Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: rRdgA4kTC3gMGlaXxmoeBCOsHFHzrGH4oMwoHlKuj60=
Subject key identifier: 24:2D:FD:CA:76:9D:AD:7A:B1:C2:CA:1D:BC:C7:C5:A2:3B:84:56:FD
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 01969F3F73C8E9A4B4CDE79F72A4FBD7DD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 1560
Signing time: Mon 05 May 2025 07:00:57 +0000
Manifest this update: Mon 05 May 2025 07:00:57 +0000
Manifest next update: Tue 06 May 2025 07:00:57 +0000
Files and hashes: 1: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: Za0q/pGZSImLUqniE8nGeEch14OVGkfwKIU2pAEUFmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:73:c8:e9:a4:b4:cd:e7:9f:72:a4:fb:d7:dd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: May 5 07:00:57 2025 GMT
Not After : May 6 07:00:57 2025 GMT
Subject: CN=242dfdca769dad7ab1c2ca1dbcc7c5a23b8456fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:3b:23:e2:9e:8d:eb:4e:27:ce:4e:28:b7:
56:e4:08:52:f6:ef:f1:d8:d5:84:c9:c7:be:f7:e1:
ed:a2:03:a8:3e:87:d9:15:89:f2:42:bf:e1:e4:dc:
b2:82:13:80:e2:18:fb:f1:57:34:41:5c:8d:ca:6b:
5e:34:7c:68:42:73:d7:20:80:08:b2:8d:66:9a:45:
39:34:8d:65:b9:ff:82:66:56:c7:02:58:66:e8:e4:
cf:81:2c:53:56:60:5a:10:80:c7:30:45:ff:f9:09:
91:93:f0:c8:cd:23:f9:cc:30:00:78:59:76:7b:ce:
8b:e6:87:ca:37:04:70:a3:9e:46:c1:a1:2e:f3:84:
a8:81:f6:12:5e:5a:ea:25:cc:e0:f0:f6:06:ce:61:
b0:25:1c:bd:37:ca:7d:70:2a:14:e1:42:97:15:58:
b1:06:6b:ca:5b:13:9c:d4:93:d1:db:46:54:3f:da:
da:3f:38:8e:b8:0f:f4:4f:52:c6:39:ec:05:fe:81:
d1:91:27:52:3d:3a:0b:ae:3f:62:e0:24:ab:9f:56:
10:4a:88:77:1d:34:35:b3:53:23:c3:9b:52:0b:f2:
41:ef:41:ed:67:e3:47:41:b3:3f:80:b4:16:06:97:
ec:aa:6b:6c:67:2e:24:55:63:bc:8a:e2:17:d7:4a:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:FD:CA:76:9D:AD:7A:B1:C2:CA:1D:BC:C7:C5:A2:3B:84:56:FD
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:19:3a:1e:9b:29:98:9f:e1:9a:b1:1c:62:ca:9d:db:2a:01:
80:83:c9:1c:aa:5d:35:12:f1:29:d6:6f:bd:86:74:a5:38:dd:
af:e8:48:6c:50:29:36:61:94:5e:5b:e5:3e:50:43:06:91:ff:
a7:ea:38:0e:0b:83:e0:d8:4f:e5:36:43:02:29:b4:e7:a7:03:
24:47:c1:de:d2:20:42:d4:16:8d:f9:aa:c1:3f:6a:c8:b3:ca:
0c:16:a0:71:e1:0d:ea:3a:cf:c4:fd:fb:9c:aa:86:b8:81:7f:
b7:9a:ac:41:28:cf:79:54:c8:7f:bf:6e:37:9f:16:72:fb:2d:
4b:dd:dd:dc:9d:be:2a:4c:87:40:ab:c4:5f:1b:09:e4:5a:14:
f9:3c:aa:16:38:2c:53:c9:38:31:0d:73:4e:d7:c9:6f:e7:c8:
cc:fd:39:ce:3e:a0:e5:50:30:3e:31:fd:d6:ad:34:e6:f2:37:
9d:dc:86:5f:9f:8f:b6:dc:dd:06:06:22:26:f2:ad:c6:68:51:
5e:c5:6c:1b:a9:b3:77:15:33:f9:e4:9c:55:2a:53:30:59:d9:
c7:37:8a:78:02:14:52:d2:04:49:a5:37:1a:df:4c:b1:69:74:
7f:e2:c6:4f:c8:bd:7a:7c:40:26:3b:2e:5d:7a:9e:6b:55:c1:
e5:c2:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:23:08 2025 by rpki-client