Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: RLSbRdI4WJu+fpQffq5PszvR8g7pRUFvNBLbiyldFBA=
Subject key identifier: 98:3E:AF:87:EF:5C:B9:DF:F0:CB:D3:F2:6D:3A:E7:59:BD:1F:00:A0
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 0196BB91D36C5B71D7BF19A151A01AF0E0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 19:00:18 +0000
Manifest this update: Sat 10 May 2025 19:00:18 +0000
Manifest next update: Sun 11 May 2025 19:00:18 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: 8B/UMP0cQOa2E8u7U1W5NQ7AdDXmSwfvcqqNT05B2Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:d3:6c:5b:71:d7:bf:19:a1:51:a0:1a:f0:e0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: May 10 19:00:18 2025 GMT
Not After : May 11 19:00:18 2025 GMT
Subject: CN=983eaf87ef5cb9dff0cbd3f26d3ae759bd1f00a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:8c:7d:49:e4:8b:2a:79:35:9e:72:c2:2e:
3a:7b:8e:51:83:55:c0:65:40:4f:36:32:4b:03:27:
5b:f4:76:68:f6:d0:95:75:89:31:19:3c:9d:2b:ef:
e6:5f:93:25:59:57:93:dc:e3:94:b8:09:d3:95:84:
54:6f:ed:c7:f3:9e:6a:d6:a1:3b:a5:49:fb:b2:cb:
b8:25:8c:c0:6a:60:fa:ac:00:9b:7c:dc:0a:9b:ba:
14:5a:89:ba:01:6c:92:eb:b8:6d:4a:38:f9:ec:6f:
9b:49:06:df:c7:c7:63:49:02:64:df:fe:b3:d2:09:
37:05:61:aa:86:d4:af:df:11:f0:eb:7e:81:a0:dc:
b8:77:d2:73:da:cd:af:d7:27:09:80:1b:6e:9d:e0:
4c:2a:b2:e8:5a:78:ba:0a:42:31:be:f0:4f:19:5c:
e5:8e:18:b2:ae:db:19:5e:02:1d:5f:7a:f2:5b:de:
67:6e:74:08:c8:28:d3:9f:27:73:c5:94:03:7f:c3:
e5:4c:29:ea:d6:ba:ab:94:62:42:e7:45:5c:30:a6:
46:47:8e:8f:3f:bd:c4:e4:79:a2:b0:3b:af:a1:f9:
50:08:39:d3:2b:4a:bb:10:dd:bb:8a:31:6d:78:a2:
2d:63:e9:28:55:49:0f:f1:6e:22:fb:79:7d:50:a4:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:AF:87:EF:5C:B9:DF:F0:CB:D3:F2:6D:3A:E7:59:BD:1F:00:A0
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a7:1a:1c:a8:69:8f:cc:f6:b1:8a:b5:83:7c:0d:31:c0:15:
ce:6c:3f:3a:91:6d:4c:8c:b8:50:33:89:3f:b0:a0:76:e9:a2:
7e:b0:b4:b8:26:6c:f5:a0:53:a7:fd:3f:0c:ed:6a:b3:24:22:
ed:a3:3f:1b:a8:f7:22:d0:65:8f:7d:2c:30:3c:7b:ee:ed:74:
47:42:a0:cf:05:12:07:db:5f:60:2a:7f:65:f5:b1:78:ee:76:
73:cb:51:3d:56:69:af:b0:78:c1:fb:f2:b6:d6:d7:95:88:67:
12:47:c5:a1:d5:b9:71:c3:42:4f:c3:5a:e2:e8:53:d2:33:19:
20:30:94:7e:27:ab:1a:48:e0:97:74:f3:2b:16:3d:17:a5:0b:
43:f0:a9:dd:d0:cf:40:3c:23:f0:60:07:30:26:14:10:a6:6a:
82:fd:9e:eb:24:b0:4a:f0:3e:fc:23:7f:f3:38:db:82:67:3f:
c4:de:02:f7:36:80:e8:0a:dd:1e:0c:fd:26:82:7a:ff:59:cd:
1c:94:4f:95:45:67:cf:69:28:c1:0b:bc:ca:80:a1:7a:17:fd:
cb:0b:1c:23:fa:1e:95:de:b2:e6:67:f3:b4:7d:b4:0a:7d:45:
88:19:b2:b6:4c:36:2c:0b:78:91:4e:32:c2:96:96:24:5f:8e:
39:01:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:35 2025 by rpki-client