Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: Ulrqz3skWDM/HfZGeKGVRjD66i6gsHp7WaDcoHSlTuU=
Subject key identifier: E0:CD:60:83:DF:28:77:4C:B7:1E:EC:14:0F:03:48:E8:F2:9B:19:E4
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 0196C34BF73FB6D1B8EC084BCAE274B92ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0AFA
Signing time: Mon 12 May 2025 07:00:57 +0000
Manifest this update: Mon 12 May 2025 07:00:57 +0000
Manifest next update: Tue 13 May 2025 07:00:57 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: n/xX2ENlRDs3uMSICOrXVIrpFBLvGtEId8sMw5VZ8tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:f7:3f:b6:d1:b8:ec:08:4b:ca:e2:74:b9:2e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: May 12 07:00:57 2025 GMT
Not After : May 13 07:00:57 2025 GMT
Subject: CN=e0cd6083df28774cb71eec140f0348e8f29b19e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:d6:73:b7:46:8e:60:9f:da:80:b2:cf:43:
25:24:d4:a7:1e:47:23:a5:58:95:0c:d0:61:5a:7f:
51:50:d8:ae:2f:a8:74:f9:a3:35:d0:4b:77:b5:3d:
a7:63:c9:32:f3:47:63:22:48:e2:84:cc:3c:49:5c:
1b:f5:11:f5:7e:69:b2:dc:6c:76:4d:06:35:a2:ba:
28:16:e7:bc:6b:9e:5d:e2:85:be:e0:56:b8:6d:a0:
86:49:cc:37:65:bb:f1:b5:1d:62:aa:6e:6e:7d:8c:
9c:b3:49:53:65:1c:b3:86:96:ee:90:93:ac:52:40:
61:24:79:2a:23:fe:d9:eb:0d:82:b7:4d:e6:01:42:
26:b0:50:c9:16:8b:53:0c:f5:0a:a6:08:46:85:8c:
77:6b:9e:45:4f:d1:d0:45:d9:8d:ea:f2:7f:7e:80:
db:33:a4:91:9e:ca:d7:a0:12:30:6a:27:0d:25:57:
ac:e0:f8:95:63:31:41:34:63:a5:d1:83:a9:d5:26:
40:9d:0a:8e:00:36:e2:ff:54:6d:f9:bf:ae:6f:90:
3e:0f:69:91:b3:e1:08:94:a5:47:dd:94:93:98:da:
01:2f:a7:1b:36:6d:79:1a:8a:38:d0:a3:e5:f5:d8:
c7:f2:41:b8:ff:c9:9e:b8:32:71:9d:ae:8b:71:31:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:60:83:DF:28:77:4C:B7:1E:EC:14:0F:03:48:E8:F2:9B:19:E4
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0f:bb:68:43:b5:ce:7d:18:d1:a1:c0:ec:dd:96:b1:e0:c2:
20:64:a5:cc:05:15:f2:07:69:44:83:83:38:b0:03:e7:20:06:
53:c0:65:80:4b:59:fa:ab:1e:27:8e:2f:5d:85:6f:5c:6c:93:
4c:3f:e9:61:23:65:ec:4f:51:a6:9e:7c:6d:e9:2f:44:52:63:
ea:84:ba:7d:a4:0f:6c:5c:19:ff:a3:f1:8f:32:0e:d6:7a:44:
80:9a:26:08:c4:22:e8:73:14:e6:fc:9d:97:b8:6f:39:2f:9c:
c1:e6:a2:1c:c1:13:a2:6e:33:09:3f:79:f7:8b:b0:1d:7c:39:
2f:38:58:db:1f:6d:5f:88:1a:e8:f8:55:2d:11:fa:23:c5:be:
5a:89:08:47:a7:47:de:90:e2:39:75:18:8f:35:6d:f4:d0:50:
96:1b:0b:c5:8e:1d:94:be:0f:7a:2e:6f:a7:1d:66:35:36:60:
ee:0e:97:b2:3a:49:f8:ed:3c:68:f4:85:49:36:03:3a:80:a7:
11:8a:23:de:7e:b1:9d:f6:23:16:5c:48:01:94:66:59:96:82:
37:0d:22:f6:27:f3:fb:f8:62:20:95:dd:2a:7f:bb:ea:8c:94:
16:65:9d:f8:c5:89:3f:5c:02:a7:cf:39:91:19:66:f3:24:f3:
63:df:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:11 2025 by rpki-client