Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: yvvcjgk3GzRNpYpLKR8LQFYr7fPEe9HxwSOEfW1ntuY=
Subject key identifier: 8A:F2:D3:0A:0B:47:D7:9D:50:49:30:3C:A2:6F:35:A1:A9:BC:46:21
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019685B5FDE16A177F55DED2B66D292D2206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 0243
Signing time: Wed 30 Apr 2025 08:00:18 +0000
Manifest this update: Wed 30 Apr 2025 08:00:18 +0000
Manifest next update: Thu 01 May 2025 08:00:18 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: fIdSn6DzmeXf/YkqHoY505dKuOX5cCY5zfR/jWMSFmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b5:fd:e1:6a:17:7f:55:de:d2:b6:6d:29:2d:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Apr 30 08:00:18 2025 GMT
Not After : May 1 08:00:18 2025 GMT
Subject: CN=8af2d30a0b47d79d5049303ca26f35a1a9bc4621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:e6:85:e2:67:b2:a1:c4:79:a2:50:04:5d:
ad:89:3f:9a:07:27:83:02:38:5a:7d:f0:f5:24:3a:
d7:21:dd:3a:d3:3c:e8:0e:67:17:98:e6:45:9a:dc:
07:ec:72:41:07:c1:da:5b:b5:19:cb:85:d6:b0:26:
fe:ed:d3:fb:07:f6:c3:e8:af:4d:c9:33:79:29:f4:
30:1e:a5:01:c3:dd:2f:f5:f6:fd:23:e7:00:65:e0:
c6:a7:17:8e:22:0d:55:e1:43:84:a9:bc:22:0c:43:
09:d3:e5:a9:8c:5e:dc:59:ff:60:69:e6:aa:a3:67:
3b:6a:a7:16:ba:42:5b:ea:e7:ed:b1:e5:44:e7:29:
53:fe:82:4a:3e:9e:f9:a2:71:7b:7c:b8:97:24:87:
ae:7a:f6:73:cb:31:96:6f:1f:bd:e0:fe:cf:13:76:
b9:87:d8:54:dd:e4:41:6a:46:24:88:d1:04:75:e4:
4f:03:47:a1:8f:4f:17:6a:f8:44:19:96:ed:67:13:
bc:b7:86:99:40:56:f4:67:24:99:63:f1:94:39:9b:
fd:b7:3b:75:de:ec:9f:f2:47:6c:79:ea:c7:d0:e0:
0f:d4:98:1b:e2:cb:6e:ae:39:7a:d5:e3:68:1c:34:
d2:c3:c4:1e:c3:de:10:2d:59:ab:ae:fb:9b:4d:b6:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:D3:0A:0B:47:D7:9D:50:49:30:3C:A2:6F:35:A1:A9:BC:46:21
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7b:38:a1:e5:83:11:9c:e9:a6:11:fc:4c:74:ed:3e:7f:d7:
9c:66:2f:58:0c:d4:57:8e:1e:e2:33:42:72:87:e1:56:42:83:
76:eb:0b:18:0c:bf:22:6d:0b:41:b3:8f:28:d3:54:ca:6a:f1:
f7:ff:b1:3b:fe:25:7d:52:ba:65:51:3f:65:fd:99:72:00:d6:
3c:db:90:18:47:a9:6f:fa:78:23:29:ab:a3:1e:86:28:9b:35:
d2:25:dd:6e:eb:4b:50:97:57:4a:b5:0d:22:ac:44:d2:aa:5e:
41:93:22:ce:69:d2:27:6e:fd:e3:e2:e3:1f:62:fc:5f:16:e6:
65:b1:ce:90:cc:35:9c:70:b2:7b:a3:29:7f:25:97:f3:1e:c6:
5b:dc:e3:2c:58:50:91:85:75:96:90:7d:f2:1c:d8:6c:cc:ce:
47:ba:65:8b:14:dc:17:75:7d:fe:0f:c1:7d:50:89:29:a4:45:
ed:c9:04:56:64:e9:9b:b4:0f:91:c9:40:49:75:2b:ad:bc:89:
30:6b:1c:f1:18:42:91:9a:04:4c:ed:5b:50:b4:f5:29:a0:a0:
6b:13:ee:22:1a:9a:20:e1:82:d1:28:21:b3:fc:4f:cc:2c:77:
86:93:ff:94:7e:85:3a:d7:fc:f7:c0:e0:9f:d8:c6:24:4e:6c:
41:3f:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:51 2025 by rpki-client