Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: jJ9EPXzXRPO89YUmoWNQRK3N9T4BcrM+dl7H9Q/vY3k=
Subject key identifier: C8:85:FB:F3:B8:BB:F2:8E:F2:48:15:27:56:E6:F4:95:3D:46:31:44
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 0196858067CC152748ED862B1670D1CB48EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0B43
Signing time: Wed 30 Apr 2025 07:01:46 +0000
Manifest this update: Wed 30 Apr 2025 07:01:46 +0000
Manifest next update: Thu 01 May 2025 07:01:46 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: vXn2baS5B1+6fp8FasbVMDdwuc0TSVRJ42LlwQ688is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:67:cc:15:27:48:ed:86:2b:16:70:d1:cb:48:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Apr 30 07:01:46 2025 GMT
Not After : May 1 07:01:46 2025 GMT
Subject: CN=c885fbf3b8bbf28ef248152756e6f4953d463144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:bd:91:85:4c:c8:37:8e:4f:96:f8:30:7b:
f2:da:1e:cb:a2:cd:48:da:df:bf:54:67:d6:33:bf:
77:7c:98:cd:3c:38:1e:64:7a:b2:b4:8f:13:cf:08:
b6:06:a9:ec:83:64:2e:90:61:08:f2:59:62:91:47:
6c:25:3d:8c:cf:e6:39:b4:aa:b8:4f:23:59:18:76:
cc:39:9f:cb:d3:1c:b2:47:7d:20:8a:b1:dc:6a:3e:
1c:62:19:b0:0a:c9:4c:71:37:43:06:ab:a8:5c:66:
86:27:8f:01:33:6b:cd:4d:5a:d3:5e:25:b6:d2:e3:
02:1c:c9:20:38:84:97:e8:c4:55:a5:80:60:a6:f8:
7b:0c:45:ea:df:9d:47:4b:9b:1e:a3:f2:17:ae:ea:
9d:14:9d:77:35:63:69:81:4f:46:2f:38:e4:eb:34:
4c:21:97:20:67:36:a7:93:dd:24:0a:6e:6a:5c:5c:
e2:21:8c:fe:d1:20:2f:d5:8c:27:4e:0e:6c:bb:89:
f6:a0:3a:4b:8b:5e:59:1a:75:97:e1:f0:a4:31:06:
35:73:a5:8e:f6:76:21:da:57:68:90:13:7d:bb:61:
12:f6:fd:58:b9:6d:9d:50:d3:4f:37:71:b1:54:40:
a4:33:97:ce:fa:60:5e:5c:dc:2f:6e:1c:64:15:f4:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:FB:F3:B8:BB:F2:8E:F2:48:15:27:56:E6:F4:95:3D:46:31:44
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:2d:dd:b7:ea:0a:30:4c:2a:45:39:be:19:07:cc:a2:e4:
3b:2c:50:f3:33:dd:79:ac:f2:65:b2:3f:87:c9:e1:e9:8f:6a:
a9:c8:d9:cd:7a:65:1a:00:33:9b:8e:b3:67:85:bb:a3:e8:ec:
7e:59:c2:3b:7c:d5:73:e5:63:5f:5f:6b:dd:11:cd:53:35:c7:
9d:f2:3f:20:ca:78:19:6e:be:ba:99:e4:15:92:93:c8:cb:a4:
7f:80:24:17:a5:35:55:e6:27:a4:43:e4:e1:b5:6f:db:f5:e9:
1f:b1:3c:1a:11:98:a1:2b:ef:7c:70:1a:05:4e:e1:d6:92:38:
ba:47:f8:20:38:50:a9:1a:8a:4c:e2:66:6c:2a:22:f7:09:b2:
8a:93:ba:57:a8:59:dc:e4:78:03:f2:21:0d:81:29:30:91:f4:
6c:8b:a9:94:ee:5c:a2:7f:87:38:49:4a:d2:b3:11:02:6d:75:
a3:e5:e5:28:ea:d5:76:15:ec:3d:fe:53:9e:84:e7:69:fb:f9:
13:dc:9b:46:e3:6c:a2:9a:bc:e6:8e:43:f9:5a:b8:a1:b2:ca:
e1:26:51:6e:1f:96:3e:dc:37:61:56:61:f9:75:3a:5f:3b:e4:
33:a7:15:43:0f:55:45:38:22:09:30:14:ab:bc:8d:41:5d:41:
d4:81:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:16 2025 by rpki-client