Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: FNTPdhr2Ms7buqUA0RjNRBB6rQjRjEKrtefjefmYgOc=
Subject key identifier: 0D:6F:C6:BB:AC:2D:61:58:B5:40:61:53:E8:84:7D:E7:D4:1F:6D:77
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 019677FA841B3F3CF2F63134AB2C7954F298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 132B
Signing time: Sun 27 Apr 2025 16:00:28 +0000
Manifest this update: Sun 27 Apr 2025 16:00:28 +0000
Manifest next update: Mon 28 Apr 2025 16:00:28 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: yDSDuuy5drLl/sxZJRaYxssMXUG1hdudX3Aor3N2SOQ=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:84:1b:3f:3c:f2:f6:31:34:ab:2c:79:54:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Apr 27 16:00:28 2025 GMT
Not After : Apr 28 16:00:28 2025 GMT
Subject: CN=0d6fc6bbac2d6158b5406153e8847de7d41f6d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:f3:65:06:1f:ce:13:87:57:28:ba:f9:e5:
cd:82:2c:6a:af:7c:b7:12:9b:a0:f5:de:89:40:e7:
a9:17:97:94:43:74:76:f5:68:49:8d:cd:ab:54:ab:
47:02:3b:de:a2:a3:0f:db:ea:d0:9c:63:70:68:de:
2c:92:3e:91:5e:21:19:90:0d:a1:4a:2d:4b:b5:1f:
22:b1:1d:89:05:c6:07:ee:ca:da:56:57:f0:d8:5e:
7a:52:9b:d1:99:df:17:a2:04:1b:20:83:45:35:38:
3a:85:16:17:ad:20:d7:93:df:17:a4:b7:35:45:a5:
0a:e7:f7:12:3d:92:00:7f:f0:04:70:1c:41:67:53:
97:a0:de:ce:4f:0c:23:2a:38:68:64:ae:c1:e2:0a:
26:80:f9:04:02:3e:ef:21:e1:1f:6c:c9:42:d5:34:
99:b2:02:2b:0e:8e:c7:84:48:81:ee:55:f7:0a:1c:
ec:f8:45:a6:45:41:f6:59:58:91:4f:20:49:a5:02:
57:27:11:b9:41:fd:03:dd:d9:a2:04:b8:8e:c4:48:
c6:db:44:21:10:44:a7:36:7c:fa:fb:aa:2d:09:87:
92:7b:d0:85:32:d3:d7:f5:ef:74:8f:3d:5b:d7:3a:
49:6d:69:dc:88:3b:60:8d:33:da:2c:ab:c1:40:6b:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:C6:BB:AC:2D:61:58:B5:40:61:53:E8:84:7D:E7:D4:1F:6D:77
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:41:a9:3e:d8:1a:0a:86:40:f4:f6:64:1d:02:0b:3d:25:de:
09:16:f9:23:c5:18:b2:93:fa:38:2a:8d:ea:f1:48:3d:62:c0:
03:1b:6d:40:ea:7d:65:68:f5:4e:66:86:60:e1:25:d2:55:35:
5b:7c:da:e0:79:86:5b:69:d8:3d:22:3f:8a:09:f2:44:34:b4:
cc:1d:a4:a4:e5:9e:6a:22:d8:5e:8f:43:c7:0d:73:8d:66:90:
22:74:80:54:f7:68:d8:f7:c8:20:1a:b8:83:e6:88:ae:12:bd:
c6:f3:02:e8:34:2b:38:53:41:92:35:7a:44:e3:9e:16:b2:da:
af:59:a8:96:b5:6e:ca:1b:d6:c7:74:e5:0f:67:43:18:23:fb:
7f:fd:85:90:a1:b5:dc:05:8b:f8:40:02:d1:ab:f3:34:74:01:
c8:b7:bc:32:72:0e:51:a7:63:92:ec:68:25:ba:19:d9:8e:ca:
86:45:f8:ea:55:0d:26:45:6a:1c:0e:a4:b3:be:cf:e0:9f:a1:
2b:53:ff:de:b6:79:d8:a0:37:0f:5f:38:c0:7d:5a:e8:87:8a:
e1:d4:fd:09:27:ad:31:fd:05:9f:cc:2a:28:14:76:eb:0a:a4:
9b:4a:b6:14:6b:2b:34:67:bb:db:86:e7:d7:c0:ea:a2:df:32:
70:c8:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:11 2025 by rpki-client