Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: hKDBdAIm4hwe5/ySBrVRsKqxENTfirbHu6AcE/s+fxE=
Subject key identifier: 86:B8:DF:CC:68:C8:12:2A:66:02:4A:AD:BD:D9:91:7F:DF:12:57:72
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 0196C1CAECF604194DB5E21B786789F0CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 037E
Signing time: Mon 12 May 2025 00:00:23 +0000
Manifest this update: Mon 12 May 2025 00:00:23 +0000
Manifest next update: Tue 13 May 2025 00:00:23 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: e3WuHLfKKAAzHuxXm0ae+bln/r+aW8fLNmoIAOYytZA=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:ec:f6:04:19:4d:b5:e2:1b:78:67:89:f0:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: May 12 00:00:23 2025 GMT
Not After : May 13 00:00:23 2025 GMT
Subject: CN=86b8dfcc68c8122a66024aadbdd9917fdf125772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:6f:ad:cb:7f:1c:85:fa:73:d8:48:28:44:
db:a8:41:d1:95:91:31:08:15:ad:a2:b5:b3:7a:1e:
cd:28:fe:1a:e2:09:e6:39:cd:d1:fb:17:69:8c:c6:
68:ea:c3:45:95:c7:6a:f0:94:f2:29:78:8c:ea:2c:
75:78:7b:63:88:af:76:8b:e2:38:0f:a1:4b:07:0b:
c1:d8:29:24:60:ce:45:4f:04:f2:93:15:42:3d:4f:
96:2d:89:87:63:c9:4d:0d:a1:25:62:97:eb:b9:e8:
15:91:96:7e:68:47:15:75:40:35:96:49:df:8c:fe:
3a:14:b7:15:ae:bc:76:17:3e:31:64:6f:d6:30:c8:
00:05:50:1e:4a:52:dd:bb:87:aa:a7:df:b7:de:9e:
3b:3d:4b:e1:0f:c4:07:cd:44:7a:5d:08:cc:4b:7c:
7a:0f:ef:e1:8b:e6:7b:64:05:b8:ca:dc:e6:58:b1:
f7:1d:69:56:95:8b:eb:d5:d5:54:75:06:97:69:b8:
70:0d:be:3d:90:39:69:97:0a:b3:49:3b:a2:cd:0c:
57:e8:25:80:53:fa:60:73:4e:92:97:02:2e:06:e2:
30:d5:d8:c3:1e:88:21:99:0a:bc:65:88:5f:5a:f1:
da:ef:73:a0:c0:1f:f4:06:b9:86:74:fd:f7:7d:0c:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B8:DF:CC:68:C8:12:2A:66:02:4A:AD:BD:D9:91:7F:DF:12:57:72
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d3:c0:4b:91:f6:a2:cf:1e:04:fd:c5:fb:98:b4:fe:c9:e2:
14:1f:30:e2:c7:c7:b8:4b:5d:7e:c8:96:f5:c7:fa:d9:81:22:
30:b4:b3:7a:a8:43:41:73:4f:c0:20:12:47:c6:9a:e5:78:8a:
44:12:ef:aa:cd:4e:ab:d8:03:42:00:79:db:3a:1c:41:34:a5:
cd:c9:49:b5:40:74:70:28:32:d9:bd:8b:4b:17:31:61:5c:02:
b1:99:f5:5b:67:bc:a8:e1:c9:69:59:c4:8c:24:49:dd:f5:53:
d6:c9:12:db:2a:f8:d9:64:b3:20:5a:43:ae:cf:e6:3e:91:6c:
8e:f9:50:06:56:b2:48:d7:f6:ef:45:55:84:db:cc:a1:5c:b6:
d9:12:72:de:54:df:de:bf:1d:34:b6:6c:73:70:57:2c:d5:71:
42:5d:ff:52:ee:19:1d:84:e9:b7:7c:7b:b7:4b:02:54:d5:1d:
a7:ed:32:23:aa:64:7a:f1:b1:c2:54:f8:6c:b3:39:77:71:28:
df:e2:e5:c8:98:7d:cf:a1:5b:6e:0b:31:7e:ed:48:81:b7:01:
69:5d:96:21:32:e6:e8:05:83:ff:73:71:65:f4:e6:be:3d:3c:
1f:94:84:95:c8:78:37:6b:2c:f1:45:5d:ef:c1:9d:f7:05:8f:
d5:97:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:48:46 2025 by rpki-client