Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: 7H6p2odCTK6GYEfZ5FfzruMygMHbJLBE4CW/8XutJA8=
Subject key identifier: FB:16:B8:E2:AA:5E:EE:68:1C:47:79:98:7F:6A:12:11:F9:50:96:83
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019676E85F3F3EE6F64CE83CF4170567313E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0CF1
Signing time: Sun 27 Apr 2025 11:01:02 +0000
Manifest this update: Sun 27 Apr 2025 11:01:02 +0000
Manifest next update: Mon 28 Apr 2025 11:01:02 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: /ZVd1ubGxhH/LvlWXJKZn/M/lA7wJB1/NkTpM/g57rU=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:5f:3f:3e:e6:f6:4c:e8:3c:f4:17:05:67:31:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Apr 27 11:01:02 2025 GMT
Not After : Apr 28 11:01:02 2025 GMT
Subject: CN=fb16b8e2aa5eee681c4779987f6a1211f9509683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:55:8e:f6:a3:68:29:f5:d8:df:0c:6a:2d:
eb:6b:77:7a:70:bd:71:64:b6:78:13:bf:70:42:5a:
29:93:8e:aa:15:c0:91:7f:4a:4b:6e:f3:f0:62:de:
ec:93:e0:eb:f3:72:e6:50:62:2c:ae:3e:1d:63:93:
89:62:92:d5:4d:cc:bb:fc:29:ca:e6:bb:04:cf:f2:
ba:cd:1d:36:23:ab:74:4f:5c:f4:58:3e:31:5c:59:
1c:a9:23:7d:14:c5:00:34:5f:77:6e:30:fa:60:71:
e6:64:34:39:b5:ed:c4:c7:7d:67:c4:ef:9e:df:bf:
89:4b:d6:0d:73:8a:bb:a0:1b:97:1c:89:af:27:ad:
3d:37:bb:47:c8:55:a3:00:9e:e0:c7:75:b4:4a:06:
3b:bf:c9:35:22:33:4a:a5:2d:2a:20:e0:dc:41:40:
ec:38:b9:fe:44:a3:da:a3:fd:ea:1a:f6:24:38:d4:
61:b8:a2:37:f9:c1:0c:cd:df:20:36:08:0d:b7:c4:
fc:10:11:ef:f2:1c:0e:bb:e5:2c:26:58:09:41:59:
24:c4:20:33:cd:0a:89:45:4e:0c:c8:5c:30:22:58:
53:d8:cd:3a:a3:50:0b:b2:f8:a6:b0:06:b2:b0:0f:
d2:7e:da:93:e5:0a:5b:48:02:f2:f4:71:a7:b6:8c:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:16:B8:E2:AA:5E:EE:68:1C:47:79:98:7F:6A:12:11:F9:50:96:83
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:61:69:fb:97:ab:c9:91:7a:29:69:e7:20:ad:ba:c2:3b:b6:
87:26:1d:75:36:c7:02:af:31:54:ca:e7:c3:4a:bc:d7:b7:2b:
0b:0c:6a:c7:c4:1a:6d:7d:e2:03:a2:c8:2e:27:18:a5:6e:d4:
8b:1d:4c:4a:35:00:5b:b9:f2:df:b3:b2:e8:05:06:cf:12:ea:
2e:99:85:9e:a0:16:75:cf:75:99:dd:c1:d0:88:aa:ac:59:27:
64:8b:99:b8:15:51:fd:b3:e3:e7:7b:11:08:03:8f:8c:97:a8:
54:68:8c:9f:c2:6b:fe:ae:4d:6d:28:d5:18:3f:f0:70:7d:24:
cc:22:ff:9e:c9:36:af:13:cc:81:fd:2d:cb:85:79:9f:81:05:
82:9f:a8:e3:03:4d:9c:14:7a:04:cc:f7:a4:c3:53:a7:11:53:
a8:66:84:b8:56:28:88:ae:7c:f4:d6:83:47:d0:33:ae:e0:3a:
47:a8:26:50:68:10:4a:b3:9c:85:f6:15:b4:71:96:70:9b:5c:
db:58:a6:5b:88:60:ff:17:0c:80:77:8d:da:d8:6d:67:1a:1a:
0e:c5:ed:13:e9:55:1a:40:02:cf:3a:3d:e9:12:37:a0:bb:ad:
c8:3d:a6:5d:9e:0a:3e:ce:ba:5d:3c:42:ff:e1:95:22:fd:cd:
c1:35:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:33:40 2025 by rpki-client