Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: jcCq0puRB2reKn2nQVmAwTTnr+hzZ8ymFx2sR3FI1z8=
Subject key identifier: AE:01:35:CC:5A:B4:0C:2C:3A:47:8F:11:0F:B6:CC:12:35:60:61:26
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 0196851162A7711390C8697280923302E450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 01AA
Signing time: Wed 30 Apr 2025 05:00:31 +0000
Manifest this update: Wed 30 Apr 2025 05:00:31 +0000
Manifest next update: Thu 01 May 2025 05:00:31 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: WeOFmHqdyGDUlSjQ+YL+wgGbwOM3/vDdnP00/4cviZ4=)
2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:62:a7:71:13:90:c8:69:72:80:92:33:02:e4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Apr 30 05:00:31 2025 GMT
Not After : May 1 05:00:31 2025 GMT
Subject: CN=ae0135cc5ab40c2c3a478f110fb6cc1235606126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:e6:18:74:5a:5d:b3:73:73:56:96:bf:38:
f8:01:45:06:62:2f:da:9e:8d:2e:4b:b4:54:36:48:
ed:86:3f:c9:48:d8:9a:43:d8:c2:9a:a7:52:27:01:
a3:71:41:a2:87:8c:6c:13:2e:bc:a2:83:d8:d3:16:
fc:01:bc:d3:9f:1d:27:5f:7e:9c:0b:fa:59:34:d4:
9d:2d:0d:83:a2:be:6f:47:a7:5b:b4:38:bf:a8:5c:
e7:8e:5e:be:2a:77:47:a9:57:54:c8:b6:f4:48:1c:
08:03:3f:0a:4b:1d:56:b0:cc:27:bd:73:56:e1:83:
59:17:2c:cb:d9:f7:11:71:bd:dd:f5:18:6c:4e:bb:
ed:ac:d0:61:db:f4:13:08:59:a5:57:04:4a:59:77:
92:2c:7f:c7:41:06:12:c8:5c:ff:92:ab:69:08:db:
3a:20:ba:4d:64:19:ea:f5:83:c1:0e:cb:1b:bc:45:
a7:91:2a:11:f9:13:7a:e4:8e:9d:65:b1:f0:a8:0a:
a9:40:03:b6:2c:a3:d8:81:9b:33:ab:3d:1f:15:de:
2b:9c:46:6b:35:42:63:f4:95:ad:1f:55:c4:3a:d0:
38:29:0e:99:4d:de:91:78:84:21:10:92:25:4a:0d:
2c:8a:ec:22:21:6b:83:a7:9d:e3:96:62:ac:90:51:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:35:CC:5A:B4:0C:2C:3A:47:8F:11:0F:B6:CC:12:35:60:61:26
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ac:32:03:db:6d:04:6e:79:9b:0c:15:4d:a3:77:05:b7:6c:
f7:e4:dc:f4:e0:1c:eb:25:16:80:28:2b:be:43:7e:4e:53:1a:
0d:2f:ab:c9:0d:f3:63:4f:fa:1a:94:ae:b1:c7:67:a7:26:10:
e7:1e:c3:b7:f0:8c:fd:bb:0e:4b:1f:8f:a2:43:dc:57:05:ad:
61:b9:e9:66:c3:a1:f7:77:29:25:a3:3c:68:ae:bc:19:f8:5d:
0f:db:16:19:c1:21:4a:74:f2:f1:64:01:34:31:f8:69:44:6c:
25:f1:f4:64:a7:7e:57:4d:af:58:12:6a:4b:23:5e:47:2b:22:
ed:07:25:59:d2:52:e5:7f:dc:6f:c8:ce:f0:8e:7b:e1:6f:52:
75:61:c8:91:90:91:93:36:e9:9c:a1:87:3d:de:63:48:4b:6c:
d4:57:3c:f1:98:6f:b9:2d:32:31:4b:4f:89:8c:88:6e:58:9a:
db:7b:05:52:04:74:1f:26:6e:1f:db:86:da:e4:d4:78:13:ae:
9e:c5:65:cf:d3:c2:a7:2c:d2:c7:08:e7:70:7e:ab:8b:dc:93:
4c:01:d6:88:13:8b:1a:6b:68:95:13:1b:b9:17:de:37:fd:3f:
fa:41:fe:d8:bc:1f:27:4b:59:18:6b:6d:43:9e:6f:91:b6:31:
e4:01:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:32 2025 by rpki-client