Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: CgugzczzdrEXxPFGRLwwcqL/AxnKc7F5JYSKseDuno0=
Subject key identifier: 79:BB:BD:5C:00:AA:53:CE:CC:29:46:25:1A:A3:DE:3B:23:7A:9C:F8
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 0196C9F2FA3A705DD3D1195ABF5F19F0FB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 14:01:06 +0000
Manifest this update: Tue 13 May 2025 14:01:06 +0000
Manifest next update: Wed 14 May 2025 14:01:06 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: 7RGejSftSVUQKoXXG7jLwmYCK7jctXpr84gUufvzQgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:fa:3a:70:5d:d3:d1:19:5a:bf:5f:19:f0:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: May 13 14:01:06 2025 GMT
Not After : May 14 14:01:06 2025 GMT
Subject: CN=79bbbd5c00aa53cecc2946251aa3de3b237a9cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:e7:17:5f:2b:6a:34:49:15:e9:0b:8e:a8:
08:c3:cb:fa:5e:62:36:72:6f:1b:bd:4a:6f:bb:a3:
72:bc:b3:9b:ca:80:29:79:53:7a:69:9e:b5:a2:f0:
c2:e1:89:39:b1:16:0d:3e:90:2b:b7:7d:2d:f4:79:
d5:30:4c:dc:c7:58:09:da:4c:4c:4d:03:04:1e:b4:
0b:3d:a4:41:bf:7a:9c:8f:bc:ea:3a:b3:96:a4:ba:
27:79:36:71:81:f0:8d:2b:f8:32:a0:86:67:d8:6f:
69:40:87:75:17:2a:de:87:68:a1:b9:e3:fb:db:25:
af:d0:a8:f6:ce:67:51:02:f5:6d:cf:e2:d0:84:17:
0b:4e:a8:6d:12:0d:65:ca:ed:49:89:85:64:3e:38:
99:f3:6a:e0:a6:8f:f2:28:c5:ec:57:1a:42:91:35:
4d:a3:f1:ef:75:9c:5b:cb:01:52:6d:9d:26:79:5a:
f6:e1:a7:4a:49:a2:14:01:1e:77:5a:b1:b3:06:8c:
bd:1e:02:2c:4c:7c:96:8d:fd:92:a9:6f:21:6d:fb:
25:56:3e:c1:2c:5d:72:e2:76:f2:27:98:09:d0:68:
96:17:3b:b1:b7:84:7f:b7:ec:a4:90:75:3b:de:9e:
00:91:16:24:6b:cf:a9:7c:20:d2:df:62:24:68:21:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:BD:5C:00:AA:53:CE:CC:29:46:25:1A:A3:DE:3B:23:7A:9C:F8
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:42:3f:96:dc:cb:fe:5a:fc:2d:51:85:de:4f:54:ed:f2:7c:
b5:f9:c2:04:a9:91:73:4d:f7:33:d7:80:c9:b7:fa:1a:75:25:
73:ab:47:ab:28:97:2b:09:5e:f6:2e:66:4e:c5:a3:5a:99:6f:
25:6e:fd:8c:ce:91:51:63:90:a3:7b:a3:c8:89:98:81:c7:5b:
47:e6:ea:da:a2:bb:c0:19:9c:a0:d0:e5:d2:9b:0c:e2:37:66:
ea:d6:f5:e9:ed:f3:68:1b:b0:42:55:f7:ff:58:28:65:a5:6f:
dd:41:8e:5a:67:4a:77:85:f5:92:59:ff:06:22:de:08:36:91:
29:11:3a:c9:44:a7:bf:bb:5a:39:94:2d:f0:02:e0:38:82:4e:
d3:60:28:0a:7c:36:76:84:0a:ea:d5:bc:ab:83:b9:39:3e:44:
9b:a0:8b:31:3a:c4:18:15:aa:1c:d7:e8:07:f7:f7:11:68:03:
77:7c:37:b6:7c:2d:52:14:1e:5f:bc:8a:01:05:a3:02:84:56:
be:2e:65:a5:57:78:17:0b:c5:c8:73:3c:98:65:9f:25:da:5a:
87:bf:66:90:e1:5e:07:a6:d1:34:6e:44:f3:69:1a:c5:6b:7a:
ee:dd:c0:3b:f7:b6:e4:f4:a2:59:10:34:5f:fa:b6:83:e2:39:
27:15:6c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:03:08 2025 by rpki-client