Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
File: 1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft (raw, json)
Hash identifier: gbKbJTyo3RwImWT264DJcQ1CKa7K9CHNl7+JBzx1lfg=
Subject key identifier: 68:C1:E5:2C:07:44:C1:D3:5E:49:5D:51:56:CF:23:D8:3A:B2:48:1C
Authority key identifier: FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05
Certificate issuer: /CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
Certificate serial: 0196C238D768D986684803D080FFBC45217E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
Manifest number: 04F3
Signing time: Mon 12 May 2025 02:00:27 +0000
Manifest this update: Mon 12 May 2025 02:00:27 +0000
Manifest next update: Tue 13 May 2025 02:00:27 +0000
Files and hashes: 1: 1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl (hash: 3IRP988reElwl0gCU5CAy9BMNigPvUjvrvWbCce/b+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:d7:68:d9:86:68:48:03:d0:80:ff:bc:45:21:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
Validity
Not Before: May 12 02:00:27 2025 GMT
Not After : May 13 02:00:27 2025 GMT
Subject: CN=68c1e52c0744c1d35e495d5156cf23d83ab2481c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:1f:93:7f:95:f6:43:dc:03:3e:a7:5d:53:
5f:e1:d0:19:dc:8f:38:a2:29:07:24:8f:7a:51:b9:
79:da:fa:d6:56:90:f8:80:6b:97:88:e9:8f:cb:1c:
e5:f1:87:f4:30:52:5d:81:0b:5d:52:44:aa:ae:95:
9a:da:c0:08:8c:67:68:6f:5f:21:d5:6b:81:fc:b2:
57:4f:a6:70:3f:76:33:a2:00:6f:7d:9a:f6:b1:06:
ed:ff:91:97:11:f9:0e:7e:81:a8:8d:b1:28:c8:e1:
45:da:70:0b:2c:7b:d1:37:ac:06:ca:02:30:86:23:
7d:ef:f9:e1:b4:c9:ce:e4:d1:7e:e4:8c:d4:ad:f0:
e9:04:09:d6:83:a9:6e:8a:99:f4:83:1d:4f:94:dc:
3b:06:d7:95:c9:4f:85:ca:6e:73:73:0d:43:df:73:
32:76:2b:bc:da:fa:fc:98:30:ed:68:c5:ab:7a:4c:
89:04:52:48:91:db:d9:e0:8d:bd:c4:b3:72:de:6b:
6a:03:28:4e:e3:94:dc:b0:fb:16:bd:3f:ab:36:53:
4b:5e:9c:94:2e:40:6a:2c:4c:e9:5a:f5:9f:4e:c9:
e3:65:d8:d2:e8:5c:d8:f8:91:e0:5f:42:11:95:8f:
22:3c:b8:e9:88:fa:d3:56:53:f9:da:89:5d:f1:fd:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:E5:2C:07:44:C1:D3:5E:49:5D:51:56:CF:23:D8:3A:B2:48:1C
X509v3 Authority Key Identifier:
keyid:FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:4a:bd:2a:3f:6e:68:76:7b:08:a1:68:64:c4:bb:cd:8a:
42:c6:e3:07:5d:7c:e9:32:3f:cf:79:1e:e5:52:d2:97:93:e2:
f9:1d:d2:4e:ea:a2:52:30:cd:b8:96:3e:43:1a:3a:da:5b:79:
ce:45:13:62:43:05:2f:48:46:38:f5:5e:5c:04:eb:d6:ff:cf:
75:55:5c:15:35:f1:92:02:f4:0d:82:99:94:d2:d4:67:53:a1:
f1:a7:88:8c:bb:69:39:c4:51:bb:ce:6d:dd:d0:61:96:59:0a:
b2:e3:f4:9c:a3:d9:7b:de:be:fd:2d:92:00:4e:f1:b1:ac:73:
b5:80:bb:b8:73:b2:9c:d8:80:9f:0e:1a:57:27:d8:f6:7d:9e:
ed:30:fb:09:0e:ee:16:8a:16:36:f2:e7:e2:8c:99:8e:f8:26:
0a:27:af:f2:85:8e:5e:64:7e:72:4a:56:5b:54:5c:bb:52:b1:
9b:4f:33:db:63:c6:46:11:b3:5c:1e:e4:db:16:67:5e:15:50:
bd:91:08:3b:77:bd:63:1e:01:5f:59:35:00:c2:6c:da:2b:18:
87:e0:86:74:a3:4d:40:2e:7b:69:38:63:89:76:d4:ea:85:eb:
3d:55:b2:53:03:fc:9d:a5:0d:23:24:93:71:b1:0c:f6:05:44:
0e:52:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:36:33 2025 by rpki-client