Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: 0BLEA+KyOlBv68OsyRqXHhIRNY2pmObT7cVCNRogEI4=
Subject key identifier: BB:4D:85:2B:C4:59:DF:32:75:DA:B5:0D:91:90:D3:C4:F3:28:E2:4B
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01967BD75DD0A5F41063F353EEE1C11A1148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0A1B
Signing time: Mon 28 Apr 2025 10:00:33 +0000
Manifest this update: Mon 28 Apr 2025 10:00:33 +0000
Manifest next update: Tue 29 Apr 2025 10:00:33 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: peSL+GZ/D/ndLDSg2sbBPMkjbbV0S1F6eOG65aiERLs=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:5d:d0:a5:f4:10:63:f3:53:ee:e1:c1:1a:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Apr 28 10:00:33 2025 GMT
Not After : Apr 29 10:00:33 2025 GMT
Subject: CN=bb4d852bc459df3275dab50d9190d3c4f328e24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:2a:08:dd:e4:b7:3e:2e:64:b5:4a:49:20:
ff:44:1c:f4:d4:e2:ea:71:e8:35:33:b5:30:5e:4a:
2d:e6:f8:41:04:1f:98:b9:2c:c5:72:37:06:a9:d6:
d3:ec:ac:d3:5e:32:a8:29:81:71:64:dd:fb:66:6e:
c5:6d:de:c1:0b:fe:f4:d1:f1:ec:a0:96:05:91:b4:
37:26:6a:22:2f:c0:41:1e:07:19:aa:da:c8:3e:92:
2a:ab:2a:e0:de:41:5f:a1:3a:ec:b4:48:25:cd:a2:
17:57:2a:44:89:82:81:ac:2b:72:57:0c:8a:4b:23:
77:74:2b:eb:87:5c:ae:8d:be:58:cf:2a:e8:e4:2f:
87:4a:ea:86:e9:66:b7:f1:26:b2:7f:18:29:d1:42:
ba:b6:b5:50:85:6e:fa:70:64:aa:c1:09:60:0c:c5:
1b:93:db:94:d9:1d:ac:5c:82:0e:a8:d1:a7:17:76:
66:8e:19:fb:98:33:e9:66:01:6a:d8:d7:2f:3d:7b:
24:5a:6f:13:e0:bd:bd:d6:bc:b1:9d:7e:db:3e:2c:
77:2f:60:75:bf:68:f7:e8:ca:32:0f:2d:bc:f3:fe:
7a:b2:59:4e:10:12:42:31:1c:31:4e:ac:b7:48:6e:
5c:42:b7:27:c3:93:47:36:1a:d7:8a:fc:d0:be:05:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4D:85:2B:C4:59:DF:32:75:DA:B5:0D:91:90:D3:C4:F3:28:E2:4B
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:75:86:1e:e8:97:02:0e:17:6e:c6:ea:d6:a7:32:13:c4:2d:
f5:34:62:b8:94:91:f5:7b:aa:82:35:35:3c:e2:a3:61:02:55:
ac:5f:08:24:79:65:8f:25:29:56:f8:c7:dc:63:54:24:5a:69:
e5:f8:a4:ad:1e:eb:3f:64:4b:df:1d:54:c6:37:26:72:29:4f:
bc:be:9b:55:44:14:fa:67:72:77:bd:27:53:fd:15:84:b3:cd:
ac:45:61:60:b2:98:ce:8f:f9:be:d6:9f:05:8e:5e:55:2f:14:
75:23:57:ba:48:e3:0d:d1:b6:4b:4b:e9:1e:5b:cc:cb:cc:0f:
72:ca:1e:b5:d1:7c:f8:15:dd:48:6f:62:18:64:4f:29:f9:bc:
b6:29:4f:da:41:49:0c:a0:47:39:41:ac:d9:a1:24:8d:c1:91:
fd:ec:14:6f:b9:3d:87:49:bf:87:6a:23:f1:01:3b:00:9e:de:
ff:2e:a5:b2:d6:09:cb:66:89:61:25:85:9d:ca:60:1e:2a:33:
b3:65:3a:3c:e0:c4:70:c3:4c:c7:78:04:f2:d9:56:4f:d0:ca:
a1:50:51:c8:a3:30:61:a4:8d:4b:f1:9a:a4:15:3d:e2:ea:c6:
3b:18:00:37:80:10:16:48:3c:d6:d5:42:06:5c:95:d1:f4:45:
28:17:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:32:45 2025 by rpki-client