Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: Ap+1bCDRnTraO49AoELjzx5BcGXf8uGbN45hIN8Z2jc=
Subject key identifier: 72:1C:F9:91:02:8B:A9:18:6D:37:14:23:8E:4E:0E:83:60:D8:72:01
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019682B507D7BA851282D4D0D0118DC3685B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 05C4
Signing time: Tue 29 Apr 2025 18:00:24 +0000
Manifest this update: Tue 29 Apr 2025 18:00:24 +0000
Manifest next update: Wed 30 Apr 2025 18:00:24 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: 6vG+vm6rFBZIden4zdTrAQTSczaNdApN8ZHWk8NePkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:07:d7:ba:85:12:82:d4:d0:d0:11:8d:c3:68:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Apr 29 18:00:24 2025 GMT
Not After : Apr 30 18:00:24 2025 GMT
Subject: CN=721cf991028ba9186d3714238e4e0e8360d87201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:ae:7d:7e:2c:51:ff:79:4c:32:24:cf:36:
7b:fe:ce:69:01:b5:8d:9b:d5:e5:9e:c5:c7:6d:9a:
35:1c:10:36:9d:e4:a7:bc:f5:80:c8:70:29:12:a6:
24:d2:27:34:23:3a:75:8d:12:f3:54:b3:6a:1d:3a:
99:8e:d6:63:ca:e4:18:34:22:66:4a:9e:c2:69:f4:
d0:f4:c8:f5:65:ee:b2:09:18:c1:01:8c:38:8b:46:
ce:04:ce:12:bc:d8:89:91:38:6f:9f:ea:7d:98:7f:
6c:4e:b6:8d:67:ab:c3:87:67:17:b9:a6:6f:6b:46:
ef:ac:6f:9e:3f:6b:ce:d4:52:d0:ff:20:8b:32:4d:
9b:52:53:82:a1:2e:2a:c4:62:7d:01:1c:82:cc:55:
51:b9:b0:af:8f:3b:ff:b2:46:2a:31:f8:b4:83:49:
4f:24:27:e2:5a:71:10:12:28:68:96:87:b6:3b:cf:
25:bf:85:35:82:ae:43:fe:a4:67:91:fe:7c:26:19:
a8:e3:45:0e:ff:8f:17:fb:7b:11:a8:4a:55:a0:4d:
e7:4a:a2:98:80:a4:59:44:75:68:ab:14:da:d7:6a:
d2:4a:54:23:9e:f4:58:3d:34:b5:b7:54:f5:cb:73:
32:a7:c5:54:77:e9:dd:54:6c:b2:17:39:00:f9:59:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:F9:91:02:8B:A9:18:6D:37:14:23:8E:4E:0E:83:60:D8:72:01
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:ab:bb:b2:68:1b:32:73:61:4d:bb:1d:27:44:bd:c7:52:
5e:8f:17:0f:e7:c1:a6:31:71:9b:81:c3:67:09:11:e5:a9:95:
52:45:39:0b:71:6c:bb:44:04:62:15:3b:37:db:27:53:c6:45:
d0:1d:d9:6a:7b:25:29:ad:5d:cb:a8:af:b0:4c:aa:58:04:0b:
c5:a1:80:57:6b:a2:e0:91:6b:36:a1:3e:e7:ff:ad:f0:1b:71:
c2:8d:0a:50:8f:08:aa:13:a2:82:52:ce:a5:b3:8f:27:d9:e1:
8c:03:ce:0e:0f:06:10:f3:77:4a:6c:73:5a:fa:b7:78:1d:cd:
f2:4e:4d:b3:a4:24:45:2d:c8:cd:c4:aa:54:ad:31:d8:a7:e7:
1e:da:74:e6:49:36:ce:2e:98:56:c6:5b:1e:1e:f6:8a:c9:fe:
b5:90:c0:fc:64:aa:c1:a1:92:22:a2:45:07:cc:57:29:c2:f8:
3e:86:fd:e8:ea:c1:b8:c9:b2:63:54:6a:91:b6:31:c3:cf:ce:
69:de:ef:e1:cc:3a:b8:1f:b4:1f:98:4e:01:36:22:49:3e:e6:
2e:5d:f1:83:b0:d2:70:3f:0d:8e:55:d6:54:7d:17:73:87:43:
44:e9:a2:94:11:66:83:7c:e6:7f:bf:72:99:11:15:ef:c8:83:
65:06:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:28:13 2025 by rpki-client