Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: 7eQoqYIz2cNGq1ofo8Gi8QgWMgRyz/JR8LrtSvj4FgY=
Subject key identifier: 70:8F:CE:5D:CA:FC:BE:F3:C7:D1:55:14:57:FF:56:51:B0:E6:FA:62
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 0196BD80319AF1994B34D783FB1D8C3D0476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 119F
Signing time: Sun 11 May 2025 04:00:17 +0000
Manifest this update: Sun 11 May 2025 04:00:17 +0000
Manifest next update: Mon 12 May 2025 04:00:17 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 3fXC9rZm7sH3Y6BMCvcfRPDuLmF6n1LYW17XgszcDJQ=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:31:9a:f1:99:4b:34:d7:83:fb:1d:8c:3d:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: May 11 04:00:17 2025 GMT
Not After : May 12 04:00:17 2025 GMT
Subject: CN=708fce5dcafcbef3c7d1551457ff5651b0e6fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:c0:b4:89:a2:11:60:27:5a:cd:93:5a:8a:
25:42:81:ab:71:ed:aa:14:27:a8:85:96:9b:cf:99:
1a:32:05:db:40:7b:36:55:c7:84:fd:17:d2:5e:61:
9b:bf:a5:de:27:ce:8f:0c:25:81:34:e9:85:ee:8a:
30:20:e3:6c:7e:4c:ad:2f:3c:3b:d8:f4:6f:54:dd:
bc:b5:99:e0:b4:d4:b4:28:51:88:76:70:60:8a:59:
28:26:65:3d:c0:2e:62:50:c1:40:f5:23:b8:80:50:
65:bb:85:74:bd:66:ce:bf:9e:37:44:4a:7d:4f:35:
cd:29:4f:2d:2a:96:b2:e6:3f:42:cc:c0:ea:b6:a7:
aa:bc:6e:5a:04:a5:ac:f3:d8:b1:af:8b:ee:f4:93:
47:03:73:62:ee:f5:8a:79:71:da:d8:9d:a8:45:a4:
da:da:d1:2c:56:56:b9:66:3a:e0:59:7d:99:d2:93:
9f:41:3f:73:52:ef:ae:d6:d7:cc:80:1b:14:53:32:
85:db:ff:68:d2:36:e3:64:83:5e:e9:66:d9:5c:a7:
95:90:0e:34:06:3f:10:ac:e7:0d:4f:f7:de:33:64:
9c:fb:3e:e4:9c:1c:29:58:23:30:8c:41:16:1b:7e:
76:89:1b:b0:89:54:54:aa:71:e7:d0:3c:13:cc:39:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8F:CE:5D:CA:FC:BE:F3:C7:D1:55:14:57:FF:56:51:B0:E6:FA:62
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:14:62:57:54:86:1b:28:f6:f0:31:7d:60:41:bc:82:ca:df:
c1:04:7d:3d:cf:e6:e3:2f:27:06:d6:fe:ff:61:47:fe:c7:62:
6c:21:52:63:a3:0f:18:57:af:ae:ab:be:22:9d:5a:af:ee:79:
60:6b:7d:0e:e6:92:1a:aa:7b:d5:68:b6:94:2c:bf:19:b7:0d:
8f:0d:32:2e:27:a0:16:01:bc:4e:52:bc:1d:db:38:c9:fc:7d:
db:80:96:d1:cc:46:42:e1:32:4e:af:4e:c7:0a:92:e5:2b:a5:
3a:f7:ab:e9:eb:18:e2:e8:c6:3e:39:09:39:46:39:23:7a:21:
da:ab:cb:59:df:86:08:c2:d7:9c:f3:dd:4d:fe:18:9d:00:b6:
a0:b7:94:b3:16:cf:8c:a4:63:5b:35:39:3d:0c:52:62:26:d6:
ad:3b:2d:4a:e5:e7:e2:31:12:0e:04:24:f6:db:46:ea:ea:ae:
b3:30:cf:c3:7e:e0:a9:f3:d0:d7:06:cb:8a:23:cd:c2:48:d2:
19:0d:25:72:70:db:2d:aa:85:e6:7f:d9:df:96:de:63:c4:69:
10:65:26:d5:2a:45:71:6a:11:2c:e3:28:d9:26:df:2a:16:e2:
5d:f0:15:8b:b2:c1:5d:73:97:0e:09:f7:fb:93:91:e5:dc:9e:
76:3f:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:48 2025 by rpki-client