Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: hXgazSjdnZ85vJY7RX0tKSe3ID8y45E5OwGC4zAoQDk=
Subject key identifier: EC:8C:0C:A9:B6:84:43:7A:12:47:D7:E3:63:73:DA:3E:61:8F:F9:72
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 0196BF6EFA5FB6626DAE8CF4E67536BA687E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 13:00:43 +0000
Manifest this update: Sun 11 May 2025 13:00:43 +0000
Manifest next update: Mon 12 May 2025 13:00:43 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: qxQ+VKGdXl3vqK++dv/TqXnp8xUL/lR2RSdhwXtl4nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:fa:5f:b6:62:6d:ae:8c:f4:e6:75:36:ba:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: May 11 13:00:43 2025 GMT
Not After : May 12 13:00:43 2025 GMT
Subject: CN=ec8c0ca9b684437a1247d7e36373da3e618ff972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:63:94:ef:34:3e:3c:02:2c:de:26:d4:bf:
6e:40:c7:9a:91:81:b2:db:2d:df:f4:cc:f6:45:ae:
0e:c5:c2:61:57:8a:37:4a:0e:df:c1:f3:12:c3:e0:
08:26:34:49:f2:98:ba:92:17:3e:f0:58:22:7f:79:
35:23:7c:5d:c4:0f:e0:d4:16:30:6c:dc:6a:bc:b2:
78:f3:a7:79:81:b8:ae:9b:29:ec:4a:35:d3:d7:fe:
b7:d7:37:80:6e:25:0c:99:f4:86:01:8c:ef:d6:10:
be:ca:6e:4d:3c:ec:73:df:2c:8e:83:9d:c1:f2:1b:
a4:7d:c6:75:1e:e1:27:06:09:11:ec:9b:da:97:ff:
da:9c:1f:5f:c9:24:f5:0c:59:1c:a8:b0:96:e7:72:
38:8e:d4:0c:9d:90:89:70:a5:6b:8e:fa:9c:0f:2c:
35:42:e0:62:59:7c:71:1b:12:73:51:c9:1c:5a:0d:
b6:7e:8a:a1:d1:57:e3:d6:87:6e:34:eb:ba:c5:39:
02:9f:3c:37:0f:f0:4e:13:89:a0:ed:b6:eb:c1:80:
e2:6c:7d:de:54:42:ad:15:63:79:6e:e5:88:01:10:
61:2e:55:91:15:3a:38:a0:2f:63:9b:1f:8e:2e:4d:
47:4e:c0:ec:9d:fe:20:6c:a8:c6:03:2d:58:ea:6f:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8C:0C:A9:B6:84:43:7A:12:47:D7:E3:63:73:DA:3E:61:8F:F9:72
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:86:34:4c:e4:eb:8d:2d:8f:79:54:cc:7a:af:99:b5:d3:
20:4a:5f:64:7e:ee:4d:7f:39:72:c4:6a:57:24:dd:74:71:ea:
e2:2f:94:fb:f9:8d:88:e3:5b:3c:69:7f:83:e9:14:7c:e9:48:
0f:05:02:81:09:fa:81:ec:c5:48:76:97:c2:1a:a7:b0:42:f3:
55:2b:f6:ee:5d:5b:4d:32:85:4c:6e:92:e2:61:63:c0:22:a7:
da:d4:a4:cd:08:44:8a:e8:8e:66:09:b2:2a:86:f3:e5:37:bf:
88:12:41:2b:e4:3e:aa:21:8b:98:38:f0:57:5c:46:d5:e8:5b:
0e:db:2a:86:92:63:6a:5f:fa:b1:d9:88:64:67:33:9e:7f:3d:
e8:b1:5e:d6:fd:f8:a9:e3:74:ad:ee:d6:b7:f3:5f:6b:b0:f8:
b7:f1:da:fc:14:60:7a:e6:ed:f5:a5:66:68:5b:c8:58:18:d4:
e3:a8:e1:2c:ab:6f:a5:68:2c:ff:48:9e:51:a1:3d:8f:fd:85:
02:56:d6:2c:df:69:8a:c6:5d:02:13:e7:c6:0e:ee:72:26:b7:
27:d3:14:16:3b:c8:28:b9:db:3d:49:28:22:6b:26:1a:f4:f9:
0f:32:49:8a:4e:98:53:13:01:7d:c1:14:17:0a:b1:10:f4:a1:
3d:bb:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:37:27 2025 by rpki-client