Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: nAFAKtZCoVf12MDyZDkNmaBdcytKhZoUXZM0sBchwdA=
Subject key identifier: 69:2D:E0:26:1E:C8:AC:10:53:9E:02:4F:3D:B8:26:3F:A3:35:18:74
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 0196B8912141DAD8CE314537C5D8EACE6F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 11D3
Signing time: Sat 10 May 2025 05:00:41 +0000
Manifest this update: Sat 10 May 2025 05:00:41 +0000
Manifest next update: Sun 11 May 2025 05:00:41 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: MNTEM2VcherIXTGCfw+XFjjMISTI+mx6V/I4GE2d+0Q=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:21:41:da:d8:ce:31:45:37:c5:d8:ea:ce:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: May 10 05:00:41 2025 GMT
Not After : May 11 05:00:41 2025 GMT
Subject: CN=692de0261ec8ac10539e024f3db8263fa3351874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:f8:ec:c7:56:5f:72:dd:49:55:10:e9:17:
c4:3a:fa:1c:7e:58:29:12:5b:8d:22:68:e7:2a:aa:
0b:2d:26:42:8c:bb:1d:ee:3c:74:fe:36:56:ff:f5:
c2:8b:83:b3:41:b2:f3:e4:05:45:1e:69:28:ef:00:
48:2a:d3:8b:2c:dc:25:44:7c:c0:a3:69:e3:c9:f2:
16:cc:38:42:7b:f3:36:87:f1:3e:1d:11:f2:02:e3:
a6:c1:1e:28:bc:56:9b:92:71:45:6c:98:e8:31:7d:
d1:09:21:90:a4:3d:da:32:e3:9a:f0:b9:73:c3:d9:
4e:26:22:77:48:cc:aa:23:38:ea:bc:c4:e2:a5:8f:
1a:53:37:72:0a:88:59:5d:4d:a3:ae:dc:0b:37:a8:
d1:b6:68:2f:6b:4d:93:12:8f:20:2b:cd:06:62:28:
ee:a2:b2:3d:f3:d5:a3:66:d6:e7:ce:ec:a0:1d:09:
a7:d3:0c:32:8a:b7:06:7f:b8:28:65:74:2f:a8:09:
0b:1b:0a:30:af:b1:56:b7:e5:38:1f:59:78:8d:50:
5f:df:cb:f2:ed:27:d6:b8:ff:d4:1c:51:2b:e0:e1:
d2:e9:6e:f7:99:c9:4f:c5:6c:dd:9b:e7:28:36:b9:
66:a2:f6:95:f7:4b:ad:35:10:bc:05:f8:76:fb:52:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2D:E0:26:1E:C8:AC:10:53:9E:02:4F:3D:B8:26:3F:A3:35:18:74
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:0f:3d:50:f8:e0:35:d8:6e:be:5c:73:41:53:09:1a:35:
2c:61:3d:6c:b2:c0:2c:51:fa:61:83:48:38:3c:69:16:aa:bf:
0f:de:ed:73:25:93:55:1d:52:a0:c4:92:76:0e:7a:e4:22:7e:
e0:38:42:43:12:c4:4a:67:46:80:ad:72:6a:77:82:24:ce:be:
da:8e:0b:75:31:70:67:57:ca:c0:5e:af:a5:20:b0:81:b9:f2:
95:4e:14:17:55:fc:33:ce:de:1a:bb:69:2e:1d:2d:98:54:19:
1a:75:2e:d6:34:dc:04:17:b8:cb:7a:a9:54:ee:6c:47:13:d7:
d2:38:3c:0a:62:1f:2c:ac:b2:90:d0:bd:54:e3:8b:cd:f4:fc:
c7:d1:f7:5e:3a:55:78:77:ef:4c:06:b1:72:99:cb:b8:5d:6b:
ee:c9:0d:e1:c0:de:07:43:92:11:1b:ee:cd:d4:28:82:00:a4:
27:76:b6:d2:89:20:07:ef:7f:d8:b6:50:74:d3:12:4f:c0:92:
4b:fc:15:dd:40:c3:5d:0c:60:ec:76:9d:c2:96:01:ff:c0:72:
a7:4e:1c:88:4a:5a:3d:ed:55:f9:3e:36:10:6d:66:09:6d:16:
fa:56:cd:6c:ad:63:c6:f0:44:25:fc:a9:7f:5c:cb:4b:3b:d5:
d0:de:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:35:02 2025 by rpki-client