Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
File: 1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft (raw, json)
Hash identifier: 9Y/XB9z8bS4axut+qRfecvHrHyIZvY9kHJiJzqnqqvA=
Subject key identifier: F1:36:3B:1D:24:6E:10:20:9C:28:2E:5D:D6:DB:F4:9A:F3:C5:45:24
Authority key identifier: FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05
Certificate issuer: /CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
Certificate serial: 019674FA44CF1B4B940D36D500B668DBB1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
Manifest number: 04CB
Signing time: Sun 27 Apr 2025 02:01:20 +0000
Manifest this update: Sun 27 Apr 2025 02:01:20 +0000
Manifest next update: Mon 28 Apr 2025 02:01:20 +0000
Files and hashes: 1: 1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl (hash: itJkzj2AqZ0Vh0qfnuWjB+P8pxQ/bPPjIfwW+yb5j8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:44:cf:1b:4b:94:0d:36:d5:00:b6:68:db:b1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
Validity
Not Before: Apr 27 02:01:20 2025 GMT
Not After : Apr 28 02:01:20 2025 GMT
Subject: CN=f1363b1d246e10209c282e5dd6dbf49af3c54524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:30:cc:69:2d:c4:3c:9f:60:a5:86:fa:30:
d8:f7:15:1f:cd:c2:41:dc:fa:8a:82:43:a5:15:4f:
c9:fd:b8:ff:e9:04:d4:c7:45:50:5c:f8:ba:69:68:
82:51:8b:0a:c6:79:10:22:c2:64:cb:db:b0:cb:9e:
6e:9d:27:d4:6f:ff:73:75:84:23:db:7d:f8:7d:60:
8a:5f:d2:f2:49:2c:5a:ee:33:97:14:6c:59:3e:d9:
cc:28:42:84:a1:c9:80:fc:d6:e3:6e:26:b4:2b:f5:
32:31:bf:dc:fb:ba:f5:63:18:dd:84:54:34:0f:15:
5a:e5:75:b1:b8:97:0d:c9:e5:ce:ab:ba:ad:05:fd:
58:d1:2a:ea:66:a8:47:99:c0:c2:21:9f:0b:70:a8:
84:48:60:b6:2b:6a:1d:e7:25:b4:35:12:f5:09:15:
41:a6:7b:7b:80:6c:c1:c0:7e:cf:c3:28:83:85:b7:
a1:93:da:8e:90:b3:7e:17:9a:61:6d:8f:9b:c7:fb:
af:69:79:3a:95:12:a5:32:89:a5:59:89:36:c6:7c:
50:eb:bf:ba:da:11:66:af:87:8f:92:f6:20:f4:04:
ea:6d:53:b0:bf:42:44:f1:e7:1e:f8:30:21:bd:b6:
38:c4:fa:25:68:da:b0:a0:9b:29:67:b9:01:fd:41:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:3B:1D:24:6E:10:20:9C:28:2E:5D:D6:DB:F4:9A:F3:C5:45:24
X509v3 Authority Key Identifier:
keyid:FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:eb:f9:67:d1:b9:a6:93:52:f3:c3:dd:62:a6:ae:b4:b8:
15:1b:2f:19:8f:f9:d7:7b:3b:8e:78:26:6f:1c:fe:8e:e8:b0:
c0:1c:2b:b9:14:eb:ee:3f:9c:17:4d:72:53:95:d9:db:6f:21:
59:14:aa:03:9b:84:6a:6c:38:e7:2c:1f:46:dd:4d:fd:22:47:
64:5a:9f:98:f1:5e:87:79:d4:f8:d4:66:b6:ba:46:35:33:82:
04:9b:05:78:54:99:97:d3:fd:13:e5:2d:1a:ad:c0:da:37:ee:
7c:7a:04:9c:4e:72:66:70:6b:1a:5a:5e:5c:c2:2d:ef:a3:c9:
11:5c:d5:1a:22:ba:be:65:10:7c:fe:76:f7:b2:4c:f7:40:28:
47:4c:1c:da:c2:d2:76:23:20:b3:f1:84:cd:6d:ea:2d:72:57:
33:a0:c3:66:d8:1e:40:70:23:df:d0:83:ee:9b:1e:97:d9:88:
55:ca:cc:c5:c3:82:17:bb:27:62:45:aa:c0:13:f4:48:1e:ee:
43:ea:32:90:98:7e:64:a2:75:0d:1b:84:48:07:2a:c6:a4:74:
24:4a:5a:01:f4:03:a4:f3:00:cc:20:f8:57:0e:41:35:64:3f:
67:8d:6a:b9:cc:16:99:0f:fe:c3:0c:a9:da:c0:d4:c3:5e:64:
c9:f9:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:23 2025 by rpki-client