Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: qS8rUSRqI6vN/KgVDLE1T0WNBWILpfoMBO6DrZmPVmw=
Subject key identifier: AA:8D:F9:EE:A6:EA:6E:B5:3A:2F:A3:46:06:17:D8:38:A2:46:21:8E
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01968058DEFB34BD6D29001416229E7226D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 13BB
Signing time: Tue 29 Apr 2025 07:00:29 +0000
Manifest this update: Tue 29 Apr 2025 07:00:29 +0000
Manifest next update: Wed 30 Apr 2025 07:00:29 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: 28GVhNT1PIjFHkHnjJuTP650ssbfPuL3Nn7GekUHzqY=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:de:fb:34:bd:6d:29:00:14:16:22:9e:72:26:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Apr 29 07:00:29 2025 GMT
Not After : Apr 30 07:00:29 2025 GMT
Subject: CN=aa8df9eea6ea6eb53a2fa3460617d838a246218e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:0d:e2:a1:92:f7:61:cf:a4:31:a4:c3:de:
84:ec:b6:c9:17:a0:e9:c0:55:7c:ac:16:8e:5b:f0:
38:18:14:bc:5d:a9:89:e9:32:b0:dc:2b:f2:d1:9a:
b4:bb:f9:1a:39:da:01:48:e1:2b:14:22:e3:5f:5b:
71:37:fe:06:ad:70:df:a8:15:22:ff:7f:21:ef:c9:
c0:98:df:62:cc:ad:cd:09:b1:e3:d5:e9:72:be:44:
3b:9d:15:f2:24:94:f7:55:c4:4e:73:db:b1:ae:d7:
92:87:c7:9d:b7:36:90:65:88:25:62:48:f8:c8:30:
f5:26:10:d8:7a:1c:dc:a9:1a:d8:64:09:71:40:72:
3c:fc:a9:58:e8:62:ef:56:eb:70:73:54:d6:91:61:
81:4c:26:69:a9:6b:47:16:82:8b:38:2d:e7:bc:5f:
91:68:3a:77:db:8f:d4:a2:b1:30:7f:74:35:f9:76:
05:f8:a5:97:24:e4:48:b5:8b:e5:59:52:84:7d:b1:
4d:cc:20:ef:a0:1c:99:28:cb:10:84:2e:d4:ba:9e:
dd:3d:2a:da:15:5d:cf:da:f6:2a:5c:94:84:f1:e7:
b0:62:b0:e0:14:83:3b:7b:44:6c:82:69:47:2e:07:
f8:56:56:3a:7a:b7:a3:9a:21:af:05:33:b6:63:8f:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:F9:EE:A6:EA:6E:B5:3A:2F:A3:46:06:17:D8:38:A2:46:21:8E
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c7:45:62:5f:b3:54:38:40:65:9d:9b:de:49:c2:65:74:6e:
af:6b:8a:a0:6e:65:9d:fe:86:75:af:96:51:29:37:4a:fd:31:
2b:09:af:36:32:83:8d:d7:9a:5d:58:77:ef:18:f0:68:3a:36:
a6:75:c3:d1:99:01:73:5f:8e:45:61:76:07:8f:55:a3:78:18:
30:e4:70:33:8e:08:d2:b3:19:14:1a:25:7c:14:ad:94:8f:e9:
f8:a0:f9:6c:7f:0f:5a:1d:8c:2b:0e:be:d6:4e:aa:30:78:ee:
dc:d9:e2:58:f4:0e:6a:cb:18:e8:a6:13:4d:11:4d:18:71:a8:
75:5e:58:cf:c5:47:36:2f:ad:76:35:1f:72:58:f8:80:70:01:
70:3b:87:60:d8:b9:a4:c8:e5:ab:69:fc:a1:a7:a7:68:d6:de:
23:b1:a2:a6:f0:d9:5f:7e:14:5d:05:07:0d:2b:af:4b:2f:76:
58:91:31:49:fc:35:79:48:32:17:98:64:2e:d8:91:1b:57:34:
5e:c7:5d:3d:8d:42:cd:ba:b4:13:17:ee:9a:dc:08:4d:64:74:
21:e7:37:1f:28:ed:79:43:35:6e:cf:d7:43:1c:a1:a7:9f:48:
d7:69:d7:51:5b:3a:e3:04:2d:e3:0b:3b:97:c2:1b:02:d3:ab:
6b:23:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:05 2025 by rpki-client