Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: OZy4Og7zzw9hDF7NLvLDKS2eGwktojlXauyE0Z5oqZE=
Subject key identifier: CE:01:61:5A:A7:82:5A:8A:6C:5A:8B:CE:23:56:5D:C7:94:CB:65:2B
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 01967BD822573A0DFE4B8B671F55791A87F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 10:01:24 +0000
Manifest this update: Mon 28 Apr 2025 10:01:24 +0000
Manifest next update: Tue 29 Apr 2025 10:01:24 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: AntnO5aO6GD5Xoqwf3d91nd9PCB7ZxAsVWw3jpnzUb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:22:57:3a:0d:fe:4b:8b:67:1f:55:79:1a:87:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Apr 28 10:01:24 2025 GMT
Not After : Apr 29 10:01:24 2025 GMT
Subject: CN=ce01615aa7825a8a6c5a8bce23565dc794cb652b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:03:44:4c:72:b6:02:91:90:da:b4:51:dc:
a9:5e:86:aa:13:f1:44:b5:e0:76:d9:0e:f0:a4:e0:
69:23:ce:38:59:7c:99:af:52:76:85:1a:88:f0:eb:
ab:0e:16:50:da:cb:13:ff:8b:3c:77:35:0d:74:28:
dc:65:18:60:df:80:79:57:85:1a:d9:0c:5d:b2:1b:
cc:15:20:7a:67:42:3b:5c:c9:54:1b:70:9a:e5:dd:
36:4a:50:69:67:b2:19:fe:be:1a:ad:36:a3:7d:bc:
dc:63:3a:a9:8e:32:98:43:70:5b:4b:e7:c4:35:76:
d1:a2:d5:7e:52:f9:e3:fc:f0:13:6a:11:15:35:16:
57:fa:b0:3f:e9:42:23:6f:90:fb:d8:de:8a:83:8f:
5f:13:b5:8c:d6:7d:e6:19:d5:6b:46:bd:06:d3:5d:
5d:3c:93:1b:95:ea:18:de:86:f0:1e:9c:10:34:c5:
9d:bd:88:7c:40:17:41:4f:eb:55:cd:be:69:b3:eb:
af:94:a1:23:32:06:6f:53:2c:c4:c8:bf:e6:58:48:
2e:44:61:b4:5a:a9:50:81:30:00:ec:7d:d6:c5:60:
f5:2d:77:8f:c9:b5:aa:5c:a0:c3:be:82:71:36:0d:
66:21:0d:91:ae:9b:c5:5b:80:23:f3:3e:b0:b1:3b:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:61:5A:A7:82:5A:8A:6C:5A:8B:CE:23:56:5D:C7:94:CB:65:2B
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:58:2d:1f:9c:d2:5d:a6:d4:65:c9:c2:94:62:15:82:b0:85:
7a:57:ae:a2:32:04:10:02:6a:94:9f:ad:3e:2d:9b:dc:28:7c:
8f:8d:79:e7:df:f3:c6:3e:2e:b1:b3:73:21:0c:6d:61:f9:80:
3a:65:9b:89:72:71:fd:38:ef:81:14:23:51:2b:e1:cc:f5:50:
f6:cd:6d:28:b9:95:a3:2f:c6:77:a9:23:06:7c:0b:53:1b:1e:
66:b6:b3:19:cd:94:d5:37:6f:71:08:b1:de:ed:3f:d4:35:ce:
64:6e:df:3d:50:6b:04:0f:85:75:e2:84:6e:f8:b9:3a:54:93:
07:32:85:aa:1b:a2:5d:e2:47:ea:fd:e3:19:7c:7c:cc:12:7c:
c0:44:c4:a4:71:a9:b8:d5:87:df:80:08:6c:d5:e8:13:cb:92:
6a:58:bb:8c:8d:4c:b3:d8:71:5a:21:f3:5c:da:b0:93:ff:a8:
34:9a:ac:d5:ce:d9:6d:19:69:33:08:b9:40:f4:f6:2f:41:ab:
af:5f:72:99:27:77:1e:64:d1:b2:6d:e0:0a:8c:f3:0d:f7:44:
88:d0:d9:b7:d8:fe:f0:84:1b:2f:e7:b8:ca:66:d2:9d:61:19:
44:23:4e:81:ea:69:c7:e4:5a:16:6f:6d:3a:0c:98:4f:69:ab:
f6:3f:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:32 2025 by rpki-client