Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: wpzJAX1Weram5qiQ++DsIwv2Ad7md81MnDzsi9TvUHY=
Subject key identifier: 73:6D:1F:B2:AC:F0:DE:C6:E3:EE:62:3D:9B:31:18:A2:DD:13:D7:95
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 01969FE4189DC0C2613BDD06A34E355A32CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0C96
Signing time: Mon 05 May 2025 10:00:47 +0000
Manifest this update: Mon 05 May 2025 10:00:47 +0000
Manifest next update: Tue 06 May 2025 10:00:47 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: vofvWw05B0IIdOyZ59Po3g400AmHe+5+iS33khsKOL4=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:18:9d:c0:c2:61:3b:dd:06:a3:4e:35:5a:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: May 5 10:00:47 2025 GMT
Not After : May 6 10:00:47 2025 GMT
Subject: CN=736d1fb2acf0dec6e3ee623d9b3118a2dd13d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:63:0d:56:05:74:99:0e:f5:b3:3f:1b:ce:
cf:be:72:6f:70:ff:50:44:51:79:2b:a3:72:69:b6:
de:7f:65:a5:db:0c:43:81:68:ff:01:58:6c:d4:9f:
48:f7:4e:8d:ae:37:92:05:73:65:8e:b0:32:34:71:
69:78:ee:57:5f:05:e3:ed:71:ee:44:f8:59:39:56:
d8:b2:4c:7d:ae:5c:34:8c:91:dc:92:f3:b1:be:5c:
d1:4a:9d:88:1b:83:e5:6d:c0:e7:d4:37:c4:f6:64:
bf:1e:1a:c5:c2:e0:9d:d4:89:4f:fc:4d:a4:c8:d2:
58:9b:d6:62:81:8e:e5:e2:50:20:46:de:a6:4e:c5:
c6:68:6c:78:5a:b0:e8:f7:6f:71:16:bd:19:67:68:
33:96:33:80:92:2d:a6:ed:33:0b:73:4c:fb:86:2c:
5b:d0:07:14:c3:4a:00:cf:c4:12:32:d4:63:12:4b:
95:84:52:ae:79:15:c0:de:f0:c4:45:bf:5e:46:45:
c4:d9:df:bc:10:0f:7f:53:26:bc:32:5a:fb:29:05:
11:76:41:cd:5b:4a:78:81:ff:fb:1b:90:84:55:dc:
bb:4b:60:67:80:87:ab:da:f0:cb:b7:e0:bd:ee:89:
a4:ad:bb:68:6d:53:d4:da:7b:02:bb:51:d8:3a:de:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:1F:B2:AC:F0:DE:C6:E3:EE:62:3D:9B:31:18:A2:DD:13:D7:95
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:63:81:66:4f:a5:60:3b:10:4b:eb:c3:bf:8a:9a:d3:55:fa:
58:ef:b5:66:14:0c:95:0a:7e:84:f5:df:2b:d4:a8:1f:5d:13:
d1:72:81:4a:e4:cc:c0:c0:f4:75:52:9f:c3:7c:ba:81:7a:68:
9d:b8:f9:df:a5:cf:93:fc:b2:4b:0e:c7:1d:65:ae:cd:c3:a7:
4f:58:b2:01:5c:60:d1:ab:f7:dc:c3:e5:d9:0f:4e:02:b2:d1:
f1:5b:c7:5c:6f:84:d9:b4:e0:ae:23:8e:28:b6:98:21:78:49:
13:ef:bd:0b:3f:1f:8f:3e:ea:96:38:61:90:2f:23:57:7f:17:
f9:9a:50:d6:e2:67:22:f6:a4:e1:63:49:bf:e8:97:72:a1:70:
09:1d:d7:4f:51:02:04:80:0f:f7:24:b8:b7:97:96:ca:22:88:
5e:2d:57:86:0e:5a:b3:c0:81:68:3c:4e:5f:3c:19:e0:a4:7a:
ec:94:62:4c:fc:93:32:3e:e5:15:dd:6b:38:a3:15:a0:71:24:
27:dd:17:17:b7:a8:6f:c7:59:d4:0d:e5:7d:ce:1a:7e:cd:cc:
c4:64:b2:77:23:ef:61:fe:57:d2:4a:9d:22:13:33:9a:13:cf:
1e:29:ea:09:a3:3a:7b:2a:0b:f4:a1:c1:70:02:05:ec:6e:d0:
d3:b7:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:24:45 2025 by rpki-client