Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: VUgLc9mEE2lRkYW6DLUMilIjRHnsNmEgOz74IyyKLAc=
Subject key identifier: 5A:72:76:5F:81:4C:D4:7D:B8:6B:D6:E8:87:CD:A3:7A:0B:AF:4D:7C
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 0196918375A4F1856675F810015D5B8B1573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 15:00:33 +0000
Manifest this update: Fri 02 May 2025 15:00:33 +0000
Manifest next update: Sat 03 May 2025 15:00:33 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: WKNlXdjTSB3Re77ep7cbYgAJlFzXKQMH5pHSSqFVHMY=)
2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:75:a4:f1:85:66:75:f8:10:01:5d:5b:8b:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: May 2 15:00:33 2025 GMT
Not After : May 3 15:00:33 2025 GMT
Subject: CN=5a72765f814cd47db86bd6e887cda37a0baf4d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:a7:b7:81:a9:0d:95:bf:76:a7:d5:2a:95:
b2:54:5c:41:19:54:89:33:67:84:af:29:7d:26:cb:
81:b7:c4:a1:5d:93:0e:c6:74:31:8e:2c:00:65:d6:
34:4c:f8:b0:30:13:7c:db:33:37:b0:42:92:b3:b6:
37:d5:4e:9b:af:e7:3e:bc:2d:b8:6a:3f:bc:67:be:
53:16:12:d7:ed:29:f0:99:c4:51:ba:ba:c5:9e:d2:
23:7f:f7:fa:e1:20:0e:c5:32:86:fe:97:b5:3d:47:
b9:50:6c:23:51:8b:4f:17:95:f6:e5:43:f0:29:7e:
07:d3:2b:b4:38:e1:37:d7:01:c2:1b:3f:0d:f5:38:
30:b4:16:63:9b:46:fb:41:1d:10:22:53:44:80:0b:
e3:de:b1:a9:2e:69:87:8d:6c:c0:d6:3b:25:e9:88:
15:b5:8a:26:89:e8:a6:9e:36:66:70:79:04:ea:25:
a2:c4:13:c8:a5:47:c2:f8:69:34:a0:09:14:a3:ec:
b0:29:98:7b:7d:d7:63:51:e2:48:14:4a:f6:e0:1e:
1d:58:98:ba:b5:da:60:39:27:54:26:ad:cd:41:95:
b1:c3:0b:59:61:ea:81:6b:7d:d0:f0:f7:d1:9d:74:
a5:e1:ba:91:68:a3:25:96:e1:30:3f:93:b1:1d:bf:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:76:5F:81:4C:D4:7D:B8:6B:D6:E8:87:CD:A3:7A:0B:AF:4D:7C
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:63:72:48:cf:d9:73:27:ef:6d:84:d2:2b:c7:e2:c1:7b:a7:
68:8b:f7:68:30:34:2e:3c:e3:2a:66:88:83:92:e3:9d:2c:b6:
27:b8:9b:ce:9c:9f:b5:51:87:cf:63:02:00:f7:69:14:5b:48:
1c:2e:b4:95:b6:bb:82:db:40:a4:7f:4d:f3:68:dd:a1:5c:2b:
b8:ea:ac:12:91:42:60:b6:0a:84:bc:46:3b:d5:98:fe:5f:30:
b4:96:93:f6:2b:f5:22:f7:f6:af:ad:ce:4d:b4:3c:08:d7:6e:
91:44:35:ce:04:64:b3:7c:a1:c9:55:a1:0d:89:2c:a2:44:cb:
6e:34:80:2d:5f:92:21:33:08:6a:e6:84:62:2e:b6:d9:61:8c:
90:e9:e4:43:82:4f:a5:b0:54:d4:a5:9d:8d:83:1c:08:e5:34:
32:72:d6:3c:b5:3f:10:b4:dd:56:f5:8b:28:a3:b1:67:79:a1:
b0:4c:26:ea:2e:4f:59:01:a5:8e:62:f9:16:74:4f:a6:24:f7:
1d:36:54:03:7c:c5:2e:2b:e0:06:ae:af:97:cd:8b:06:39:8a:
53:f3:32:67:a7:1d:8a:5d:e2:03:b5:23:98:f1:77:d8:0a:2f:
93:e3:e2:2c:2d:3c:34:a8:9e:f3:05:36:dd:2f:a2:e1:ed:8d:
30:ee:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:27:31 2025 by rpki-client