Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File: 1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier: LaDM0MXJHeqndW5hsNTq+rR8IPvwjf11BO40M/3+MkE=
Subject key identifier: 2F:2E:19:C6:FB:91:98:8E:45:1C:40:50:2E:B0:14:1D:55:7B:60:D0
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 0196C2396D891B17E9A20E4867D1C7B58A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number: 10A2
Signing time: Mon 12 May 2025 02:01:05 +0000
Manifest this update: Mon 12 May 2025 02:01:05 +0000
Manifest next update: Tue 13 May 2025 02:01:05 +0000
Files and hashes: 1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: K22M8yIrixgL4qu/Yna7vnKlrJYxcECeTzNgn6JGkrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:6d:89:1b:17:e9:a2:0e:48:67:d1:c7:b5:8a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: May 12 02:01:05 2025 GMT
Not After : May 13 02:01:05 2025 GMT
Subject: CN=2f2e19c6fb91988e451c40502eb0141d557b60d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:4c:7e:fd:dc:5b:e8:0c:aa:17:05:78:9c:
f2:ff:fd:8f:a1:a0:83:03:97:bf:a2:81:b2:40:12:
67:ff:0d:a9:80:ef:9f:f9:99:80:99:d0:c3:1b:63:
4f:a8:97:27:5a:5a:9f:3e:eb:38:07:5d:8e:87:3a:
6e:98:21:55:a5:9e:7f:c2:ac:a9:79:58:52:e5:bb:
5d:59:21:89:40:33:e5:c4:8e:b8:60:88:4c:60:15:
88:a7:bb:9b:2e:d3:d6:d0:35:ce:d4:66:13:82:aa:
00:08:e7:4a:fe:d5:02:5c:3f:c5:ea:f1:a6:83:62:
cb:86:48:d0:91:63:12:c3:9a:a9:52:11:94:ab:6e:
37:4b:fa:3d:47:c8:9e:3b:c2:70:c5:38:90:ef:a8:
c1:ff:a2:5c:d0:54:1c:de:08:b1:6c:01:9c:3e:27:
b4:80:f4:39:63:ad:87:f7:5d:82:a6:e1:83:df:88:
43:df:50:ac:30:fc:17:b3:47:0d:7d:e0:8f:c2:6d:
dc:9c:0d:54:69:69:e6:5b:7c:ca:06:6b:60:69:78:
05:86:20:d3:96:dc:8a:d3:fe:d2:b1:39:8a:39:84:
e1:cf:c1:23:dc:d1:f1:39:2c:f1:48:17:b3:a6:c9:
c1:90:c6:24:61:1b:f3:aa:dd:72:55:74:64:df:05:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:19:C6:FB:91:98:8E:45:1C:40:50:2E:B0:14:1D:55:7B:60:D0
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e6:b1:18:5d:77:d0:7a:5a:a1:25:3d:bd:d9:05:92:d6:37:
d8:68:43:f8:bc:fd:f8:0d:18:a5:57:a2:7a:1c:08:23:03:f9:
f7:61:bd:5b:88:e4:26:1d:79:d9:f5:4e:f8:26:ea:f8:c5:08:
77:79:52:ca:35:0e:bd:16:f9:5b:d8:1e:6e:f6:df:a2:1b:15:
3a:81:5a:b1:2f:fd:13:b4:4e:34:8b:6b:5e:90:9c:b8:23:e6:
f2:5f:8f:0d:a4:ce:eb:2a:6b:07:bf:e8:27:b3:9d:c8:ee:1a:
42:1a:ba:2f:76:60:2e:46:0d:b5:7d:8b:55:e7:d2:7e:8b:16:
81:97:b1:75:3b:6f:7d:28:4d:8b:f0:33:d0:d4:fa:c6:1a:b3:
38:ff:46:75:47:2b:95:7f:12:d0:4e:c4:14:58:77:54:ba:cb:
68:14:2a:cf:83:fd:a8:6a:c3:d8:4c:df:c4:28:c9:17:f7:b5:
ef:ce:0a:a8:49:a0:87:fd:5f:6e:41:ff:6d:6b:0b:bb:1b:17:
dc:dc:64:5b:ec:2a:69:a7:0a:2f:0a:f1:81:bf:72:2f:61:f2:
09:f0:39:ab:50:87:ea:27:da:dd:aa:cc:e7:61:03:90:47:92:
76:68:27:1b:7b:28:bd:69:22:92:14:79:8b:bf:3e:ef:93:9d:
9c:87:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:22:25 2025 by rpki-client