Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: N85bYOGXoNSHXr4H8fDs75Fh2aJBMWRLTF91vIrMuVw=
Subject key identifier: 3D:74:79:28:9B:7A:C4:D4:65:35:ED:FC:77:A1:F6:6F:A2:FD:8C:4A
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 0196C3F0E5DD3A8CAED928D70C8314FC854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 10:01:06 +0000
Manifest this update: Mon 12 May 2025 10:01:06 +0000
Manifest next update: Tue 13 May 2025 10:01:06 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: 7siaMtMC0EKxcPIP5OaPX8WpxEUszfJrbK1SrP8T/O8=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:e5:dd:3a:8c:ae:d9:28:d7:0c:83:14:fc:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: May 12 10:01:06 2025 GMT
Not After : May 13 10:01:06 2025 GMT
Subject: CN=3d7479289b7ac4d46535edfc77a1f66fa2fd8c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:86:4d:20:19:67:b3:be:10:3d:dd:fd:f2:
19:49:d2:e2:66:5d:ae:91:e2:a8:4d:52:21:de:34:
25:16:11:7b:0d:8f:85:03:21:69:e7:54:55:0e:61:
de:09:74:72:cb:52:a7:61:e6:90:45:7b:83:54:28:
59:2b:fa:88:22:45:eb:64:b4:18:46:20:8e:5d:61:
64:de:a2:fb:e4:a7:e9:89:94:7a:2b:b3:33:01:1b:
40:6a:80:ef:d5:ed:1a:16:89:8f:70:a3:8c:42:f6:
5e:be:7c:f8:1c:53:50:b2:5a:86:1a:fd:90:d4:cb:
ef:0f:b7:00:7a:12:e4:57:65:94:86:03:70:06:60:
fa:6e:a4:3d:c3:e4:94:dc:b6:a8:68:a9:72:7b:12:
5f:32:f6:af:37:f9:e3:c2:ec:4c:da:05:48:c9:00:
e1:f1:46:b8:53:bc:f5:0f:2a:10:0d:12:be:d9:bc:
d6:f2:26:27:b6:33:0b:8c:d7:8b:06:c9:f4:4b:37:
0a:3a:f1:95:3b:62:15:23:83:9e:d7:60:d5:79:8e:
62:72:ba:43:b5:7b:f0:d8:d2:5f:c0:46:52:3d:06:
ee:a3:54:88:1b:5c:68:9f:34:f0:44:1a:e3:64:1d:
e0:06:53:22:dc:ee:22:9e:84:84:f0:96:5f:5a:11:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:74:79:28:9B:7A:C4:D4:65:35:ED:FC:77:A1:F6:6F:A2:FD:8C:4A
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:19:a7:46:df:26:34:44:4e:bc:cd:41:3e:74:52:d2:ff:aa:
7b:d5:29:69:6b:02:98:3b:06:4f:42:8e:61:9b:9e:ab:23:70:
cd:79:60:b1:de:84:c7:f6:76:f3:77:72:c6:a4:c1:d5:fe:26:
1e:94:d3:37:27:ee:10:3b:d4:da:d4:ed:b9:46:8e:2a:83:e7:
40:d6:d7:3a:5b:88:9e:15:d8:25:e6:e0:40:06:93:3e:8c:02:
17:b4:44:5b:17:df:cb:07:d0:7e:be:b1:f1:a3:da:bc:39:ba:
c9:47:66:db:e3:a5:1b:89:cd:8d:ba:b0:09:bc:91:ba:04:99:
80:22:3a:c8:ee:df:09:e8:c7:93:59:d3:a0:e5:ef:b9:f3:fc:
8a:b8:22:7f:45:70:59:46:39:d5:67:f6:8d:89:30:48:0f:8e:
5a:dd:83:1e:9f:11:72:3c:4c:55:91:72:de:00:79:22:87:ac:
94:03:ab:c6:d0:e2:00:a3:e9:e9:eb:8c:21:f6:77:cd:df:39:
1e:6f:ec:9a:65:05:29:b8:fc:28:a0:30:38:e9:2a:ef:91:63:
26:21:c3:87:f2:71:f0:59:8d:f4:71:9c:50:22:80:4b:a5:5d:
2e:94:cb:4f:e1:1b:19:78:24:8c:3d:de:97:db:ed:88:6e:a9:
ee:05:cd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:43:23 2025 by rpki-client