Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: 4WhH2vETjRb3xCgoMfLF2KxAsiLDYhayOTX5FTDyoRc=
Subject key identifier: BF:D3:5C:A6:BB:02:C8:C1:8C:04:0F:1C:38:94:13:52:92:F9:12:EA
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 0196797B6DDB912FC3B2BFCFB6B03E7E61E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 1455
Signing time: Sun 27 Apr 2025 23:00:54 +0000
Manifest this update: Sun 27 Apr 2025 23:00:54 +0000
Manifest next update: Mon 28 Apr 2025 23:00:54 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: Q76wZt+QQYRTrFfhoOk0PyaVWzufxydEozaI3z+u6c8=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:6d:db:91:2f:c3:b2:bf:cf:b6:b0:3e:7e:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Apr 27 23:00:54 2025 GMT
Not After : Apr 28 23:00:54 2025 GMT
Subject: CN=bfd35ca6bb02c8c18c040f1c3894135292f912ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:01:57:81:ae:1c:7b:41:80:67:e5:9f:0e:
84:da:46:06:47:88:f9:c2:ad:34:09:e2:71:ba:3b:
d5:8a:8b:bf:09:9d:78:d3:48:43:3d:52:11:c6:91:
61:85:3b:3c:ee:e5:ae:66:1a:4e:f7:54:e3:74:46:
c2:71:75:0d:02:4e:43:64:e9:77:6c:34:b9:ae:86:
4c:17:7c:2d:e4:f7:47:17:4c:26:50:7d:bf:93:26:
c3:aa:06:7d:e3:17:20:bc:23:3e:ee:67:8a:90:c9:
3c:03:e4:8a:41:fc:14:10:ba:47:ff:06:b9:65:34:
11:97:48:8f:6d:e1:db:47:57:40:35:b4:1f:64:83:
e0:fc:c1:81:8c:ea:c0:34:b9:49:fe:0a:2e:58:f3:
26:5d:2e:ed:49:5e:58:07:8d:51:10:fe:64:75:a5:
ab:6b:e7:44:54:12:63:98:9f:db:98:5f:c9:a7:03:
eb:38:26:17:b1:2e:de:2b:03:4b:a2:51:0e:78:2c:
52:25:04:86:85:46:96:b0:98:5b:36:d7:2a:7b:a4:
cb:b6:58:dc:26:bf:dd:5d:5d:f2:2d:2b:3a:fe:a1:
aa:ae:cc:1d:20:74:16:0d:03:01:c4:70:8f:40:c8:
6c:0d:32:2b:ff:ac:38:45:26:eb:49:01:c3:bb:48:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:5C:A6:BB:02:C8:C1:8C:04:0F:1C:38:94:13:52:92:F9:12:EA
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:f9:24:c7:11:de:c5:69:73:bb:f7:f8:be:0b:c0:24:1d:
e6:fe:6b:52:0b:31:de:4d:11:c9:62:7e:f1:dd:c0:b8:ba:15:
82:ea:7d:e2:59:86:3c:f7:12:72:4a:f6:b2:33:df:3d:7e:be:
e7:46:c7:4e:d7:3a:f8:e3:da:ad:fe:b9:4c:0a:df:cb:29:3b:
04:59:e2:69:6c:36:79:bc:47:e6:3e:56:56:bd:ba:d7:41:db:
d1:5d:39:2a:29:0a:fd:57:4e:87:ab:8c:3c:53:34:d2:bb:0a:
b6:ee:7e:d1:fe:28:20:b5:83:0a:5f:62:88:d0:68:35:11:e9:
2e:f2:cb:26:5e:35:f3:e0:df:01:3c:ff:8e:85:9f:0f:7d:7f:
94:e3:f9:f1:91:8c:51:c9:31:8e:52:e2:26:bf:b5:0a:2d:31:
55:9f:af:a6:d5:4c:85:7e:30:52:2b:ad:73:f4:70:c5:6a:53:
2e:4d:6d:c5:2b:cf:6b:d0:d8:99:3b:15:7e:99:2d:ed:52:3f:
82:39:39:e7:d1:83:d1:9b:36:08:43:69:11:8f:e2:be:7f:3b:
25:ee:65:ae:9f:3f:d9:74:eb:d0:e9:9c:98:31:a8:17:7e:3a:
e5:5d:80:e0:72:c8:8f:ba:14:1d:9e:2a:39:9d:f9:ad:dd:21:
89:98:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:40:25 2025 by rpki-client