Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: 0kDAH/ltE2f4YDSCuM4+00qvKpEYmOt/K6UlY2FB7+Q=
Subject key identifier: 5C:04:EC:B2:40:AB:9D:AE:A4:99:75:24:DE:A1:05:E2:D5:02:D9:DD
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 0196C7CD49F97131CE3E0A7EC029DC71BE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 0FD1
Signing time: Tue 13 May 2025 04:00:41 +0000
Manifest this update: Tue 13 May 2025 04:00:41 +0000
Manifest next update: Wed 14 May 2025 04:00:41 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: AA8aH2ZkTLBi/6+5oewNqV5ewTzYhr67WQSeuCB/pSQ=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:49:f9:71:31:ce:3e:0a:7e:c0:29:dc:71:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: May 13 04:00:41 2025 GMT
Not After : May 14 04:00:41 2025 GMT
Subject: CN=5c04ecb240ab9daea4997524dea105e2d502d9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:3c:79:07:5d:3b:c5:14:fa:53:a4:8d:2b:
65:a2:7a:8d:c3:3d:9f:85:d2:03:ea:f0:64:68:a2:
3c:90:4d:30:3d:ac:83:8b:d5:88:e7:93:0f:e5:65:
0d:7a:ff:0e:7a:1e:07:25:da:03:df:70:ab:0a:3e:
a9:d8:dc:c4:16:c5:97:05:ef:c2:52:53:73:05:fe:
d0:74:02:10:c8:07:5d:a7:60:b1:57:a3:78:e1:f6:
15:a6:54:87:93:7f:b1:f3:f1:e1:47:78:32:78:85:
ee:31:68:c9:a0:a0:51:6a:fe:d0:34:b6:7c:a0:c8:
db:72:4d:1f:f0:76:64:e1:f7:9b:45:a2:98:ef:e3:
6a:63:2a:fa:0b:22:c9:2a:10:88:3a:07:10:4f:09:
f5:ff:ce:72:d0:52:d9:16:62:53:b6:c7:2e:18:ab:
08:be:94:11:81:d2:7a:6b:0d:2d:59:99:32:a8:98:
ce:a1:01:98:c4:d1:49:ce:b6:c3:a3:99:ce:c4:2e:
e5:ca:44:37:d4:da:dc:35:97:63:89:9f:c6:93:80:
9b:e3:4f:3c:57:17:51:75:80:7a:dd:7f:2e:bd:74:
22:0a:72:b3:03:03:41:e0:3f:6b:18:7a:0b:13:21:
26:02:fc:11:fb:8f:cf:5f:0f:c3:63:b3:f3:2e:d8:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:04:EC:B2:40:AB:9D:AE:A4:99:75:24:DE:A1:05:E2:D5:02:D9:DD
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b2:92:86:df:e4:21:c7:29:fa:c3:8a:03:c4:06:c1:e0:c0:
ac:d5:9b:17:c5:b6:a1:64:a4:8f:b5:da:2b:fa:05:a2:51:b8:
47:2c:9b:89:11:7b:f1:88:4d:b2:bc:26:1c:fc:91:cf:88:f2:
83:70:10:89:95:16:bf:22:46:81:93:ae:2c:38:20:66:a2:03:
9e:d5:89:49:ca:b5:4c:82:e2:89:b0:62:72:9e:bd:26:44:3e:
2e:f0:a9:b6:b8:c4:09:59:0b:b5:b4:40:52:18:03:e0:42:46:
eb:04:cd:8d:e3:2a:80:80:b7:b7:74:11:df:f3:ae:44:e6:06:
93:8c:5b:43:9e:0a:55:da:5a:ff:de:b8:99:e8:f8:a9:ab:48:
0c:54:d7:22:8c:b1:b6:a8:c8:7b:fb:08:7d:78:13:87:a8:54:
14:7c:0c:dc:e4:63:21:b8:97:5c:42:76:1c:ce:db:5b:d6:cb:
fa:d5:25:f9:af:7a:ba:a7:c0:b8:dd:7d:74:2f:1e:6e:1b:2d:
46:15:bc:b8:a0:3d:a9:a9:53:7d:9c:1c:da:64:da:36:20:83:
a0:48:bf:a3:16:b2:f1:d0:d5:22:7d:75:98:70:7e:79:48:01:
0a:e8:c6:c4:9d:b8:df:80:cc:44:92:db:04:50:be:2d:e5:e2:
79:44:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:43:46 2025 by rpki-client