Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: MDAjE97ruzYW+eECxLG3+IJbqDFj/Sj6FrhFu9XP+bQ=
Subject key identifier: 91:11:2D:1E:C7:4C:40:6E:54:08:B1:46:80:25:EE:27:E3:4F:9C:AC
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 0196CD61EB627EE4043E30EEDF0A5F5E4B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 13AB
Signing time: Wed 14 May 2025 06:01:08 +0000
Manifest this update: Wed 14 May 2025 06:01:08 +0000
Manifest next update: Thu 15 May 2025 06:01:08 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: IWevYuXVlBrZLa5Q7qwwd0viP8zxUPVD617AZ//+uKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:eb:62:7e:e4:04:3e:30:ee:df:0a:5f:5e:4b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: May 14 06:01:08 2025 GMT
Not After : May 15 06:01:08 2025 GMT
Subject: CN=91112d1ec74c406e5408b1468025ee27e34f9cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:7d:e5:18:5f:46:fb:9c:e7:fd:a9:b8:44:
8c:cf:93:4f:e8:f7:62:4a:9f:b0:44:ad:d1:b2:8f:
9f:e5:0c:8b:1c:95:4e:40:49:50:5f:73:3a:db:91:
3d:5a:84:0e:34:2f:6a:56:7b:ee:12:06:31:51:80:
b1:73:ba:22:f9:8c:b9:61:24:51:db:4c:a6:c0:18:
31:9f:ad:01:1c:6e:7d:fc:8c:bb:bb:47:74:7f:d6:
5f:1c:6f:1b:42:84:52:82:47:55:b7:ea:54:e1:12:
87:14:97:61:aa:41:1a:9d:50:6f:04:1b:8a:bd:a6:
31:34:6b:fd:8b:36:09:04:28:c9:07:9a:aa:c5:cd:
d1:59:9f:92:76:fe:2c:bd:ea:ca:c1:ea:82:03:20:
98:2d:3a:4a:5d:51:4c:d2:09:bc:51:8a:30:fe:f4:
ba:78:ce:07:54:b1:63:ce:11:ec:c9:2f:f0:d2:0b:
5b:62:be:f7:b0:f6:54:01:0b:17:2c:0b:0e:6c:35:
d9:8a:99:cd:30:2c:69:26:62:89:e5:1c:7a:4e:ee:
33:98:9c:c5:02:8b:de:ee:b9:1e:fa:9a:1b:d9:cd:
08:b7:ec:c4:eb:58:e5:43:14:80:13:75:f3:2a:43:
15:31:d9:3f:26:d5:93:b2:5e:f1:bf:73:3a:cc:9b:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:2D:1E:C7:4C:40:6E:54:08:B1:46:80:25:EE:27:E3:4F:9C:AC
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:56:da:d3:e0:53:20:d2:bb:8d:37:c4:7b:ba:d6:bb:16:c0:
4b:e4:7e:fb:7b:08:bb:0c:a9:63:54:a2:92:ee:5a:d0:f3:5e:
93:96:92:d6:f8:ec:b8:51:91:13:fb:7b:af:8e:49:74:52:00:
b8:2b:3f:7e:27:66:8d:d6:a6:ca:28:a1:20:52:45:2f:a3:53:
38:a2:84:ba:5f:9e:f0:0d:7c:25:15:04:d4:9c:26:e3:5d:28:
60:ba:2e:73:3e:da:04:05:dc:34:e2:a2:48:8c:64:1a:87:09:
d7:8e:05:1d:98:25:1a:2f:1e:dd:4a:3d:38:a3:d5:03:db:88:
1c:d5:ea:a1:ed:da:e8:04:7d:8e:ea:37:65:db:82:9b:81:5f:
7e:6d:3d:f0:76:8a:15:2d:b5:7d:99:3e:58:dd:e6:28:0f:e8:
f2:2e:f9:be:30:38:2c:0f:2f:2c:34:aa:82:57:4e:4f:0e:55:
9a:e7:78:22:f8:da:e9:77:24:d0:ad:b8:ba:d3:2d:ae:6b:3c:
a9:83:6a:02:4e:4c:26:38:78:79:7e:4e:ae:a8:cc:69:e9:03:
ec:4e:00:9c:d3:44:14:34:e5:94:97:c7:f1:9a:0c:7a:35:23:
7c:9d:36:aa:bc:0a:ae:61:09:67:fa:e1:39:c6:75:9e:a8:91:
95:b9:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:23:42 2025 by rpki-client