Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: cIhH4Zxb2cbd9mxXl54Op8hKY4hNwTdkdOYvAgFQ8ZE=
Subject key identifier: 0C:9E:0A:39:8C:B1:4A:C1:EE:0A:40:31:C0:66:96:63:66:72:46:EA
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 0196C2DDAB2E37505E49DF1BC38A9AD48494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 05:00:29 +0000
Manifest this update: Mon 12 May 2025 05:00:29 +0000
Manifest next update: Tue 13 May 2025 05:00:29 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: 2RVOeueuz68TSwyOu7iwTa0ppjrLfrzPuAJrCsXAXdE=)
2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:ab:2e:37:50:5e:49:df:1b:c3:8a:9a:d4:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: May 12 05:00:29 2025 GMT
Not After : May 13 05:00:29 2025 GMT
Subject: CN=0c9e0a398cb14ac1ee0a4031c0669663667246ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:f3:ff:ab:53:a9:cc:f5:ac:33:64:14:a0:
30:8e:ae:24:ef:96:03:93:95:a2:7f:ab:1e:a3:31:
36:80:0c:52:e6:7d:1f:3b:dc:53:d2:e3:9c:1b:04:
5b:11:97:23:f5:29:34:16:ce:ec:b5:55:78:4b:96:
80:9c:37:d0:50:f8:a9:d7:34:b4:90:7b:2c:d7:a9:
49:9f:cd:52:4a:8d:37:5e:6b:fc:23:e0:ae:c6:23:
be:8f:48:c5:a0:c8:49:f2:32:3e:ea:2b:51:c0:a9:
70:d3:a3:c4:3d:31:47:7c:7a:9f:2f:ab:f5:f6:39:
78:3a:fd:e9:cf:cf:52:05:0a:3f:6f:b5:cd:7e:a1:
2a:86:25:2e:60:a2:68:17:79:95:8d:6b:4b:73:69:
36:80:f3:0a:5a:0e:86:f3:29:a2:57:c5:cd:a6:35:
a1:ee:a7:c0:93:9e:7f:a9:94:38:16:c4:20:aa:8f:
f4:a8:99:6a:aa:f6:72:8d:3e:51:73:9a:c7:c1:99:
a3:92:c8:76:59:39:e7:c0:a8:f2:1e:63:3a:97:49:
06:0d:37:2c:83:3e:0d:3f:fe:58:05:a4:3e:47:30:
ca:15:2d:05:78:44:e3:57:55:be:f5:f7:9e:40:f8:
10:ec:70:fa:51:15:14:7f:05:10:3e:1a:f9:7e:5c:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9E:0A:39:8C:B1:4A:C1:EE:0A:40:31:C0:66:96:63:66:72:46:EA
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8b:8c:c7:6e:1c:92:4c:33:ea:13:2f:4c:f9:3d:1f:ae:f1:
3a:bd:21:ad:74:b9:79:b2:df:3d:e3:a5:6d:18:2e:31:14:62:
95:1d:a8:e5:70:c3:2e:6d:f4:a4:d8:7a:3e:32:e5:80:2e:dd:
e1:4c:95:76:35:14:42:69:d4:85:8e:3b:5d:b1:61:52:1d:b7:
75:2a:f9:94:01:fd:de:ed:7f:9d:27:ee:67:48:14:ea:2f:ff:
ae:56:c3:13:7d:28:ad:39:6e:9f:52:e7:e1:c5:31:4f:32:90:
e7:f0:3c:95:a0:d1:05:50:74:12:a4:1e:90:2e:74:8e:58:93:
86:5a:79:a3:46:69:ed:0c:3b:d5:35:5d:d8:75:a0:af:ac:5a:
d0:f6:37:24:ea:7e:63:3f:8c:23:1d:01:eb:5b:37:ad:7b:41:
1a:8b:51:16:b2:4e:b0:ae:fd:54:cb:ba:85:92:9f:4e:68:63:
56:2b:d1:9f:5e:3c:1f:49:e8:82:e9:2f:36:a7:1d:03:d3:bd:
77:cf:e4:db:5b:9d:7a:3d:f6:4d:3e:26:af:91:8e:2e:43:d0:
40:16:ed:7e:09:80:72:7d:0e:c1:ab:9f:40:ea:96:0e:93:10:
7c:32:5d:c7:02:20:59:5e:1c:68:f6:bb:f9:65:db:df:3b:e5:
f6:b3:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:42 2025 by rpki-client