Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: ajN4xzlCGFIB/nOwWdUJUrCSO1wlNgeck/iIodMWf4w=
Subject key identifier: 62:0E:48:CA:85:90:83:98:05:03:4B:7B:AA:B6:7B:64:13:12:A2:B4
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019672D41B633EA09B3C4C1C5064C1782F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 1004
Signing time: Sat 26 Apr 2025 16:00:25 +0000
Manifest this update: Sat 26 Apr 2025 16:00:25 +0000
Manifest next update: Sun 27 Apr 2025 16:00:25 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: NdQu2mqSB6EQMoC68bQw7YD6XaQeTmcdsKlv9+DcaJI=)
2: 2M2ufWe7Ofl6u6jn9YFaKJdMQgU.roa (hash: JPn9kgkJ/mLlJFOnz5rvlquqkQlvdwjIM0rOCRw/j14=)
3: 59tRD3uqVaacfvjHXHYi92MaFhY.roa (hash: ux9P4oihcogCzRuXGICOJuqp+Eh/j68654s9FrT8h3Q=)
4: iuLWl39KK5_aNaq1WsPE60hdbCw.roa (hash: 20QH+aMyz7btg2ItRbizZ6HxBagtfnJOnIYg9KYZxFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:1b:63:3e:a0:9b:3c:4c:1c:50:64:c1:78:2f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Apr 26 16:00:25 2025 GMT
Not After : Apr 27 16:00:25 2025 GMT
Subject: CN=620e48ca8590839805034b7baab67b641312a2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:8f:ba:93:c6:a4:8c:be:d8:29:a1:ef:ad:
d5:ef:8b:5d:e9:36:1a:8e:65:9d:3d:29:7e:bb:d8:
3b:cc:09:bc:bf:3d:38:46:25:c9:cb:b6:f6:29:bc:
3b:58:04:98:4b:63:d1:2e:94:3f:b1:3e:c9:b5:4c:
41:d6:25:7a:5e:01:73:35:6a:51:8c:a5:c9:c5:65:
fc:66:c3:e3:bc:05:2a:aa:3f:10:d8:82:88:5c:9e:
95:d8:04:93:a9:ee:7d:19:ac:9f:ec:2d:b3:c8:32:
a2:98:9a:26:9f:8d:19:a1:c6:92:81:9a:6f:49:31:
2b:f1:3f:eb:cb:93:a0:f4:21:f6:96:db:c5:2a:b9:
08:75:ae:49:14:05:d2:f8:75:04:1a:19:0a:f7:1a:
d6:47:44:1c:a6:73:77:cb:dd:67:12:96:9f:5e:f2:
8a:ee:39:32:80:25:ca:75:ae:62:22:df:ef:2b:32:
b5:5e:c4:d2:63:86:59:c6:71:7d:82:90:f2:e0:f3:
66:19:12:c9:dd:c0:4e:11:2f:b7:51:dc:e1:7b:04:
9a:14:34:ea:91:16:3f:70:f7:26:51:ad:14:4f:0f:
e4:e7:c0:95:1f:26:a0:c6:a7:8e:ba:0e:1c:63:09:
84:9e:ea:74:8d:4a:4e:f3:13:73:36:e2:15:12:a3:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:48:CA:85:90:83:98:05:03:4B:7B:AA:B6:7B:64:13:12:A2:B4
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c0:8a:31:d7:3e:7e:18:9a:94:01:9d:bb:83:aa:d4:9b:90:
4a:6a:02:76:39:a3:19:ad:fa:df:e4:1a:8e:a3:43:9e:00:d5:
e6:4d:15:73:ee:ab:8d:49:3f:e1:23:02:8a:15:bb:2e:3d:64:
6f:cf:1d:73:39:28:87:10:da:d1:24:8f:1e:20:25:5f:5e:5d:
b6:5e:e9:3c:d4:94:e3:22:b3:8c:43:4d:83:75:01:64:f1:7e:
9a:39:81:31:6e:69:1b:7b:e0:2a:0a:65:52:fe:b7:c1:fb:da:
72:31:32:ec:c6:12:1b:8a:b6:0a:5e:c3:7c:98:e3:9b:72:c2:
2a:0b:92:1e:c5:e6:8a:b3:dc:a2:0f:a8:3a:58:03:71:1f:93:
88:5d:f8:db:67:15:6e:ee:c3:a9:6f:e8:02:83:4e:03:8e:fa:
86:49:df:b5:c7:39:87:96:cc:ea:5f:5a:ac:a6:96:5b:20:8f:
b0:3d:b6:28:82:9f:c7:39:7d:c8:66:3a:7d:ae:8a:43:76:dc:
25:7c:2b:56:48:a6:45:df:3d:c4:26:b0:7f:46:d2:07:2e:a7:
d9:58:94:f5:6f:14:7c:7f:ff:fb:38:4e:7b:9a:e9:51:af:63:
80:ef:3d:04:8b:9d:92:ca:b7:30:f3:0c:13:fa:21:98:f5:f7:
73:2c:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:11 2025 by rpki-client