Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: 1YWP1ovMgIKw6xAuR0I0Rlc6opxzaM5s14Lwf9yFBMc=
Subject key identifier: 0F:63:53:D7:5E:26:A7:14:E5:5F:81:3B:3A:A8:F7:87:9C:56:B7:E0
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0196771EDE950875C5C1F644230622E5579D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0305
Signing time: Sun 27 Apr 2025 12:00:33 +0000
Manifest this update: Sun 27 Apr 2025 12:00:33 +0000
Manifest next update: Mon 28 Apr 2025 12:00:33 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: YT0srjmKpAzo12UZESeHEeWVGvdRFroh/8FBCNjhoKQ=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:de:95:08:75:c5:c1:f6:44:23:06:22:e5:57:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Apr 27 12:00:33 2025 GMT
Not After : Apr 28 12:00:33 2025 GMT
Subject: CN=0f6353d75e26a714e55f813b3aa8f7879c56b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:10:5b:7c:e4:51:54:99:71:32:64:03:ff:
bc:d7:ce:c6:d4:5e:46:14:25:62:7f:b6:41:f2:48:
c4:9e:05:f1:81:10:28:11:dc:3a:fa:94:ab:41:98:
82:92:88:ea:00:9c:0b:d2:75:48:3f:67:cb:9d:29:
9c:94:6e:7b:54:3a:50:53:74:2b:63:86:53:a7:6a:
a4:65:9a:88:53:ae:51:1f:f7:34:8c:98:d2:b4:a5:
f9:e2:3f:9c:d3:e0:79:82:f1:a8:e1:1f:6d:6b:ee:
3f:17:44:60:b5:00:25:ea:4d:2d:c7:1d:c5:1e:c7:
ca:eb:7e:a8:ce:d5:39:93:e6:2a:b0:08:09:e7:f4:
c6:af:2e:91:6d:6c:37:71:fb:94:53:88:94:cc:9a:
b3:e0:f4:4c:9d:09:cd:cd:a9:23:85:ff:66:ce:7b:
a4:e9:e6:97:36:1f:cd:67:c8:f9:44:a1:36:bf:e5:
c6:02:5b:09:9d:8c:89:e5:71:f4:2f:00:89:6e:dc:
68:74:ff:aa:66:c2:c7:c1:fb:64:12:37:ab:bf:97:
79:2f:c6:7b:f1:7a:b3:3e:b2:96:0d:4b:6e:b4:a6:
f2:87:ac:fe:3b:d8:fe:a6:62:96:19:84:6e:6d:65:
c5:8b:6a:2e:ba:bf:df:27:56:a0:16:6b:54:d3:7a:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:53:D7:5E:26:A7:14:E5:5F:81:3B:3A:A8:F7:87:9C:56:B7:E0
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a2:e8:8a:4d:cd:ab:c9:ec:d8:f5:5e:76:ff:07:82:65:1d:
ef:c1:8f:77:77:1a:af:66:f0:b8:b8:fa:4b:8a:8f:68:fc:00:
3e:52:d3:eb:81:4c:c0:7d:af:63:b4:85:8a:e4:4b:1b:0e:79:
d3:93:0a:a3:04:0e:13:5f:fe:df:d3:94:76:08:0d:b9:06:8e:
97:83:4a:e8:e8:20:66:67:df:50:20:85:92:9f:eb:bf:b4:0f:
0b:96:b5:ed:b1:1e:3a:95:b3:b8:f5:35:72:b7:f0:e4:92:d5:
d5:c2:9c:49:68:15:04:76:90:7e:6c:c4:79:1d:11:35:5d:6f:
3a:ad:11:c8:9a:56:70:73:d3:1b:79:a5:5c:59:3d:2d:9a:84:
71:c2:80:94:a8:ab:f9:89:4f:02:97:47:14:aa:65:75:91:2d:
08:a5:8f:d7:ab:ec:59:5e:cc:86:1f:f4:a7:fb:b1:cd:85:6b:
08:5b:a0:15:86:f2:98:68:85:8c:70:13:1d:ca:89:a8:10:3d:
fa:ee:ee:2c:66:f3:f6:a8:c4:78:45:d3:86:c1:6f:6c:8e:00:
52:f0:57:1a:c6:c3:c0:c2:ab:e9:74:ac:93:a5:c1:35:59:15:
0b:55:3e:36:57:1b:36:53:f0:3e:9c:9b:0c:68:69:4b:f0:96:
3c:1a:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:27:07 2025 by rpki-client