Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: hdd3JNkuAzhtOiS2xsopEN6JVNYrfrwrBFjd5qdq27Y=
Subject key identifier: 2F:AF:18:DE:3C:1E:6D:A3:E4:E9:6E:04:ED:99:B5:5F:A1:BE:9E:A0
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 0196BB92FA53311B49263204E50031197B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0649
Signing time: Sat 10 May 2025 19:01:33 +0000
Manifest this update: Sat 10 May 2025 19:01:33 +0000
Manifest next update: Sun 11 May 2025 19:01:33 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: WX9dFx3pqDI+zzCv5eVZMJhm6NXWq8cA3oyFma7O6NI=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:fa:53:31:1b:49:26:32:04:e5:00:31:19:7b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: May 10 19:01:33 2025 GMT
Not After : May 11 19:01:33 2025 GMT
Subject: CN=2faf18de3c1e6da3e4e96e04ed99b55fa1be9ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:c2:cc:00:5b:ae:d7:4b:92:aa:ec:1e:f1:
0d:3f:c2:2c:45:41:70:2a:7f:aa:15:0f:e5:f9:b9:
8b:40:32:2a:13:f7:df:c0:6d:f9:4c:57:d9:c7:c9:
66:b0:fe:56:25:f4:11:e3:1d:75:a4:19:87:17:5e:
93:96:c7:d0:b4:6a:bd:44:dd:20:b9:6b:94:52:6f:
a7:30:0b:29:77:1b:43:b9:4c:bd:84:c8:c2:01:a4:
41:77:d6:f6:9f:70:bd:9d:36:03:dd:ff:1b:3b:1d:
25:c8:83:3f:8c:e3:86:f1:54:79:f8:75:ba:7b:3c:
6a:f1:96:1b:7b:e0:08:8f:02:11:a4:72:46:1c:56:
fd:05:60:f9:2e:ce:c1:d8:99:92:1b:5d:8c:ba:f1:
e3:db:b5:7d:03:1d:97:2a:83:93:df:82:34:1b:1c:
71:21:04:b3:40:6b:3e:7e:4b:9a:7e:54:d2:81:8b:
63:fc:c6:d4:6f:14:86:9d:ef:5a:f7:8c:25:aa:55:
54:ed:93:33:3b:eb:59:45:4a:f6:fc:22:cb:1f:a6:
14:e9:2a:0a:e9:4f:36:36:01:ca:a9:43:20:c1:92:
a3:36:5a:d9:00:17:45:a8:24:da:af:5a:a2:f2:17:
c8:a3:bd:12:41:9f:13:22:e6:b8:77:1d:f7:2a:73:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:18:DE:3C:1E:6D:A3:E4:E9:6E:04:ED:99:B5:5F:A1:BE:9E:A0
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:29:f3:46:6e:69:a6:f7:33:05:33:e2:aa:9b:c5:ca:45:ad:
79:be:5d:8b:09:08:e3:b1:15:bb:93:40:08:cb:ee:71:bc:7d:
a0:5d:9e:9d:84:c6:08:fa:67:7f:a0:c3:bb:ee:b6:8f:70:4e:
8f:5d:3a:d0:81:99:a3:74:b3:66:3d:be:4d:07:24:4e:fa:ab:
08:70:0d:fc:49:a5:de:5f:77:39:26:39:d9:81:8f:d1:56:a4:
82:81:d2:12:10:a1:27:35:78:4c:a3:1a:6a:ea:ca:0c:65:65:
2d:6e:ee:87:95:9d:98:5b:e0:81:05:3f:67:d2:10:4e:9d:d1:
f6:1c:5b:38:1a:54:ac:4c:2c:74:c5:3f:72:cc:19:1e:ea:d3:
9c:09:f4:04:0f:d8:f8:d5:12:82:50:18:63:c9:20:bb:6b:5f:
58:aa:a0:41:30:49:69:83:e7:57:6c:b4:d2:42:88:61:d1:d2:
2f:d9:fd:55:e1:64:37:09:64:cd:54:68:a9:b7:ad:16:ab:a5:
97:e1:5a:97:9c:9a:73:e2:d4:cd:22:81:b9:a4:1b:10:d5:6a:
24:1d:5d:ce:6b:0c:8e:26:eb:ae:72:9a:11:84:09:df:1f:fe:
32:9f:de:1c:44:76:45:ab:5a:99:89:f6:b5:0c:52:66:3a:34:
d8:b1:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:30:30 2025 by rpki-client