Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: oqD9G6odIWPhbx/EieOSsAbSOBb93hbo8zTGcBsHjIA=
Subject key identifier: FA:F9:45:F4:A8:C7:AA:92:FA:B9:A9:2C:51:DF:9E:2B:BC:17:4E:7A
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 01969F760A915165F7B11B63E7FDEE756F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 08:00:35 +0000
Manifest this update: Mon 05 May 2025 08:00:35 +0000
Manifest next update: Tue 06 May 2025 08:00:35 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: hOJ0oCacsQ2Ev6zGhzC1zjxsfuLlcHlzJo5K7zqdiPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:0a:91:51:65:f7:b1:1b:63:e7:fd:ee:75:6f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: May 5 08:00:35 2025 GMT
Not After : May 6 08:00:35 2025 GMT
Subject: CN=faf945f4a8c7aa92fab9a92c51df9e2bbc174e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:bb:f3:62:b7:a8:ca:c3:58:c4:89:18:46:
c7:55:44:1b:60:38:0b:58:b6:72:8c:da:45:51:77:
c9:e0:9b:6b:9c:7b:42:b8:b1:12:d1:3b:64:c8:54:
90:e0:31:f3:1e:90:7a:38:cc:e1:8c:06:f7:a1:1e:
66:c1:0f:ec:31:d0:0d:8e:b5:f4:79:e4:99:0d:35:
f6:7f:29:62:80:be:0f:3c:a4:95:1c:b7:31:91:94:
2e:58:0b:5c:a6:22:0e:fe:ac:49:3a:28:53:1c:0d:
ba:d4:20:b5:2e:71:e5:a6:1d:51:ab:df:0c:b9:ad:
8d:fc:da:3d:6d:ce:48:1a:24:1a:a5:43:af:37:fe:
ed:53:93:3c:4d:4b:38:39:15:d0:6f:94:2e:10:db:
ed:ef:d4:7a:87:ea:4b:23:9e:05:ba:c8:7a:1d:7a:
ba:f7:c9:21:c3:24:92:20:0f:98:23:c5:55:69:6d:
60:37:34:59:0f:39:3e:09:04:7e:31:1c:1b:a9:42:
43:f9:23:5e:dc:ff:bf:0c:e2:20:dc:db:bd:f0:29:
c7:59:db:d4:b7:ba:72:9e:c0:05:3c:86:2d:34:85:
68:30:fc:cc:e5:7a:c7:36:15:58:e7:eb:99:1c:0c:
1d:df:13:ca:37:d6:4d:78:0e:ae:0a:ed:6f:73:7c:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:45:F4:A8:C7:AA:92:FA:B9:A9:2C:51:DF:9E:2B:BC:17:4E:7A
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d5:2e:5b:8b:c9:93:22:b1:41:c1:82:b1:f9:e6:50:bc:c9:
2d:1f:f7:c6:9b:6d:38:a5:4e:97:c2:06:8f:42:7b:b8:47:ad:
af:fe:c3:48:32:b5:31:48:df:ad:41:f3:a9:4f:a6:76:e0:93:
ba:6a:80:78:e6:73:22:5a:d6:6e:bf:27:f5:28:ea:c4:e1:49:
fc:1c:ef:71:9f:25:2e:34:7d:3b:28:55:c3:21:84:3d:e2:1b:
3e:29:7b:e2:11:9b:b8:9a:99:08:a6:58:e0:48:b0:3a:0a:c7:
79:8f:44:27:d4:f1:bf:3d:53:a8:4c:85:82:9d:ba:3f:1a:eb:
25:c9:bf:3d:65:99:3a:98:a8:42:20:0b:c0:a0:61:71:58:73:
a5:db:61:fc:cb:d7:67:20:a4:dc:9c:0b:b3:4d:36:b9:27:ed:
ad:7c:35:be:51:e8:50:d5:d6:c3:a1:11:c3:03:fe:41:6d:e7:
b4:da:22:0c:3a:db:45:83:1d:70:cc:9d:49:51:6c:2f:8f:e5:
2a:a7:d7:a6:bf:78:ee:85:19:b8:08:3b:fd:8f:a8:4e:fb:f5:
a8:3d:24:cd:ee:81:32:68:ee:ab:19:4c:e9:20:6d:4d:16:67:
7c:8d:c1:19:21:3d:bd:11:6c:ad:5a:d4:dc:52:8c:6a:5d:53:
11:1d:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:21:44 2025 by rpki-client