Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: vh+4RskwPon1ns0K92lcKOg40yfsYW+jGREJuEIp7Mw=
Subject key identifier: 8C:E5:55:07:D4:A3:DF:D7:29:09:34:BD:BD:6F:15:ED:9D:40:AC:69
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 0196B7105CC9DB51E6980717546B9040A3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 22:00:24 +0000
Manifest this update: Fri 09 May 2025 22:00:24 +0000
Manifest next update: Sat 10 May 2025 22:00:24 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: wdBGAiG/tzfQRnIFuNoCBb3KSyJ0QiWnv+e7R3xJ+V4=)
2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:5c:c9:db:51:e6:98:07:17:54:6b:90:40:a3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: May 9 22:00:24 2025 GMT
Not After : May 10 22:00:24 2025 GMT
Subject: CN=8ce55507d4a3dfd7290934bdbd6f15ed9d40ac69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:44:5a:cf:e5:f5:c7:d2:0f:81:bb:7b:bf:
db:f5:ff:56:df:82:9e:50:87:07:50:67:32:ff:16:
57:c4:2a:d5:aa:45:d3:c9:51:6e:c9:f7:83:7c:a8:
1c:97:5c:f0:61:e3:b9:ed:b6:c4:ec:91:b9:72:38:
34:ae:04:4b:14:0f:3e:de:c3:da:e5:97:69:ed:70:
1b:b8:9b:5c:fb:5f:31:e2:5a:bc:0c:dd:ad:00:2a:
e7:aa:63:0b:7c:1c:ba:ab:17:ae:dc:ea:69:4e:d8:
f1:4b:d1:a9:6d:2b:92:85:9a:15:cc:50:e5:0f:6a:
cc:63:40:6d:6a:b9:f2:d1:7d:67:3a:65:c3:69:e8:
1b:9d:08:0c:e2:fc:bf:31:ac:71:b4:86:5e:eb:a7:
ce:c4:8c:39:8e:6e:92:f5:10:2c:87:46:a1:84:cf:
fc:70:a5:60:fa:19:52:4b:64:09:1a:c3:6a:40:8d:
a6:1b:96:c3:c6:08:c9:e6:5f:1a:4b:0f:76:8b:5a:
47:ca:d6:f2:b9:b0:f6:64:96:a5:b1:e6:ae:12:ff:
aa:2f:8e:09:52:86:97:26:e3:c8:15:3a:d5:fe:5e:
2a:b4:45:6c:dd:a2:5d:90:2a:32:ea:6f:b1:b2:40:
00:30:ad:77:1c:c8:e5:8d:90:fb:2f:a1:02:5b:65:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:55:07:D4:A3:DF:D7:29:09:34:BD:BD:6F:15:ED:9D:40:AC:69
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:38:67:e4:f0:0f:92:75:0d:42:73:a2:34:c0:0d:f7:d4:b5:
36:7e:39:4c:29:4d:b1:77:41:7b:ed:f8:bf:f8:d1:35:4c:75:
73:0c:96:f1:32:2f:8c:7e:87:e4:95:72:c5:a8:73:a0:c6:fc:
54:bc:86:3e:35:be:a1:17:49:84:b8:a4:ad:71:93:c2:1e:47:
f7:08:8d:cf:52:f4:46:31:c8:75:1a:b4:4a:c9:0a:4b:78:92:
34:4a:72:85:fc:60:aa:34:15:ec:fc:46:bf:5c:be:61:8c:bd:
22:87:25:f7:58:0e:3b:d3:8f:26:89:4e:ce:ff:f9:0e:50:5b:
1b:8b:35:50:89:b2:8c:e5:6d:25:bb:d9:1e:a6:a2:66:0d:6e:
ce:f0:02:18:4c:24:f1:e4:bc:36:47:c8:b5:3d:53:1d:2a:10:
17:65:9b:ae:0b:8f:ad:3a:18:7e:c3:a6:de:4b:fd:83:8b:80:
c4:f3:be:38:15:54:a8:76:e2:92:54:98:bd:90:8c:2c:57:78:
da:6d:4c:62:b8:97:56:ef:01:3a:8c:63:1d:a7:18:af:e6:0e:
de:76:01:48:db:40:6b:86:67:ba:b9:8d:12:17:1e:15:b0:87:
8a:a8:df:14:81:d0:b3:12:6b:db:fb:29:76:88:b2:bd:30:ce:
27:a9:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:46:51 2025 by rpki-client