Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: 0llhZHle79VN69In0FDhnqQQqK+JP9AP4MEQAaZ/IK4=
Subject key identifier: 88:80:C6:3F:39:02:B8:4C:BA:EB:5C:F6:E1:90:F6:D0:16:B2:19:2F
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019678D67077F60DEE3836E6A8392411B88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0571
Signing time: Sun 27 Apr 2025 20:00:41 +0000
Manifest this update: Sun 27 Apr 2025 20:00:41 +0000
Manifest next update: Mon 28 Apr 2025 20:00:41 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: ovDiuJYBGIQMpZ2kZDFdnRx54SP9coEUZM3KO/vYTxM=)
2: kidKlu5oDBem3t0h8aiG0Vv8dvw.roa (hash: Xo2YDFkznVnl+RRSUSAYifFOhE1syeVNtNcN0kJvN2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:70:77:f6:0d:ee:38:36:e6:a8:39:24:11:b8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Apr 27 20:00:41 2025 GMT
Not After : Apr 28 20:00:41 2025 GMT
Subject: CN=8880c63f3902b84cbaeb5cf6e190f6d016b2192f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:96:d8:61:a0:ce:e2:88:71:67:91:98:2c:
4f:e3:3d:79:10:b6:38:21:8c:7f:fd:69:19:11:f7:
93:48:d4:a4:59:e6:cf:b6:a5:3b:70:55:13:89:c2:
70:24:f5:a4:71:f8:73:57:59:4b:44:2d:de:67:de:
ed:c6:e1:5f:47:db:84:ee:e9:70:3f:6e:8b:3b:48:
04:54:f9:06:db:d3:ed:cd:4b:d7:fd:a2:12:4c:ef:
38:79:95:46:7b:2d:a7:ee:d6:12:ee:f5:b7:f9:92:
5f:81:b9:5f:0d:62:fb:36:88:39:ab:f0:13:d2:01:
a8:6c:08:23:3b:49:3c:60:c4:80:9e:92:7a:0b:6a:
91:15:fb:60:93:6b:e8:e4:f6:10:9c:c1:9f:1c:1f:
4c:26:ad:91:64:71:2a:14:f1:a8:c9:16:d6:30:3e:
08:23:d9:6c:f0:ac:02:85:93:f4:d3:42:90:16:94:
d2:74:33:d5:4c:66:5f:f1:de:1e:a0:c3:6a:5e:bd:
80:8c:f7:c6:dd:fc:59:82:dc:f9:77:60:c0:24:db:
af:60:a9:95:de:2a:0d:12:dd:36:36:53:30:f0:1b:
d7:44:7c:8c:28:d0:d9:1e:37:43:f3:f7:26:90:80:
8d:d5:7f:86:34:a6:26:83:78:35:ae:8e:a8:da:5d:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:C6:3F:39:02:B8:4C:BA:EB:5C:F6:E1:90:F6:D0:16:B2:19:2F
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9b:0b:09:66:42:f4:06:84:a1:7f:5e:38:3c:75:d0:52:c3:
00:d4:e2:a6:30:68:5e:96:56:84:ea:bf:4d:c4:df:e2:9a:73:
d8:78:e0:2d:0a:55:b8:b7:77:06:b7:2b:54:25:63:05:c7:88:
70:cc:6d:b3:78:9a:fd:45:22:f8:18:da:bf:44:b9:1b:68:f2:
66:52:c8:5e:ec:2d:8d:6a:df:a2:f1:3e:85:af:c0:ef:05:e5:
ae:bb:85:37:ae:f3:cd:f7:9f:ba:bc:38:0a:96:b8:9f:d1:b7:
d1:5e:6d:14:1b:7a:90:f7:ce:29:31:0e:0d:2d:f9:49:e6:36:
c5:6f:0e:65:08:b1:df:55:c9:1a:3c:03:ec:c5:1c:68:9c:85:
5a:1c:7b:03:cf:14:5c:59:1f:d2:6d:50:08:b3:be:48:da:17:
4b:f6:38:3a:c6:74:3e:63:ae:78:d4:27:51:e6:9a:7f:1a:54:
f6:29:b7:9c:01:75:99:81:c9:b3:29:ab:a9:51:1d:f1:dc:fb:
84:e6:1b:35:85:9e:ca:4b:02:a5:b8:c7:28:aa:9e:94:33:f2:
b8:6f:f3:1a:de:7b:0b:e8:47:c0:40:98:4d:09:39:4c:46:79:
04:fe:53:d1:6a:e5:87:17:54:b5:31:d4:2c:fa:d7:f7:29:d1:
92:33:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:04:44 2025 by rpki-client