Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: 40KgmghHpd4KRDekzxqyysju/CeHhvcoeL3/BZ2uQ2w=
Subject key identifier: 4C:54:0E:D2:FE:24:4D:B2:A4:26:7E:2A:67:87:91:86:A7:19:75:86
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 0196C04B42F2AA43B233C7A597DF45082816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0596
Signing time: Sun 11 May 2025 17:01:19 +0000
Manifest this update: Sun 11 May 2025 17:01:19 +0000
Manifest next update: Mon 12 May 2025 17:01:19 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: S3FrV62xIBxIlrkaY1vFUbX1aUWcPJgBseuwMb73MVA=)
2: kidKlu5oDBem3t0h8aiG0Vv8dvw.roa (hash: Xo2YDFkznVnl+RRSUSAYifFOhE1syeVNtNcN0kJvN2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:42:f2:aa:43:b2:33:c7:a5:97:df:45:08:28:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: May 11 17:01:19 2025 GMT
Not After : May 12 17:01:19 2025 GMT
Subject: CN=4c540ed2fe244db2a4267e2a67879186a7197586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:06:49:6b:94:24:69:aa:36:bc:c9:28:dc:
f2:90:fb:4b:b7:67:0f:df:0f:57:75:ac:cb:9f:06:
ea:4b:79:de:f6:a3:37:02:69:67:cd:c7:61:99:23:
f2:19:82:d2:d1:e2:a7:93:b3:f3:ae:6a:fe:8e:81:
cf:56:22:f8:76:2e:00:79:22:9a:08:83:c3:27:b1:
d6:92:ab:b6:1a:9c:76:67:a4:3f:d0:5d:6a:c7:d3:
76:39:e3:0f:ab:c6:b5:60:da:56:64:84:65:30:53:
b7:b4:a3:89:27:db:35:83:ce:a6:02:7f:e8:7c:f0:
c8:4d:6e:37:33:6c:bf:1a:ee:5b:57:e2:c0:e7:f1:
5d:6c:4c:4f:fe:7b:c7:74:cf:0a:f6:05:8d:b7:4c:
6a:73:44:9e:ab:ce:81:87:9c:6c:94:8c:9e:92:14:
9e:67:62:2e:d0:1f:41:bd:e4:aa:40:89:f4:ab:c3:
d3:83:a0:ac:85:3d:27:2f:92:ab:11:66:5e:0d:3e:
5b:52:ed:fa:61:3d:34:38:b2:3d:8b:df:eb:84:2c:
66:9f:73:d8:a8:5b:57:17:c3:06:ef:8f:e8:b7:1d:
03:e6:f7:46:c1:54:82:7c:97:2c:a7:1e:8f:f9:44:
a7:d7:e2:64:ce:70:67:3d:74:20:df:d7:91:00:2b:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:0E:D2:FE:24:4D:B2:A4:26:7E:2A:67:87:91:86:A7:19:75:86
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:90:af:c1:92:fe:d5:6c:e5:f7:17:47:99:8f:04:58:72:61:
b0:5b:d3:5a:b1:e8:c7:82:59:33:cf:5b:79:c2:56:d3:74:14:
a9:de:92:3e:af:19:5b:71:11:9e:f4:a9:12:d4:8b:4c:54:c0:
37:78:d4:ff:e9:9a:be:27:cf:5c:5d:3e:f4:d5:e1:d0:8f:6d:
42:02:5c:09:57:3d:2e:9d:b4:02:9f:ab:95:ab:dd:31:db:6c:
58:fd:eb:43:2c:43:fd:27:18:a9:3d:93:81:9f:05:a5:0b:65:
54:02:a6:e8:ca:cf:32:af:5b:5f:b0:b6:74:33:96:ca:2c:85:
6e:4f:bd:34:71:fe:64:84:98:dd:38:22:1d:2c:10:1d:a8:b9:
d3:d1:2b:bd:4a:ae:9a:f6:f9:ef:2f:9c:5f:a5:6a:21:4e:44:
d3:0e:a3:d7:17:f2:99:e4:89:f8:c2:79:46:fc:a6:11:30:aa:
f2:ab:56:6b:de:6e:6c:71:56:fd:9d:25:f5:36:a5:9e:79:11:
93:b7:37:a8:4e:b8:51:eb:2c:d7:f7:be:0d:9c:77:de:71:8a:
70:9a:17:68:11:51:4b:fd:44:a6:13:46:a6:bd:43:9f:e8:1f:
96:cb:d4:7f:38:d7:fd:ef:20:20:30:e0:03:46:58:8d:15:19:
a6:b5:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:53:42 2025 by rpki-client