Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: eMlMFc7jNVMv6mueKAFrrTNm2MUB1Hl/mf58ln9f+/M=
Subject key identifier: 1F:5F:07:62:B5:2E:89:88:47:FA:72:8B:24:A5:A1:C4:C5:40:78:70
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 0196CA299043C785016817529AC0233E777E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 24
Signing time: Tue 13 May 2025 15:00:43 +0000
Manifest this update: Tue 13 May 2025 15:00:43 +0000
Manifest next update: Wed 14 May 2025 15:00:43 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: aE6/wCCbDnuxjofiVFlhyYAc/ihiADEb87TncLsM/y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:90:43:c7:85:01:68:17:52:9a:c0:23:3e:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: May 13 15:00:43 2025 GMT
Not After : May 14 15:00:43 2025 GMT
Subject: CN=1f5f0762b52e898847fa728b24a5a1c4c5407870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:6e:48:d6:7e:f7:f7:6c:f6:73:8e:b1:00:
2a:1a:e5:ce:1b:32:75:7c:67:cb:d6:5b:83:41:e6:
34:5f:6a:90:7a:30:2b:d8:6d:21:9f:c9:24:fc:28:
db:16:09:8f:a2:25:fd:29:11:8c:a9:be:bc:90:47:
96:aa:8a:d5:0a:76:51:84:84:88:e6:37:15:9e:8e:
0e:16:79:0b:9d:e3:a8:cb:53:05:9f:08:53:70:42:
10:db:90:32:2b:86:4f:fe:c7:d4:99:43:d2:f9:d0:
65:ba:f5:a9:68:eb:ba:de:d5:4e:66:05:86:6c:23:
af:5a:c2:79:a9:4c:29:fa:80:e2:56:d1:5a:00:0d:
de:8f:4c:65:a3:00:20:d2:58:a3:55:99:f2:02:8d:
1a:c5:ec:eb:59:63:4c:17:59:39:62:42:50:96:81:
ec:14:79:5b:6b:c1:e6:7c:58:38:8f:7c:e2:00:83:
b0:f5:2e:74:4b:8e:26:8b:0c:3a:d6:91:92:a0:b4:
62:42:08:4a:60:2d:fd:b2:2f:4e:de:02:e8:c6:a2:
45:ef:e7:1d:2f:92:a4:da:95:b5:76:bd:3c:19:c7:
b7:87:ea:93:d4:b2:58:1b:53:0b:50:4c:63:d1:fe:
0a:1c:62:ef:ef:14:c8:05:63:09:75:25:ba:23:97:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5F:07:62:B5:2E:89:88:47:FA:72:8B:24:A5:A1:C4:C5:40:78:70
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:61:af:18:ad:ba:bc:e6:7b:ae:8c:bf:49:86:0e:77:23:40:
00:f0:65:c7:79:88:ff:10:17:43:bd:32:e5:67:22:46:c4:6f:
0a:34:12:92:3c:d0:3e:c9:99:8a:7b:1f:3f:66:36:e1:bf:2b:
95:bc:b2:0c:97:91:e4:93:e4:b3:1b:cb:a1:30:90:25:69:17:
9c:99:f1:f9:1b:ee:69:82:6f:f7:eb:91:25:af:3c:51:90:e5:
a2:50:13:99:d3:92:4d:a4:ad:f3:2e:41:5b:5e:d2:dc:fb:df:
e1:31:71:70:57:24:f8:98:e9:2e:32:c9:87:93:16:5e:fb:57:
91:f0:6e:4b:88:a2:10:48:63:d6:94:3f:04:eb:2d:d8:41:fc:
cf:e3:1c:25:a1:79:49:67:ab:b5:a9:a0:83:62:91:e5:d9:6d:
34:91:58:34:32:11:b0:04:6f:99:dd:b1:fe:6e:db:b2:97:6e:
9c:04:4e:d7:e6:37:23:b0:7c:94:fc:d0:ec:e1:b9:19:be:1e:
18:8d:1b:d8:e0:35:7e:20:4c:df:97:82:bd:91:07:29:f2:be:
b2:e3:4b:8a:ea:06:f1:01:42:e0:49:31:fb:72:90:92:b5:5e:
67:7b:58:79:9e:84:59:48:89:de:fd:d7:ed:7b:e5:96:62:15:
ca:1f:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:28:02 2025 by rpki-client