Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: Ms6SF9KEihgJj/dHNUqrvkH4fWwWTxje4eMZanXlZ60=
Subject key identifier: EC:FC:7F:DD:29:0B:F4:85:39:4E:DD:68:13:3B:64:01:DB:30:78:9D
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 0196760D1F4D9D7AF175E2D1A2AB34E83628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0A1A
Signing time: Sun 27 Apr 2025 07:01:33 +0000
Manifest this update: Sun 27 Apr 2025 07:01:33 +0000
Manifest next update: Mon 28 Apr 2025 07:01:33 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: sZ7QFrSvH+4v01iZIO43cRuZENlK6SgkocPUQnxynWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:1f:4d:9d:7a:f1:75:e2:d1:a2:ab:34:e8:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Apr 27 07:01:33 2025 GMT
Not After : Apr 28 07:01:33 2025 GMT
Subject: CN=ecfc7fdd290bf485394edd68133b6401db30789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:3a:11:35:85:12:1e:87:73:6d:2c:c3:7f:
5d:63:21:93:98:cd:e8:b3:3d:d3:88:ed:53:fa:68:
27:23:95:37:0c:f3:eb:98:f8:87:bf:14:f0:02:6f:
2a:92:7a:f6:f3:e8:72:59:ae:0c:30:3d:56:c4:ed:
e5:f0:4b:9a:c6:e5:36:ad:0e:1e:f0:98:4a:ee:12:
3c:c5:52:99:29:cf:b5:22:4a:47:62:a2:82:2e:87:
92:e3:47:80:08:d4:ab:39:ce:f2:3c:25:a7:1d:e0:
16:f3:7e:d8:e3:88:07:e4:97:a3:11:ab:01:dc:3c:
95:2d:84:f6:f4:94:25:bc:df:5c:8a:eb:f6:d7:df:
33:16:59:3f:23:37:64:3d:76:c7:76:a3:67:0b:85:
37:93:fc:d3:11:ad:00:1d:be:0e:27:d3:e2:2f:37:
6f:32:f6:03:98:39:c1:a9:56:4f:c0:38:0e:29:f2:
30:a1:cf:d5:7c:1b:cb:9c:9e:19:b4:34:e5:e4:c1:
01:94:3e:36:01:de:61:e4:ce:df:ec:9e:4c:6a:06:
9b:94:c3:1a:ec:93:32:ad:0d:5e:0c:bd:da:f3:40:
e2:40:0d:68:18:9a:94:86:17:ba:cb:49:f6:86:5f:
d7:48:f5:2a:4e:db:e9:35:8c:3d:b2:11:4e:af:67:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:7F:DD:29:0B:F4:85:39:4E:DD:68:13:3B:64:01:DB:30:78:9D
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:08:9b:8c:c5:a2:85:de:34:25:0a:31:90:52:4b:aa:46:af:
b7:8e:64:24:90:e2:a0:23:6c:5f:a2:09:dd:e8:a0:cf:7d:36:
74:b5:3b:fd:55:d4:d2:99:8f:00:c9:9f:e0:28:1d:a5:2c:53:
bb:c7:e8:75:d6:ae:d4:f8:33:42:2f:30:6c:68:e6:a1:86:d6:
cd:3b:cd:e8:0b:27:97:87:75:3a:7f:59:b1:b0:ed:a1:7b:1a:
f3:3a:4f:5e:f5:eb:71:6f:62:76:d3:32:37:41:e1:53:ab:7c:
3e:b6:da:8e:b2:f2:6a:88:9f:b4:ec:ac:7b:a7:43:00:cf:b0:
50:03:e2:58:d1:f5:36:6c:4f:43:cc:56:3f:87:78:0e:39:bb:
18:19:81:8f:69:66:0a:40:13:a3:0e:35:4d:d0:90:58:70:1d:
1a:ac:f0:32:90:57:40:0c:5a:21:af:3e:46:37:33:bd:71:d8:
eb:60:eb:cd:d9:a4:66:23:b6:e5:24:03:52:3d:ac:50:56:27:
7f:10:e7:14:c5:16:7e:90:50:7e:78:74:3d:10:94:3a:4d:d9:
f7:6d:bb:77:76:9a:8e:07:af:b7:64:6b:02:97:9a:cc:10:36:
35:8f:01:af:e3:b5:da:a2:da:8d:bf:1c:f4:c6:4b:b4:8f:46:
57:87:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:17 2025 by rpki-client