Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: Wp7jRIJuKkqIZhuvpV5wUgxbH+UAfDe16dEfupyH5Sw=
Subject key identifier: 64:D0:15:4F:CF:A4:C8:AC:5D:A0:DD:41:0C:87:CD:3F:4D:BA:9A:D6
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 0196759EA283D799E61313698B9D27F6D2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 103C
Signing time: Sun 27 Apr 2025 05:00:52 +0000
Manifest this update: Sun 27 Apr 2025 05:00:52 +0000
Manifest next update: Mon 28 Apr 2025 05:00:52 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 4AsvZfmKmMONxYo8TXMtkq/Be9lVepcnS0GmJ8fcgns=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:a2:83:d7:99:e6:13:13:69:8b:9d:27:f6:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Apr 27 05:00:52 2025 GMT
Not After : Apr 28 05:00:52 2025 GMT
Subject: CN=64d0154fcfa4c8ac5da0dd410c87cd3f4dba9ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:b8:88:c0:6d:c0:d7:49:81:fe:cd:5c:14:
58:43:ad:a5:76:78:6e:60:ca:5a:12:13:f6:b4:1e:
4b:2b:94:95:7a:64:ce:e8:13:e7:ce:71:00:8c:90:
49:9f:ab:b2:97:0a:1a:08:98:91:cf:99:d9:5d:ff:
be:be:d8:31:d5:81:6a:97:c6:9a:ff:44:37:80:db:
8c:5c:f6:45:de:4b:c7:df:32:c7:e6:b7:6d:09:79:
02:f9:92:9f:3d:97:35:1c:d9:bc:80:28:97:4e:b1:
45:cd:ff:12:71:b6:78:fd:3b:ef:1f:e8:89:33:b6:
6f:54:38:93:54:0d:7f:dc:db:df:b3:6a:74:ea:a3:
b2:7a:da:d8:b9:8e:80:29:ec:de:1f:df:e0:ec:07:
01:a2:96:fb:9b:1f:1f:5e:37:09:2d:ef:df:c7:e4:
82:84:17:49:05:47:36:53:03:6f:7a:47:24:b3:51:
8f:35:04:59:82:5b:39:41:73:4f:d4:65:46:80:3f:
93:2e:a3:1b:de:41:bd:9f:79:ad:d3:81:c0:7e:a2:
6a:53:9f:7d:e4:a8:fa:f7:76:ea:5d:1c:67:72:18:
fb:37:d4:05:ea:75:68:7a:02:b7:9e:a5:97:ff:27:
ad:8a:3a:66:05:8b:c2:84:b0:85:77:df:9e:ba:75:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:15:4F:CF:A4:C8:AC:5D:A0:DD:41:0C:87:CD:3F:4D:BA:9A:D6
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:8c:ab:5b:18:ca:c7:22:98:c2:61:45:3c:bd:29:75:7c:
9f:77:d4:47:4f:8b:1d:3c:d1:08:b8:30:a0:9f:32:2c:7c:13:
4b:a9:5a:fb:a5:2f:2a:b9:3b:ef:59:93:c6:5b:c0:6b:5e:03:
2c:e9:bd:1c:64:cb:c8:ef:94:8b:89:50:07:d2:7c:45:25:01:
2a:ad:1a:aa:7c:02:f9:c7:55:96:eb:22:78:d8:fb:2d:80:41:
92:03:0e:b2:d6:1b:60:b1:87:ce:60:0a:2c:a0:a4:db:33:05:
bb:13:da:c6:ea:9d:2a:90:83:a0:88:89:a9:2c:ce:b3:31:1e:
ab:bf:18:f2:48:fa:b2:aa:22:80:a2:38:4e:28:3d:0e:89:0f:
64:08:bc:d7:38:28:b1:2a:62:12:43:d2:7a:21:81:f3:00:c7:
91:b8:68:03:3d:18:be:be:8b:dc:a2:fa:6b:50:4f:33:4f:46:
35:e0:2a:bf:06:1c:3f:88:1b:07:a9:6b:d0:c8:09:b8:d7:40:
11:d7:5a:fd:26:fe:ee:47:46:85:80:f1:03:9e:0a:68:c5:c7:
d8:26:e3:a3:29:37:f7:5d:8a:bc:b9:ab:d4:ec:09:7d:4c:72:
e5:bf:50:89:e3:34:1f:52:19:b3:39:0b:fc:10:de:d9:cf:7d:
7c:ba:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:50 2025 by rpki-client