Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: PeL1tlNuPrrWF5ueXHPVB6jhVtbNdqQ1f8TmP9AfhW0=
Subject key identifier: 1B:07:B1:47:A7:4B:0F:A5:6C:30:DC:E3:BC:23:C7:88:4B:7B:16:B9
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 01969D8829633FF1FF9BE204FD12A675D329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 0DFE
Signing time: Sun 04 May 2025 23:01:08 +0000
Manifest this update: Sun 04 May 2025 23:01:08 +0000
Manifest next update: Mon 05 May 2025 23:01:08 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: X/pvO/wQCBT6k4ckMlZrMY2pEaESowH/CznaKTI4ws8=)
2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:88:29:63:3f:f1:ff:9b:e2:04:fd:12:a6:75:d3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: May 4 23:01:08 2025 GMT
Not After : May 5 23:01:08 2025 GMT
Subject: CN=1b07b147a74b0fa56c30dce3bc23c7884b7b16b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:ed:56:c0:68:9d:9f:be:27:f8:fd:89:01:
0a:8a:4a:84:19:21:81:86:02:ef:87:75:0b:35:fd:
95:37:cb:38:aa:25:91:43:b2:f4:91:f6:26:f4:af:
e8:f4:b7:e2:7e:42:85:5e:9a:57:2a:57:4d:fd:2a:
c6:3c:0e:43:75:ff:c3:60:01:47:4c:71:be:28:ff:
21:8c:63:7e:22:07:32:c7:74:2c:1e:6e:d8:d9:cc:
77:a9:a2:0d:ca:42:f8:80:d1:a5:be:35:e0:aa:30:
43:b9:77:64:50:d7:6e:26:83:4a:ee:90:35:cf:d2:
a5:16:77:3e:7b:1e:fd:5e:18:c3:cc:3a:3a:1a:4c:
3d:9c:da:dd:17:c0:bb:25:9a:8f:1d:ad:a4:f6:1b:
77:00:b9:7c:5d:f5:e3:1b:e6:b6:0c:8b:f0:09:66:
06:21:00:80:fb:00:c1:96:c6:6b:aa:55:fb:3a:d4:
12:26:64:e3:98:ad:3f:85:8c:ea:8a:6b:de:0c:1e:
fe:b0:24:a0:cf:aa:21:4e:91:b5:46:a9:b1:da:a4:
35:5f:56:b5:18:9c:ba:eb:d8:77:09:ab:0b:97:44:
a1:52:c8:c9:3e:d5:ec:24:35:65:ed:f1:5e:e1:1d:
46:00:fb:20:e6:9d:42:10:b2:6f:af:75:4f:81:c9:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:07:B1:47:A7:4B:0F:A5:6C:30:DC:E3:BC:23:C7:88:4B:7B:16:B9
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:41:d4:e6:b2:9d:a9:0d:45:ad:1c:9e:fb:5d:86:fb:f7:35:
dd:1c:a0:b5:55:f5:dd:d7:28:4d:0f:32:bc:35:49:f1:aa:79:
d8:ca:24:82:72:56:45:7d:72:99:04:d3:4e:06:6a:96:2f:50:
26:d0:58:86:bb:fb:47:8d:5c:8f:b4:41:b8:cf:55:75:e2:01:
7f:95:43:9c:d0:e2:4f:ca:63:51:90:20:67:4d:d9:84:18:7e:
f7:4a:b0:a7:52:ad:36:42:d9:fb:51:d3:20:e4:fb:e2:5a:f6:
84:0f:91:5c:76:ed:de:ca:35:81:c6:90:6d:13:79:5d:a5:72:
64:c3:a6:b9:07:d2:bb:b5:bc:4e:d6:5b:c2:58:cd:b2:5e:ce:
00:73:15:13:4f:5a:ae:8d:22:6a:ac:5e:ce:27:e9:a9:fa:83:
9c:d5:52:27:c5:14:f8:e1:a1:32:b6:0f:c9:52:30:ba:70:01:
ac:25:63:54:96:54:dd:1f:02:33:e4:51:c9:24:e8:1c:63:e8:
48:9e:e8:52:01:4e:00:8b:02:cc:f2:4a:cf:19:d9:4c:0d:88:
5f:e0:6a:81:d8:44:c4:a7:6b:f1:fe:ac:b3:b3:88:e5:94:ad:
80:ea:9e:ed:0a:3f:62:1d:01:35:3c:49:0c:84:a0:91:8c:ba:
81:fb:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:29:43 2025 by rpki-client