Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: 7U5j1sVqnKl8EE5se6Gap5cyCh8vxQSem+phTvlNuS0=
Subject key identifier: 43:90:77:8D:99:72:8F:8C:CF:4A:71:89:50:22:77:01:C2:CE:FF:8F
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019674C253A0C586941FC35FB512546A2929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 095B
Signing time: Sun 27 Apr 2025 01:00:14 +0000
Manifest this update: Sun 27 Apr 2025 01:00:14 +0000
Manifest next update: Mon 28 Apr 2025 01:00:14 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: lH21Q8mAI1HSaU6W/PksZa1xKOBlbolqIJ3JSdRq1Rk=)
2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:53:a0:c5:86:94:1f:c3:5f:b5:12:54:6a:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Apr 27 01:00:14 2025 GMT
Not After : Apr 28 01:00:14 2025 GMT
Subject: CN=4390778d99728f8ccf4a718950227701c2ceff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:87:70:1d:cd:73:c3:87:b1:3b:0a:1a:e7:db:
f8:16:81:c5:67:3a:7c:78:90:1a:51:f8:d3:58:44:
6a:84:6f:3c:b8:e2:93:1a:11:89:51:41:50:83:c6:
02:0a:2b:2a:b7:9a:67:a3:e1:b8:36:5d:51:a7:70:
d8:49:86:fe:ab:0e:2f:df:71:e0:b5:89:3c:e5:34:
22:27:14:bf:33:98:48:91:1d:32:70:0b:e5:30:41:
b1:69:bb:67:d8:8d:cc:82:2e:ff:85:32:7f:93:55:
dc:c1:bb:28:50:13:95:9b:10:62:d3:ad:b2:87:87:
89:b7:3e:16:48:ad:2f:cb:fa:58:71:71:61:b7:3f:
72:fd:35:25:a3:eb:7c:e4:7c:3f:fc:10:ad:9f:73:
c9:16:f0:71:fe:cd:82:fb:f5:f9:da:56:03:b1:bf:
a3:87:25:5c:25:3d:19:af:e1:b4:29:0c:a2:c4:f0:
98:2d:e9:39:60:83:66:b0:2c:00:85:f7:0d:a8:b1:
d3:eb:07:af:86:58:62:96:85:d4:ad:4c:d5:57:7f:
4d:0a:da:1d:56:03:53:95:00:50:4c:6c:de:d4:db:
87:62:95:91:46:79:bc:61:8d:8d:f3:ec:3c:ef:49:
42:c3:22:1a:99:37:8b:cc:4f:9d:50:c0:b1:36:9f:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:90:77:8D:99:72:8F:8C:CF:4A:71:89:50:22:77:01:C2:CE:FF:8F
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:a9:8a:d5:0e:d5:57:59:76:fd:93:bf:f8:db:b3:1c:68:
1c:83:7c:b9:a2:66:a2:ab:35:06:89:21:1c:6e:8f:85:3b:68:
54:1e:2e:7d:9a:74:c3:e7:7f:88:5f:da:4c:e5:d3:87:ec:35:
5f:fe:a9:9f:53:95:74:6e:78:a2:5e:5d:98:b3:75:8b:6c:03:
c9:31:4f:19:4a:2c:ec:c0:ce:4a:90:2a:04:17:db:83:cb:0a:
6f:53:4a:25:63:b7:88:fa:d2:fa:d9:77:d1:96:e7:0d:b8:70:
d7:34:cb:f0:47:7f:76:6b:4d:b5:db:de:83:82:1f:f2:57:9e:
b2:da:85:13:53:91:78:5f:ca:c3:df:50:40:18:80:79:c1:d7:
e8:45:6f:f1:81:de:3b:70:79:a5:31:3d:4c:7a:62:8c:f0:73:
9d:15:36:85:87:eb:74:ca:b2:db:55:02:7a:bf:0f:ad:3c:1f:
64:a5:80:b5:7b:90:e2:cf:2f:3b:18:ab:10:c3:c3:91:ba:2f:
96:58:e5:d8:6f:98:09:a9:22:52:b4:3d:69:68:d0:38:95:59:
eb:48:4d:17:e2:c6:f7:7a:a7:c9:a9:ca:ce:8c:a6:68:7d:1b:
da:f8:b6:e1:ba:92:69:65:d0:45:c3:b1:40:21:61:48:9b:4b:
71:f2:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:52 2025 by rpki-client