Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: 0gPcBvP6dx76DXoCN3F1JeElxehAh6qHoo72AQnpjuw=
Subject key identifier: 1C:64:C2:E9:EE:7E:4C:88:20:B2:2F:7B:A5:BB:84:42:3F:FB:4C:65
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 01969E636495E2D09A39508F0933FA7C9E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 0FFC
Signing time: Mon 05 May 2025 03:00:35 +0000
Manifest this update: Mon 05 May 2025 03:00:35 +0000
Manifest next update: Tue 06 May 2025 03:00:35 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: w7cAdRPX+//a95xPsFq+be66WIcVR1Qz/TXa35hizfU=)
2: gGx-x2iRamyRfnlhx5me1YxCw6s.roa (hash: JLnMtxeLdoGYGRa/pvkNkIdX/aY0zlXxd7zsjwME0tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:64:95:e2:d0:9a:39:50:8f:09:33:fa:7c:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: May 5 03:00:35 2025 GMT
Not After : May 6 03:00:35 2025 GMT
Subject: CN=1c64c2e9ee7e4c8820b22f7ba5bb84423ffb4c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:ca:28:f5:8d:95:13:42:07:bf:38:61:a9:
68:ba:82:a6:de:6c:24:b5:a0:2e:82:84:1b:8c:f1:
51:f5:6f:aa:28:57:59:44:58:eb:92:68:74:bd:89:
59:ce:ef:68:a5:6b:ab:ee:13:4a:dc:50:ef:4e:3b:
eb:b1:e1:ad:4e:a3:21:88:c1:1f:88:1a:30:f2:bc:
df:93:b7:75:3c:5c:a6:e7:ad:90:5f:bd:ca:b2:20:
1c:6a:fa:4c:f0:9f:96:f0:16:67:89:50:75:aa:1e:
d3:5d:9d:eb:6b:09:11:8f:5f:fe:53:63:a4:c5:e5:
3a:c6:33:96:f0:2d:c3:21:05:93:cc:e3:dd:01:de:
d4:4f:db:05:bc:94:e6:5a:26:a5:08:0b:54:a7:c1:
33:41:6d:64:bd:40:82:90:02:4a:bf:aa:4b:b0:15:
05:40:4b:2d:a3:37:b0:12:28:8e:22:b9:2e:94:90:
fd:87:94:50:88:35:7d:66:f1:88:f4:d1:72:ac:a4:
33:be:5d:5d:96:f7:42:c3:89:fd:f7:5d:c3:1e:bc:
7f:cf:7b:c0:ab:ca:c1:7f:45:b8:35:ba:d8:01:ff:
89:35:b6:8d:b5:7b:1f:33:c4:37:02:23:21:9b:69:
02:74:79:30:28:cf:6f:48:90:5f:e9:05:87:c2:2e:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:C2:E9:EE:7E:4C:88:20:B2:2F:7B:A5:BB:84:42:3F:FB:4C:65
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:ce:98:38:0a:3a:36:fd:d6:97:a9:e8:ed:02:97:26:11:
69:80:45:fe:d2:51:db:d9:0e:dd:a0:f9:9a:2e:c5:5f:82:1d:
3f:cf:2e:59:b5:87:0e:71:57:e6:0b:94:47:90:48:f8:a8:49:
dd:a1:36:b1:0c:a1:84:1e:7b:9f:3a:59:cf:b4:af:b9:cf:b6:
d5:5d:3a:2f:a6:9b:4f:1e:3a:f6:58:a2:84:21:c1:77:b7:4b:
f0:47:1c:9d:f4:ad:ee:62:5a:d2:47:32:f5:aa:61:54:97:f7:
22:e3:bc:6b:c2:b7:0d:48:08:56:13:35:15:14:84:a2:7a:66:
9d:44:ce:79:7c:86:9b:df:27:db:ff:04:fb:4c:de:63:d8:3b:
63:1e:98:c5:0a:9f:0e:b2:2f:68:d0:a1:a1:64:53:a1:b8:5e:
a2:c2:6a:83:b2:77:8d:a0:b4:e7:ee:ca:d8:b8:e7:05:24:d8:
8e:9a:8b:9d:54:23:b3:4a:47:38:2a:33:c9:d1:6e:9d:70:a5:
d6:ac:6b:f1:7e:67:fe:7a:b3:69:ea:aa:41:1f:e8:f4:df:e2:
87:4e:93:83:c7:0f:ab:f2:d0:e7:d6:8b:46:b1:0c:cb:9e:ff:
e2:57:f1:47:16:8e:b1:f9:4c:ad:b4:cf:11:23:36:6d:5f:2d:
0d:8c:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:13 2025 by rpki-client