Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: QX4aSTRmIvaBsDyKc961bJBVUBSok4Dzsxk0YzvuZA8=
Subject key identifier: 4D:8D:FF:4D:51:1B:2C:F4:37:A3:DC:A4:89:E7:26:1F:6C:FD:28:2F
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 0196CEAAC53CDFDB349370DF34AB1624AD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0A24
Signing time: Wed 14 May 2025 12:00:20 +0000
Manifest this update: Wed 14 May 2025 12:00:20 +0000
Manifest next update: Thu 15 May 2025 12:00:20 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: h5jVgmObPT6uHlvmqADnrPlDnzPMxKppc25qJGAMWtQ=)
2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:c5:3c:df:db:34:93:70:df:34:ab:16:24:ad:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: May 14 12:00:20 2025 GMT
Not After : May 15 12:00:20 2025 GMT
Subject: CN=4d8dff4d511b2cf437a3dca489e7261f6cfd282f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:3a:5e:9c:ac:12:2f:c0:eb:0a:18:38:ba:
60:b2:52:39:41:8b:b3:34:09:61:2f:46:e4:85:bd:
62:2d:45:6a:ef:e2:b1:54:9b:e8:57:77:65:de:64:
be:d9:9d:94:82:6d:ae:e8:d0:3d:37:92:94:17:fa:
fb:8f:81:2f:57:23:72:ec:49:ce:ed:c5:66:b0:e3:
fd:d7:c4:ad:4a:75:ad:8f:04:32:ca:8a:c3:b2:6c:
68:0b:0b:f1:a6:a6:98:c2:6f:92:41:de:f2:b1:60:
68:15:3b:ed:4d:d8:38:88:7d:0c:17:e6:30:2e:9c:
2e:34:62:20:b9:50:2c:d7:88:ab:4d:0b:ab:78:cb:
f8:62:35:10:50:d7:d2:89:f8:f6:a9:bc:a5:a7:b8:
bd:e1:c8:40:e3:e7:8c:39:6a:50:28:3d:d8:4d:2b:
2a:7f:5f:24:07:1a:dc:c3:08:0c:bf:46:da:b2:27:
dd:97:93:9c:3a:12:71:de:2a:56:22:c1:39:7b:24:
26:7e:7f:90:12:51:62:10:e7:5c:d5:c3:f7:5e:be:
04:d0:e4:b8:7a:50:6a:bb:86:21:87:ae:06:a3:5b:
52:1a:cd:02:54:6b:17:a8:5a:4c:5e:b1:bc:79:e9:
6e:81:29:fc:d9:f2:05:db:d3:19:40:c6:94:58:cc:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:FF:4D:51:1B:2C:F4:37:A3:DC:A4:89:E7:26:1F:6C:FD:28:2F
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8d:a7:8c:8d:04:ca:11:fd:73:69:63:42:f0:74:d6:64:81:
f2:07:16:23:7d:e3:f1:cd:6c:4b:d0:10:c2:ed:fc:11:c2:ab:
ed:5c:98:59:3b:7a:9f:29:48:3f:78:bc:bf:98:ca:d2:94:2f:
d8:8b:1b:a7:63:4a:d9:cd:9b:be:b9:3c:0f:43:dc:fd:f6:df:
11:ff:ae:c1:5c:34:5f:a7:2f:95:fa:39:d4:d8:7c:aa:98:a7:
6d:40:3c:0c:b5:a6:49:55:1a:a3:f7:83:7f:6b:60:af:4d:d2:
0f:6d:4a:58:3c:00:36:e5:18:5e:3e:81:fa:ac:37:51:57:76:
0d:3f:18:04:18:96:6c:80:21:03:c6:22:90:e5:61:be:60:cd:
f0:3c:3e:4a:3f:1d:40:37:86:62:bf:e2:93:95:fe:03:d5:de:
62:0f:57:9d:ae:da:dc:f3:72:ec:31:5e:be:25:94:ed:a2:a1:
ed:54:48:7c:e9:cd:f0:80:eb:1d:5c:00:a7:e4:86:2e:c8:e8:
75:8c:bf:c2:4b:d2:52:de:b9:0d:a9:f9:99:f2:28:83:e6:42:
d2:74:1a:d3:8c:3c:b7:cd:a2:e9:b8:05:1d:34:87:f2:a5:8e:
63:7c:56:78:93:5e:93:d3:46:1c:e8:55:3c:2a:b9:27:98:86:
e6:6c:75:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:59:39 2025 by rpki-client