Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: 3ALaJG/ixIo8KMqTXT3NCwF1KuB92aKBpolAWwf5rO8=
Subject key identifier: AD:29:CF:F4:B1:D5:59:B6:6F:8B:1F:C1:51:EC:E5:25:79:35:9C:30
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 0196CA603D67DB3F12BD833919D3CA68F007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 0EB6
Signing time: Tue 13 May 2025 16:00:26 +0000
Manifest this update: Tue 13 May 2025 16:00:26 +0000
Manifest next update: Wed 14 May 2025 16:00:26 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: nT71WLcx7WssjuFR8eIk5tDj1OW9+eLfvKLjzXW9U28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:3d:67:db:3f:12:bd:83:39:19:d3:ca:68:f0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: May 13 16:00:26 2025 GMT
Not After : May 14 16:00:26 2025 GMT
Subject: CN=ad29cff4b1d559b66f8b1fc151ece52579359c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:65:59:ea:4f:c5:6e:fd:a8:ef:0f:20:e2:
08:5b:fd:55:1a:1d:dd:03:78:b8:e0:06:78:c7:15:
7c:0f:18:aa:3a:af:4a:e6:c0:f0:63:be:61:64:17:
0e:e3:38:83:32:4c:0d:73:00:ac:af:c8:44:fb:cf:
01:a7:9f:59:16:7e:ca:24:89:40:7c:0c:17:7f:c3:
3a:34:af:77:19:41:ae:4c:71:b4:ca:64:19:09:88:
9a:7f:b6:d8:c7:fb:50:83:7a:af:11:31:78:f6:14:
85:f7:36:1d:7f:c4:37:da:c2:e1:c9:df:d9:94:33:
33:f4:ad:4d:ff:95:e5:d9:36:aa:af:b4:91:49:63:
40:e8:e6:44:f0:bc:a4:9f:bf:39:32:5f:45:e5:81:
de:d1:43:c7:27:a9:0b:e2:c9:c5:71:42:0a:fb:f3:
64:79:00:bb:a2:a3:e1:dd:39:77:4d:b1:80:5c:2a:
6e:20:b6:01:7f:43:b9:c7:5d:7c:84:04:64:d9:1a:
22:23:74:42:b2:b0:91:b2:7c:17:85:28:69:d7:d0:
f5:31:ff:27:65:60:ca:31:f3:91:4c:69:89:49:2b:
a6:c5:69:a2:da:6b:b0:a1:e4:f1:86:1b:15:8d:f5:
65:2f:e3:ff:ae:7a:8a:70:e4:22:99:1a:27:c9:de:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:CF:F4:B1:D5:59:B6:6F:8B:1F:C1:51:EC:E5:25:79:35:9C:30
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b0:49:c4:dc:d6:3e:b0:6a:2b:82:bd:09:07:9b:93:fe:8d:
22:0b:53:41:98:fc:33:fb:d3:c3:09:29:b9:72:be:f9:f5:de:
4d:ba:ec:69:98:00:50:d9:4a:a7:f5:74:90:67:ca:b1:10:10:
3b:97:6e:6b:40:03:73:9c:5b:a0:61:fc:68:bc:5b:c9:72:0f:
36:ed:99:8e:d4:37:3c:a5:7d:dd:c4:02:d4:75:e8:bb:b1:7b:
76:c5:87:22:12:f0:51:df:82:d8:bd:ff:e9:98:b5:75:92:03:
a5:fd:f0:22:82:50:e0:95:99:2a:36:1b:5b:0b:48:04:f7:df:
a4:a3:04:26:fd:14:7b:67:03:ae:ca:0c:f9:a4:5a:bd:ba:eb:
5f:59:eb:d7:b7:a0:45:7f:7d:9f:f5:00:27:b9:92:3d:ac:ae:
3d:45:6d:67:8d:9a:28:83:6b:ef:74:f4:b1:ba:18:33:91:ee:
18:4d:88:48:5f:44:ea:b5:b0:92:2a:c5:c6:46:87:8f:fa:56:
cc:72:7d:23:f0:e8:09:93:3a:17:e2:a4:12:4b:c3:6a:61:87:
2b:4c:8d:01:36:89:81:2e:b0:24:1b:cd:21:d7:fa:04:f0:dc:
33:55:1e:09:97:7f:ed:7f:05:09:d1:e7:e7:db:d5:0c:df:6d:
0b:ba:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:40:30 2025 by rpki-client