Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: XlPCJCD1V2Ydt7z8KX73hd1MCjA9YtY+xARXfyYSNks=
Subject key identifier: AC:9F:19:C0:EF:DA:18:7D:02:2C:92:C6:FF:6D:E0:8A:86:BC:DB:D4
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 0196C0EF0847F90987F0F59F0364E02E4C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0C1E
Signing time: Sun 11 May 2025 20:00:12 +0000
Manifest this update: Sun 11 May 2025 20:00:12 +0000
Manifest next update: Mon 12 May 2025 20:00:12 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: IyJfGVlYvAtoGS80/0MHRi88Hvi0V6g0IAN3UXuz58M=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:08:47:f9:09:87:f0:f5:9f:03:64:e0:2e:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: May 11 20:00:12 2025 GMT
Not After : May 12 20:00:12 2025 GMT
Subject: CN=ac9f19c0efda187d022c92c6ff6de08a86bcdbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:af:76:1e:5c:29:d8:58:e4:28:6c:10:40:
e0:86:95:2f:54:c5:51:26:89:1d:26:9d:80:93:39:
2c:5a:9c:c3:ce:f1:85:7f:b8:2c:4c:c2:95:ac:f7:
c4:d6:db:ab:81:fb:1b:3a:08:3a:be:ee:81:bb:5d:
41:48:68:e7:4f:f1:17:4e:d4:20:9d:1a:8b:fc:85:
5d:04:ac:20:1b:82:b6:cd:a2:77:d4:99:9b:a1:4f:
da:6b:c3:91:4e:d9:e0:60:33:51:21:19:28:36:9b:
c7:5c:6d:9e:36:ef:5e:71:e0:07:2a:e7:68:b0:10:
76:18:1b:37:b0:e2:16:19:c4:99:fc:19:75:c0:5a:
d8:3e:88:87:b9:a4:db:31:6d:6a:c4:d1:3b:a6:e3:
6f:46:99:e0:d9:c4:6d:05:96:29:18:3a:92:4f:ef:
f0:ea:a8:87:23:c5:46:30:65:04:66:a8:1d:27:0b:
e3:75:24:8b:db:6f:4b:42:09:26:04:6f:1a:27:e6:
1c:f1:f3:b3:79:42:a2:f6:29:80:4d:b9:a8:4a:2f:
26:3f:d8:1b:a9:0c:b4:eb:d2:15:0d:e1:4e:a5:a7:
43:3c:6a:33:92:f5:ed:ea:55:58:b5:59:22:9f:d1:
38:12:4b:65:e3:da:e4:be:93:6d:88:3f:c6:cb:27:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:19:C0:EF:DA:18:7D:02:2C:92:C6:FF:6D:E0:8A:86:BC:DB:D4
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d5:47:1f:37:a8:47:ed:7c:20:ab:c8:5a:ad:8d:55:57:22:
09:b8:91:70:5a:de:33:8b:10:31:97:33:b5:b2:3b:2c:f6:53:
ef:26:06:92:a3:69:25:f2:13:9d:21:bb:71:50:a3:8e:b7:35:
68:78:7d:15:4d:d9:6e:b6:ce:e1:f9:94:66:41:91:dc:d6:44:
0a:a5:1c:aa:d7:dc:74:ec:ac:b3:f8:b5:ae:03:87:e1:32:34:
77:10:a2:a7:ab:1a:69:e8:7f:a5:e5:ad:6d:8f:15:85:4b:f4:
17:ac:53:97:80:90:f0:af:ff:f5:21:b1:ed:e3:9c:72:2a:92:
3f:6f:43:2c:6b:c9:a4:aa:a6:af:39:d8:00:d2:d0:91:76:02:
2f:96:8c:30:f9:ef:bc:17:ee:58:ca:f6:28:ca:b9:90:d4:c3:
9f:74:f1:d2:37:ac:96:32:e2:ac:fd:d3:0d:74:b3:c6:61:8f:
6f:12:9e:a0:53:90:30:9d:59:f7:42:3f:3d:f4:88:d5:0a:e6:
16:97:66:16:87:cd:a8:80:99:1f:32:60:0d:b9:a8:6f:fc:43:
17:30:06:0e:d6:56:c4:9f:2c:bc:f7:11:34:dd:27:a3:af:bd:
cd:01:a3:52:9d:54:22:87:11:a4:cc:82:3d:a8:c8:94:2c:0a:
81:5b:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:27:29 2025 by rpki-client