Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: O1m6DLlh/pmc9xPhWrSYag1mi3GURj2LgpvRGkUK9ro=
Subject key identifier: 68:14:E7:64:98:98:A9:D8:31:3B:C7:BB:73:FC:32:ED:C2:8B:E8:99
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 0196C495606CBD8743A2E809D70A130F304F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 0148
Signing time: Mon 12 May 2025 13:00:45 +0000
Manifest this update: Mon 12 May 2025 13:00:45 +0000
Manifest next update: Tue 13 May 2025 13:00:45 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: SUr51R9v+fveFL7ZCYGfg6eLJNn0pt9uMmMwzvnCP14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:60:6c:bd:87:43:a2:e8:09:d7:0a:13:0f:30:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: May 12 13:00:45 2025 GMT
Not After : May 13 13:00:45 2025 GMT
Subject: CN=6814e7649898a9d8313bc7bb73fc32edc28be899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:5d:8e:60:1f:b3:5c:23:25:9a:f7:1d:68:
02:cf:34:12:b3:62:ac:37:48:79:48:73:56:3b:31:
0c:be:7e:18:cb:3f:04:0d:a1:99:6d:83:0d:8f:02:
56:e3:1e:f1:11:b4:88:b1:4e:74:12:59:38:a7:90:
ae:28:9c:0d:fb:17:5c:d8:c5:2c:d7:3c:1d:27:45:
61:77:a7:55:ae:98:66:45:ac:c9:c8:a5:c9:33:cf:
b2:e1:52:91:6a:3c:e0:9c:43:98:a2:27:7d:e8:be:
f0:1b:1a:07:80:8e:50:3d:86:eb:c1:45:b3:ee:d8:
b3:d4:a7:3e:b3:3d:fc:f2:1d:1f:ec:01:8f:68:e5:
d5:b2:c7:8e:59:50:3e:cc:d7:b5:24:22:56:73:5c:
ad:3f:a2:b4:e0:92:4c:e5:d9:cd:bd:45:72:a8:bc:
26:0f:59:f5:86:c3:2b:ba:0d:9a:31:c5:96:36:22:
6d:fd:86:2e:07:37:93:65:0e:2d:f8:85:d0:77:ef:
bd:72:7f:5c:db:0d:18:3d:ba:7f:f8:85:aa:0d:4b:
6d:00:cc:42:79:66:4e:e1:4d:d8:42:eb:e3:bb:52:
40:6f:8a:30:91:cc:b3:41:e7:46:9f:1c:3b:d2:0e:
12:78:5a:94:67:26:63:2f:29:c9:15:7e:1d:56:19:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:14:E7:64:98:98:A9:D8:31:3B:C7:BB:73:FC:32:ED:C2:8B:E8:99
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2c:5a:b1:ae:31:c3:21:17:73:5f:21:81:3e:35:0b:be:f8:
65:75:5e:5b:67:32:f3:52:93:88:86:ba:81:50:0f:07:56:66:
42:ff:5e:f4:d2:c9:2a:1b:77:86:28:d5:fd:55:05:70:2d:e0:
77:48:fe:c1:85:37:12:8c:46:a6:d6:54:c5:37:b9:86:7c:1a:
ba:48:11:f2:cf:70:fc:5f:f7:17:de:6a:9c:ad:dc:0b:24:1f:
50:11:64:e8:5f:cc:92:22:7d:c5:b4:6d:f9:d1:b2:ef:12:50:
d5:1c:22:74:9a:c6:94:40:2b:9a:1d:0b:8e:30:17:dd:8b:e2:
41:81:7a:21:71:a8:95:09:76:d5:c4:ce:0f:24:52:1f:6c:81:
04:8a:e7:f7:db:10:92:62:2c:ea:ec:31:9a:5c:65:dc:fa:64:
03:5c:4d:5d:99:a9:d8:8f:5e:d5:bc:20:a1:b0:73:8c:b6:bc:
11:8b:b2:99:bf:1b:67:a7:22:54:b8:88:97:f8:23:79:af:fd:
5a:91:18:c5:ad:45:5f:28:fc:4a:dc:66:c7:79:d7:8d:ef:e0:
04:99:09:93:3c:d1:fa:6e:72:8b:b4:42:1c:a3:b2:ac:ab:e6:
21:2e:1a:78:cd:d9:b5:2a:85:19:3a:dc:85:53:d3:a1:b9:96:
83:6e:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:08:09 2025 by rpki-client