aa:17:39:e4:d3:6e:e1:4e:
bb:92:8b:71:49:23:0a:b5:9d:6f:d9:62:c3:3b:27:af:fa:c0:
4a:e2:7a:db:29:48:a3:a0:4d:27:a2:ca:01:9b:af:49:66:86:
12:2b:ba:1f:ae:0d:be:5c:73:81:51:a0:d2:66:c9:81:87:af:
46:1a:b0:8e:0b:c1:6f:e2:94:74:78:b9:3f:83:f1:39:fd:13:
21:f9:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:34:06 2025 by rpki-client