Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: PZFSyJnOEX0cSLJLRLKUprpTTtPwYK7zJEpJei2JbJA=
Subject key identifier: 07:1E:DC:51:FD:CC:FB:D5:A3:76:F0:B5:FF:FE:27:F9:7F:82:42:00
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 019679B1C0CA2462B4A3D0160660BE49FC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 09F8
Signing time: Mon 28 Apr 2025 00:00:14 +0000
Manifest this update: Mon 28 Apr 2025 00:00:14 +0000
Manifest next update: Tue 29 Apr 2025 00:00:14 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: 2KR248KdV/pO8Kh8INDiFxyyt4A1IG9CJOy2x0eTXIk=)
2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:c0:ca:24:62:b4:a3:d0:16:06:60:be:49:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Apr 28 00:00:14 2025 GMT
Not After : Apr 29 00:00:14 2025 GMT
Subject: CN=071edc51fdccfbd5a376f0b5fffe27f97f824200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:ac:c3:e6:29:44:f3:70:f0:fb:61:16:ef:
97:50:97:ed:49:61:7a:21:9f:1a:ca:1a:d7:0a:b5:
12:58:07:47:27:46:86:a9:33:5d:9f:16:92:a0:6a:
90:5b:61:28:d4:1b:21:e3:2b:3a:47:3a:b4:1d:a1:
9b:5e:c2:7a:8e:d3:bf:ff:cf:fe:9f:3d:b4:32:1e:
03:a7:bd:be:05:4b:70:2b:fe:4f:4b:4e:d5:a5:aa:
7c:93:6c:4d:26:ed:6c:d8:73:64:8d:05:7f:0b:79:
46:38:63:d4:b4:4a:4f:ab:33:3a:70:25:64:86:88:
8a:d9:80:91:7f:51:8f:2c:15:08:66:f3:95:7d:1a:
68:67:98:60:a8:2c:ed:2b:51:4e:05:43:56:7e:eb:
8a:05:65:f3:5a:a2:5a:f5:af:bf:7f:1d:07:0a:55:
b2:0f:aa:22:ab:ff:c7:9b:cc:af:71:5f:aa:a6:26:
e6:e3:af:2e:1d:0a:89:c5:d0:2a:e4:ff:c3:07:f7:
6f:b6:45:81:f4:c1:1b:6f:5d:64:4f:60:fa:7a:29:
f8:a6:4c:3f:ac:f3:79:f0:46:14:f8:ad:d1:e3:35:
fb:10:a0:c9:ac:04:e1:0e:51:16:b5:5e:30:7d:33:
9d:c0:d0:13:e6:66:bb:ca:e7:cc:94:63:62:43:0f:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:DC:51:FD:CC:FB:D5:A3:76:F0:B5:FF:FE:27:F9:7F:82:42:00
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:93:ad:e6:68:5b:ce:02:70:35:11:97:fd:bb:2d:fb:13:1f:
dc:9d:4c:2a:b2:e5:80:49:31:c7:74:b3:02:47:d4:6c:11:d5:
38:0b:10:f9:fa:9f:d6:1a:9d:42:48:f0:ef:2c:02:64:eb:06:
40:14:66:00:20:c7:96:d8:d3:ba:ab:3f:8f:f1:c0:3b:dc:a5:
61:65:db:cf:49:49:ad:be:30:18:16:d2:22:79:7a:ea:4e:8a:
aa:e7:c5:36:4e:e6:f6:af:0a:36:27:e3:a2:d1:14:a7:37:e7:
23:3b:cb:50:75:9f:f4:f2:ca:25:ec:de:ea:b0:60:23:2f:d0:
ee:6f:bb:17:d7:23:b7:4b:12:21:44:6a:14:ef:7e:8f:db:61:
53:79:a5:4e:c2:9c:49:b4:11:f2:b8:fb:30:2f:36:77:85:0c:
40:c2:07:21:af:a4:a2:e6:90:11:33:91:d2:5e:03:5e:2d:e4:
eb:9b:f2:6c:be:cb:3b:ec:2d:8b:ab:cc:d5:2f:c8:24:d2:e3:
c2:f1:00:76:bc:a3:13:91:30:7d:0a:48:46:f0:4e:a9:ea:30:
1a:e1:06:c7:0d:ee:53:c8:c1:e5:f8:62:88:1e:77:d4:e4:90:
8c:ee:84:34:ab:66:d0:ac:dc:d3:89:55:02:0f:db:80:64:f0:
ab:68:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:48:38 2025 by rpki-client