Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: av1ToDj+1TyC6X/ZK2CI9co3dAqD5AGVK010HdFkmmw=
Subject key identifier: 38:E3:A0:E0:6E:B6:22:D1:AA:75:5F:05:E9:45:15:0E:CF:29:A6:B6
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019679E921A44E6474E28B37F92AAD20CE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 0F96
Signing time: Mon 28 Apr 2025 01:00:43 +0000
Manifest this update: Mon 28 Apr 2025 01:00:43 +0000
Manifest next update: Tue 29 Apr 2025 01:00:43 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: LBQEhr2uSf2z2sClVM5Dzk+Nl2AUfeFbq/RKX/FKAoc=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:21:a4:4e:64:74:e2:8b:37:f9:2a:ad:20:ce:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Apr 28 01:00:43 2025 GMT
Not After : Apr 29 01:00:43 2025 GMT
Subject: CN=38e3a0e06eb622d1aa755f05e945150ecf29a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:92:25:45:86:f2:44:45:b7:1f:d6:00:44:
8c:10:f4:69:52:2b:1b:7c:4a:4a:ea:93:0b:b1:f8:
5d:cb:9b:d6:c3:9b:25:bd:98:93:12:92:12:77:ac:
dc:b7:62:d4:04:7a:af:99:f1:95:61:a0:b1:83:b4:
2c:b6:80:fa:06:15:2e:a3:b5:21:8c:34:10:40:1c:
65:5a:bb:f7:8a:34:d2:b3:7a:e3:19:db:11:15:f0:
95:88:ad:4c:24:a7:95:72:f5:d2:55:9a:4b:e5:0c:
a0:eb:ea:93:47:22:97:45:cc:58:fc:31:27:2d:68:
27:c7:a9:66:ae:bb:ac:0d:78:de:dc:75:44:58:bc:
30:37:e8:b5:6f:13:7a:ae:76:c1:fa:92:82:20:18:
91:eb:f1:63:cd:ad:ac:53:4c:c3:94:d2:d8:46:69:
dc:04:01:13:4e:f9:3c:77:d2:0e:ee:2c:65:1e:3a:
ec:f6:9e:36:19:24:24:5c:c8:f2:14:fb:97:a2:28:
e1:ba:5e:ab:09:d2:31:ca:e5:6d:36:ef:d5:a3:cf:
35:a3:d6:34:8b:fc:2a:92:7a:6a:20:fe:d7:e4:67:
94:b9:57:34:07:2d:1e:f2:40:57:ab:dc:75:48:ff:
34:c2:13:7c:ec:29:db:74:ac:72:05:c9:df:7d:3f:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:A0:E0:6E:B6:22:D1:AA:75:5F:05:E9:45:15:0E:CF:29:A6:B6
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bd:c0:b7:c0:cd:51:c9:3a:24:be:fe:91:14:ed:c7:df:13:
31:c2:bc:04:0a:f7:b5:2d:37:b6:a6:13:20:24:76:0e:c2:43:
48:22:43:73:f7:6c:cc:3c:0a:3e:dc:5f:3e:c1:06:d0:01:cb:
ef:4a:a3:6d:1c:c1:09:cf:98:a6:2b:14:ad:9d:54:88:49:9e:
4b:37:20:90:22:91:06:4d:55:f5:dc:fb:de:3f:c1:12:5f:51:
7d:de:3b:f9:98:9c:95:ec:a7:22:13:99:22:d5:e0:72:cb:e6:
36:d5:d5:88:1e:3a:b1:29:b7:5d:de:f8:58:4d:44:99:8b:c4:
1c:7a:eb:20:86:bc:65:32:17:7c:e3:29:ab:6e:e9:8e:d7:83:
5a:6f:0b:25:aa:ba:96:fc:e9:c2:d8:cf:76:89:1d:6b:cf:b1:
25:8f:e7:bc:88:9b:e7:76:0c:58:33:30:a7:05:b6:74:46:91:
77:35:4c:24:91:9e:a8:b2:3a:18:49:8a:e6:53:38:f8:55:ac:
f6:ee:08:70:62:6b:9e:7f:06:39:0f:31:ac:a0:8b:04:fd:69:
19:c3:f7:1b:df:b0:aa:09:87:2b:06:b5:be:ad:0d:5d:7f:66:
d1:a9:70:d2:76:64:99:44:80:63:21:9f:42:ff:4e:1a:ef:b9:
ec:ce:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:26 2025 by rpki-client