Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: Tz8T8GTdb9VnrgGuvXnqYBkx1rsmJxxRgxvsjczvdRY=
Subject key identifier: DE:28:5D:97:A2:8E:52:AF:CC:F5:AD:FF:58:65:B4:4B:ED:63:27:EE
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 0196C9849DF9979A3D5922C23DF3D9CC12AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 08FA
Signing time: Tue 13 May 2025 12:00:33 +0000
Manifest this update: Tue 13 May 2025 12:00:33 +0000
Manifest next update: Wed 14 May 2025 12:00:33 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: BFtbQsvKMkGfnfPnRAzBfKr+ltIa1SXWBTjCpvN0sWA=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:9d:f9:97:9a:3d:59:22:c2:3d:f3:d9:cc:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: May 13 12:00:33 2025 GMT
Not After : May 14 12:00:33 2025 GMT
Subject: CN=de285d97a28e52afccf5adff5865b44bed6327ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:31:64:1d:be:17:c1:d2:32:7b:d4:85:7e:
e0:fc:2e:48:dc:91:2c:25:de:17:f7:4a:0b:3a:a4:
51:cd:e3:4e:65:d4:25:7f:22:98:a9:df:7e:a6:26:
14:98:c2:ae:9a:ea:a7:ae:35:21:c7:89:26:b2:87:
f8:5c:99:dd:bd:60:34:ef:a4:85:e6:72:24:6c:3b:
8b:4c:49:87:02:b3:2d:ce:81:fc:c7:62:13:5d:e1:
bb:6c:df:3e:54:08:1b:03:d0:0f:bb:9f:0d:a6:86:
79:a1:41:58:95:a4:86:29:8f:06:68:37:89:b2:bb:
d3:f2:a3:3d:1c:10:cb:5b:02:d2:5c:6b:66:f5:ba:
00:2a:31:9c:45:3f:44:c8:c6:c6:81:3d:33:bb:bf:
a8:2b:f3:2b:2f:3e:0b:76:7b:76:a2:95:a6:43:e9:
9f:ed:a5:ff:24:55:c0:ff:0f:9c:e8:d9:99:7f:0c:
5e:5f:2b:cf:18:ff:c4:2d:1e:e8:9b:80:58:c0:99:
8b:85:22:0f:24:b9:e8:3d:c4:9a:ae:f8:90:3c:c8:
91:c6:2a:1c:29:df:e1:8d:32:4e:88:ab:27:df:38:
c1:9c:f1:b3:2e:99:43:3b:64:29:d8:ae:7d:f5:b9:
9c:a7:d8:a4:8b:60:cc:8a:4b:64:5b:5e:0e:37:42:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:5D:97:A2:8E:52:AF:CC:F5:AD:FF:58:65:B4:4B:ED:63:27:EE
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:85:a0:4b:23:5f:db:6a:94:aa:ed:65:0b:e7:21:49:2c:c9:
94:0d:06:91:52:0a:c7:87:ef:5f:00:c6:76:95:01:00:5c:a3:
56:89:46:f1:98:cd:68:a9:83:64:b1:e5:51:31:f1:62:2a:ab:
60:3c:ad:b3:9d:c9:b0:33:61:de:0c:fa:9d:38:5f:08:47:4a:
f3:0c:6d:ac:6a:ec:e0:ab:d7:49:0a:e7:f1:79:e0:94:77:82:
30:79:be:3c:b1:6b:80:e7:97:51:66:66:b2:bb:27:7c:38:c6:
31:84:25:4a:46:89:e5:95:1e:07:ba:93:10:c3:14:9f:f5:b3:
a9:1f:3d:05:98:fa:d1:ae:f7:5e:c6:89:a0:14:69:96:ee:fc:
38:71:c4:a6:5c:6b:96:3e:b7:e0:8b:41:54:9a:74:ce:f4:0a:
33:73:52:c8:bb:f1:70:cf:c7:22:83:30:b8:87:b3:ef:f3:31:
f0:0a:35:21:f9:d1:a3:3f:f0:94:32:86:19:f2:e2:d1:31:92:
62:0d:58:bd:04:3d:19:18:e0:d9:7a:2c:05:7f:41:55:7b:ed:
6c:06:1a:55:97:7e:a0:0f:cd:a0:80:5e:93:eb:d7:ea:ae:ec:
92:b0:57:fc:57:1e:51:ae:cb:9a:15:c1:c6:b1:f4:90:76:f6:
95:8b:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:25:27 2025 by rpki-client