Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: 1pqOIZwguWAnDo386Q2gEqTB1wbOVsS8kz/wWih2SPQ=
Subject key identifier: BC:56:05:E4:DF:7B:88:4C:00:8A:DD:B4:8B:B9:05:14:B8:39:A0:78
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 0196D0D0692EC2F2802F7BD43C0E50F351B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0B6A
Signing time: Wed 14 May 2025 22:00:41 +0000
Manifest this update: Wed 14 May 2025 22:00:41 +0000
Manifest next update: Thu 15 May 2025 22:00:41 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: IIik4N13WadstYuYTCYUB4vzz9QLAbeRrIPnwwe8gmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:69:2e:c2:f2:80:2f:7b:d4:3c:0e:50:f3:51:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: May 14 22:00:41 2025 GMT
Not After : May 15 22:00:41 2025 GMT
Subject: CN=bc5605e4df7b884c008addb48bb90514b839a078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:5f:68:4b:13:a3:21:8f:48:39:63:4c:8a:
ce:ea:cc:de:3c:27:78:38:64:b9:d3:8a:08:b3:76:
5e:0c:6d:a6:26:f3:6d:bb:ba:c3:46:6e:c9:ec:33:
9e:e7:d1:b2:59:05:a5:19:6f:0c:9d:54:81:43:3d:
ad:e7:8c:ab:5e:f3:f5:f0:93:fb:6a:f6:3b:9e:76:
ee:13:b8:bb:37:a7:a7:8d:34:4c:46:d9:c0:44:34:
cd:99:7f:37:fa:fd:49:c1:e2:41:77:c6:53:ef:de:
61:09:db:40:f4:9b:37:25:eb:89:fe:26:41:04:17:
cd:48:c3:1d:ff:e0:2b:d5:16:30:18:2c:c8:c3:17:
c0:2a:fa:8a:4d:b8:a1:bf:b2:c7:4d:df:d1:a4:bf:
c1:34:f8:39:b7:35:59:a6:70:ad:77:50:d1:62:e7:
73:b8:06:1d:ef:97:da:6c:1c:57:89:06:c4:98:a7:
d2:10:c4:70:9d:ad:2b:53:df:c3:2e:4e:26:c1:6a:
cb:56:f9:ed:85:0e:20:71:0f:26:7d:d0:90:5a:ca:
de:de:84:30:9d:b2:fc:20:16:eb:40:3c:d5:a5:47:
cb:3e:f5:cf:10:c1:4d:04:45:9f:ec:de:3e:65:b5:
ea:2c:70:b5:0a:99:d8:86:10:be:4c:05:7e:61:57:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:05:E4:DF:7B:88:4C:00:8A:DD:B4:8B:B9:05:14:B8:39:A0:78
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:09:68:56:96:43:ca:04:65:f5:fc:ae:b7:ca:15:da:ca:64:
61:9b:d5:e1:29:0b:d1:60:09:4f:e0:18:b7:3f:db:10:bc:01:
e6:87:f1:f1:4c:0e:15:70:92:02:f2:52:6a:9d:2a:8f:4f:24:
6f:28:96:df:a7:87:60:78:99:57:75:fb:7d:0e:71:ea:16:b1:
7c:46:98:93:0c:51:73:25:d2:6e:50:a6:6f:92:e3:07:c0:b1:
21:d1:2f:62:43:0e:09:6b:df:0a:99:19:c7:ef:4c:f2:be:9e:
42:3b:18:cd:28:f8:51:d4:6b:6c:b3:81:b6:b8:09:1a:69:2f:
20:93:4a:53:df:1f:54:7b:db:65:8d:10:90:b1:30:62:ae:4d:
15:da:47:e5:a9:2a:94:c1:cf:5e:d8:3b:af:a1:e1:65:0d:0a:
35:15:f5:33:12:7d:c5:0b:83:dc:ef:9b:da:60:46:78:9e:79:
11:69:1b:d1:e9:ce:1e:f1:ee:7a:6e:6e:98:1e:68:ec:0a:61:
66:7f:44:bb:bb:d9:fe:a4:4e:d5:91:57:13:b0:90:d2:31:29:
c1:66:8d:16:31:7d:b7:94:b7:a1:41:67:a6:f6:fa:a4:ed:1d:
cd:db:25:eb:18:d5:5f:ad:2c:eb:ab:4c:40:75:e3:2e:40:8b:
07:3c:fb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:32:38 2025 by rpki-client