Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: UflUSNuKm7QUKC7c56S50SzV118B28Ntzo+iuq2WoVU=
Subject key identifier: 54:CD:C6:09:71:C0:3C:A7:22:B8:D5:96:D7:AD:49:C8:B1:EF:11:32
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 0196A2092CED260A51CA07520D624A5E6DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 20:00:32 +0000
Manifest this update: Mon 05 May 2025 20:00:32 +0000
Manifest next update: Tue 06 May 2025 20:00:32 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: RNK4+GcPbntZqzfiB2Oc8lBPqmo/pyWXz5ASucwjXHI=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:2c:ed:26:0a:51:ca:07:52:0d:62:4a:5e:6d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: May 5 20:00:32 2025 GMT
Not After : May 6 20:00:32 2025 GMT
Subject: CN=54cdc60971c03ca722b8d596d7ad49c8b1ef1132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:86:1a:a2:e2:87:d2:42:1e:91:81:dd:bc:
07:9b:c6:de:c6:85:f0:04:d6:22:0c:3d:4c:9a:38:
28:0a:37:f8:1e:57:c4:e4:2c:dc:9f:84:38:fc:c0:
88:8f:c7:02:44:e7:9a:8e:5e:2c:8a:cb:e1:58:bc:
65:5a:b7:bb:42:f0:7e:c1:6e:68:9b:e7:7f:18:a0:
c4:8b:b3:9d:9e:db:1b:bd:2e:b0:b0:32:2c:53:d8:
db:1c:d5:ee:cf:6a:d5:0e:67:a7:b7:b0:33:54:ca:
d1:7a:ff:e3:5b:a3:78:4f:c9:ac:37:8d:67:e3:07:
cb:a4:86:44:55:c1:2a:2e:5e:1f:0a:34:0c:a1:2e:
b1:ff:8a:7b:75:d6:2a:9b:aa:a4:08:12:c4:e6:ac:
0a:c6:d7:6a:26:73:8a:b8:f0:bb:94:a0:a0:a1:70:
d8:93:b5:7b:37:6f:92:c8:df:54:d6:e5:70:78:01:
44:9b:47:28:c1:ce:88:be:c9:4a:10:91:53:31:c7:
5a:f6:6d:6c:d0:06:cb:20:7c:58:cb:e0:48:29:af:
63:57:6f:65:52:36:22:b2:d3:6b:6f:79:5e:76:c7:
60:68:dc:62:61:1b:b8:5e:e9:be:90:37:d3:0e:f3:
53:86:04:5b:79:cb:7c:35:ff:c5:3a:62:fa:da:ce:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:C6:09:71:C0:3C:A7:22:B8:D5:96:D7:AD:49:C8:B1:EF:11:32
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:a2:74:e1:f3:fa:aa:7d:28:88:46:6c:e6:84:dc:46:e5:
48:17:b8:b2:d3:b5:9d:2c:2c:41:14:0e:e0:aa:a1:51:54:1c:
d8:6e:54:e6:78:53:11:56:87:3c:7d:f0:39:1f:26:05:3b:ee:
8d:9a:d3:28:58:b9:1c:43:78:0d:ac:55:7e:6d:51:1a:dc:1c:
30:97:aa:5e:45:c9:b7:2c:8d:e7:8b:57:3a:2f:0c:c2:bf:bb:
17:ad:42:ee:90:2c:08:60:db:7d:de:24:b1:fc:3f:70:94:ea:
e6:25:3b:25:8f:24:e9:5f:a5:a9:80:50:73:53:cb:2c:73:71:
3c:e0:37:3a:bc:89:3c:52:d5:61:d1:c8:27:25:6a:d0:fd:1e:
28:b1:fe:5a:fd:34:9f:a7:c3:57:b7:b4:fb:cd:8d:a2:cf:13:
76:a4:d6:72:0c:df:c4:9e:8f:dd:b3:17:f2:c1:fc:f9:8a:a7:
c2:e3:f9:4a:25:89:be:ce:a6:8e:60:4b:e2:52:9f:96:15:7b:
f8:5f:c6:93:e7:0e:b0:99:03:4e:8e:6b:a1:58:85:57:e9:f0:
d2:17:41:35:a6:45:de:30:e1:b5:2a:8f:72:4e:7f:e4:5d:77:
ed:43:00:3a:68:ae:e3:b3:07:7d:c1:83:c3:66:c8:c1:1a:e5:
52:6b:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:54:19 2025 by rpki-client