Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: ci2sCvdPsC/uvsYXfqkfAnQv14BQ4UULLUHhnga4WnY=
Subject key identifier: 4C:7A:9A:A2:46:56:43:34:22:F3:7F:FA:57:25:63:C8:1B:99:C8:4E
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 019676B11B2EB22760E6604A65AA510DB856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 036A
Signing time: Sun 27 Apr 2025 10:00:40 +0000
Manifest this update: Sun 27 Apr 2025 10:00:40 +0000
Manifest next update: Mon 28 Apr 2025 10:00:40 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: VetF2f9KbExY7tM3or+1yYZvBR3rSCj7I2HrXczRHHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:1b:2e:b2:27:60:e6:60:4a:65:aa:51:0d:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Apr 27 10:00:40 2025 GMT
Not After : Apr 28 10:00:40 2025 GMT
Subject: CN=4c7a9aa24656433422f37ffa572563c81b99c84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:ad:88:cb:3e:7d:ac:b5:9c:a2:50:88:6f:
17:c1:1a:ae:88:3d:2e:5e:7e:43:09:1d:4a:13:1f:
6a:cd:7c:2e:bf:b5:63:ad:15:bf:a6:e9:d8:f7:78:
15:39:94:89:6d:c2:4e:45:38:e4:15:c5:25:eb:11:
eb:c2:e6:8f:6f:ec:28:85:dd:de:15:8c:7e:3c:4d:
57:93:eb:c3:6a:4d:c9:e2:be:4e:df:7b:4e:fb:b0:
2c:c8:6f:dd:e9:1c:9c:fd:bb:6a:78:3f:8b:1f:b9:
38:4a:bc:fd:15:af:40:f0:da:cf:98:45:11:aa:3f:
19:4f:20:73:62:5b:ed:cd:91:df:9b:d2:77:93:41:
a0:75:06:d9:b3:80:72:06:ad:84:12:d2:67:b5:57:
84:35:a5:c0:d1:43:50:b1:8d:13:c6:17:76:12:03:
20:84:8c:e7:fe:64:47:57:f3:60:20:75:36:60:73:
98:b0:97:8d:dd:a0:8f:aa:73:6c:23:9d:20:17:c8:
17:b5:ec:51:1d:50:bb:f8:07:6d:98:d3:0d:43:83:
08:ca:6f:41:09:30:be:aa:e6:86:8e:e7:57:03:d9:
12:fd:20:ea:9f:73:58:16:87:28:60:2a:85:22:4a:
f4:6e:f7:50:f7:c3:4f:30:0b:85:af:f5:a6:2b:e6:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7A:9A:A2:46:56:43:34:22:F3:7F:FA:57:25:63:C8:1B:99:C8:4E
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b1:2f:ae:a0:e3:72:b3:0e:92:9f:e2:99:69:2b:96:51:2e:
a0:b9:6f:f6:59:09:11:59:34:86:2a:42:a5:f6:66:f1:49:a3:
94:d2:69:c8:df:c8:98:87:8a:8c:8a:79:62:f5:dc:83:0a:42:
a3:fc:3c:40:11:3e:e0:ab:3b:0f:21:b5:03:e7:3e:50:14:6e:
b8:a3:e6:17:7a:3c:4a:ef:6c:cd:25:45:e2:3a:eb:08:63:af:
3d:dc:87:e4:95:26:99:0e:92:51:6b:7a:b3:e0:d3:a3:30:24:
47:f9:bd:65:e3:b9:b5:c4:12:75:60:c4:a7:3a:59:40:b9:ef:
9b:dc:81:4c:00:c3:b2:92:bb:7d:98:3d:56:99:01:76:62:4f:
4f:3a:b2:2f:2f:61:fa:09:75:87:33:19:c7:4e:19:86:24:8c:
73:f6:55:ba:09:89:2f:d5:8d:4f:1d:7f:b4:40:89:0b:9f:6b:
a4:c6:dc:28:79:88:26:5a:8c:3a:d4:9c:83:22:f6:ac:04:90:
89:c7:64:42:40:52:4a:7e:bb:df:25:0a:a2:cc:31:f2:71:ed:
28:9f:7c:c4:50:6e:06:6e:ae:61:59:e7:2f:71:9f:fe:99:2a:
6f:72:00:aa:83:50:42:b6:f8:41:07:4f:c6:ec:8d:ca:71:82:
5f:ff:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:30 2025 by rpki-client