Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: 9g7IZxfAMvVqSYvbX23AzQ8X/TRmw4jCM74IDK3JKqU=
Subject key identifier: 83:4A:F4:6B:C4:07:34:61:F7:6F:E1:58:AB:E5:B8:03:1C:77:A4:20
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 0196A5AFA8C040EBC3BA0593145AFA59766A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 062C
Signing time: Tue 06 May 2025 13:01:14 +0000
Manifest this update: Tue 06 May 2025 13:01:14 +0000
Manifest next update: Wed 07 May 2025 13:01:14 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: AfTIqm4SHtDkFmKNbpO9sSSzicupMALTaJQmrVq3JcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:a8:c0:40:eb:c3:ba:05:93:14:5a:fa:59:76:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: May 6 13:01:14 2025 GMT
Not After : May 7 13:01:14 2025 GMT
Subject: CN=834af46bc4073461f76fe158abe5b8031c77a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:db:6a:f9:b1:8a:2c:09:9a:4c:bb:1a:ec:
1c:a2:d1:29:65:2c:b0:fd:93:79:21:cd:95:e0:b3:
31:4d:b7:be:2d:90:c6:ee:69:36:ee:1c:45:9e:40:
28:c7:fa:ad:3f:d9:fb:9e:bb:4d:12:7d:37:65:ab:
52:bc:12:eb:ee:cd:43:7f:76:18:2a:b2:0a:fa:6e:
4a:f5:cb:f0:28:7e:eb:ff:22:2e:70:ea:77:6b:fd:
ba:7d:a9:5f:eb:fd:cc:71:c5:90:93:f2:18:a6:02:
16:ee:ac:f4:e2:af:be:bd:22:91:4f:1e:db:50:79:
02:4f:e8:3d:09:46:d7:11:4e:ca:4f:80:58:19:54:
32:07:89:7d:2e:52:a3:c6:a2:24:95:aa:96:08:f5:
f4:93:5b:46:b9:97:d0:0e:14:74:57:96:1c:ec:22:
be:b6:3c:46:06:a1:2c:6e:9b:d0:2d:5d:c3:04:ae:
5b:3e:30:f1:7e:71:ac:c2:c6:87:2d:b9:14:07:99:
08:d4:02:1f:be:4f:28:b7:5f:ce:56:04:ec:45:34:
02:72:c6:2a:1e:f7:ca:52:41:6d:6c:f9:98:c9:27:
2d:73:1b:fa:cc:c3:88:ca:cb:39:33:a9:f4:cc:ef:
bd:2e:5a:0b:57:b0:10:06:db:19:f6:01:19:94:3a:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:F4:6B:C4:07:34:61:F7:6F:E1:58:AB:E5:B8:03:1C:77:A4:20
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ea:92:f3:a4:c2:92:2d:5b:ec:fa:e2:0f:d5:85:1f:40:35:
c8:6f:06:bc:32:d9:c6:f3:3f:5e:de:fd:f8:b4:c6:d2:21:0c:
1d:49:b6:7e:60:e9:cf:ee:80:39:73:a2:5c:d8:5e:51:a8:4c:
36:54:c8:94:ea:ed:5a:c4:37:fd:7d:e3:fc:f1:a0:35:dc:80:
9e:a3:b6:b5:db:3c:26:4f:ac:3c:5b:99:bd:6f:9e:0c:3b:17:
e1:f9:35:92:79:e9:31:30:15:a1:d8:03:ca:ab:1c:71:d5:66:
23:df:2c:64:ba:2a:99:04:23:b3:0c:1e:b7:7a:d9:34:98:7d:
b8:bc:85:ed:cf:33:f2:78:59:56:26:46:d9:cc:fd:cd:8e:58:
2b:73:61:aa:e0:2b:81:9c:12:6c:85:1a:da:b6:dc:a9:5e:78:
58:ed:52:a2:72:95:ff:e5:69:c6:5f:24:d5:8e:84:d5:50:81:
9f:b2:bd:6b:86:d0:f4:6d:5e:a9:f8:13:9c:a5:36:6d:d2:09:
96:c3:f9:4e:6c:6b:95:63:ca:06:bb:28:b4:00:b0:aa:4e:15:
f4:34:5d:dd:69:0f:03:e1:43:eb:62:0b:23:af:6e:a9:d1:ea:
cf:c7:01:cd:1b:4e:3f:3e:00:eb:14:42:16:62:ee:a8:38:1e:
8e:c2:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:28:17 2025 by rpki-client