Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier: OMZn3qhv26Lndd4M9r8vWkL8Mc+U2RmAj8Q8KMKW6uA=
Subject key identifier: 3A:57:1F:37:6D:39:15:96:DF:D4:60:0F:88:A2:C3:03:3B:60:FE:8C
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019682EC491C5F530BE76E491CB7BEF6BB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number: 02A8
Signing time: Tue 29 Apr 2025 19:00:45 +0000
Manifest this update: Tue 29 Apr 2025 19:00:45 +0000
Manifest next update: Wed 30 Apr 2025 19:00:45 +0000
Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: AYgrmEUQ8y+4SIjQ67SnK8KHeo9L3GPXfZsPxqaOCbo=)
2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
3: qhXB5I3L_1gebx9uWPle22yXSzs.roa (hash: 1Bibbr3y/zyc6e3zTUWDLu/M4E9ABrzuKYe3XtB8cLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:49:1c:5f:53:0b:e7:6e:49:1c:b7:be:f6:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Apr 29 19:00:45 2025 GMT
Not After : Apr 30 19:00:45 2025 GMT
Subject: CN=3a571f376d391596dfd4600f88a2c3033b60fe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:d4:cd:87:66:74:77:3c:95:14:21:d7:ac:
a9:44:ff:7c:57:f9:0f:b6:f0:5b:7f:5c:a5:d4:69:
74:28:c0:cf:d5:3e:69:0d:af:78:1d:85:7b:b4:e5:
22:54:d1:d4:1f:7e:30:8c:f9:e1:55:70:42:61:10:
8c:4a:b0:a6:a5:08:1c:4d:d8:68:b7:fb:d3:7b:da:
37:7e:c0:0c:aa:aa:c6:63:8b:51:d9:8a:cb:1f:31:
07:4f:e3:00:74:cd:fb:4f:a6:62:b3:17:70:5b:ae:
e0:e4:86:15:97:1b:a8:76:bc:cf:a4:98:d9:10:0f:
1e:d4:73:df:21:2e:e0:ae:04:5b:33:e1:0d:ac:09:
65:20:2b:eb:c5:da:e2:b5:84:25:1c:0b:65:4e:e6:
fc:a3:f2:31:88:7b:02:76:1f:ec:b2:b3:13:0a:70:
af:39:a1:04:ad:2c:7e:33:6b:89:05:57:95:cf:b4:
88:ff:26:3a:ef:d0:a3:8a:4a:a1:c2:9a:72:9e:8a:
60:03:0e:66:69:f1:70:32:19:dd:79:6e:14:01:09:
c7:71:1a:9f:28:10:5d:3b:36:bd:a4:a7:c1:bd:06:
06:a6:c0:60:53:10:d0:ac:0e:89:11:e8:39:29:d1:
98:68:96:06:90:14:df:f9:28:63:0f:42:eb:0f:e4:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:1F:37:6D:39:15:96:DF:D4:60:0F:88:A2:C3:03:3B:60:FE:8C
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d7:f4:3f:2f:b0:94:2c:ad:8f:69:43:b4:88:e3:a9:08:16:
53:cb:4d:8b:2a:ae:7f:ad:7c:12:39:54:0e:ab:3f:7c:da:29:
7c:a0:af:8f:9e:d5:87:5f:db:bf:d8:f2:a6:6d:e1:5a:6c:5a:
0c:18:60:5d:b0:d5:86:d5:0e:a6:47:a6:73:36:01:52:73:39:
36:2b:cf:4a:40:a5:85:f8:72:82:81:66:d3:4c:89:61:33:3f:
6f:ff:f3:7d:c5:af:fb:f3:43:5c:f4:e4:6c:b2:cc:9f:dc:40:
5c:db:38:09:d6:5e:8b:b4:ba:ca:2f:7d:33:bc:43:97:e1:71:
2d:b5:14:9e:cc:1f:14:c2:db:cb:4f:0b:25:1f:97:c7:74:02:
61:ba:42:ea:28:b8:ed:1a:c3:19:a8:d8:16:00:fd:7e:1d:53:
e8:19:71:48:fb:ca:33:07:b0:28:6d:0f:f1:4b:54:1a:6b:1c:
64:01:0b:6b:1f:67:12:fd:3e:f4:5b:2f:4b:26:00:b7:cf:3d:
8b:96:99:23:09:4e:6c:61:7a:fa:50:cf:d9:12:6e:02:6c:d9:
3e:07:74:ee:64:48:2b:74:44:b4:11:b7:b0:e1:03:23:f6:d8:
a2:d2:6a:78:8f:30:00:5b:12:e3:3d:bc:29:da:62:de:88:14:
f8:db:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:35:02 2025 by rpki-client