Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: WAGGBLKTcNPd9giHP6F4oSgBlEW1WpBnpo7143HCvjY=
Subject key identifier: B6:05:74:C8:EF:5F:76:84:2F:8B:58:63:3E:BB:0C:FC:E4:0B:5A:D6
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 0196BF0113A0CBC1760CA32EE534AFB1EF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 1479
Signing time: Sun 11 May 2025 11:00:40 +0000
Manifest this update: Sun 11 May 2025 11:00:40 +0000
Manifest next update: Mon 12 May 2025 11:00:40 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: +EG+Cyk9BZEYpthz9UwMOdTIHXYc14yZjUiySnh8kKk=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:13:a0:cb:c1:76:0c:a3:2e:e5:34:af:b1:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: May 11 11:00:40 2025 GMT
Not After : May 12 11:00:40 2025 GMT
Subject: CN=b60574c8ef5f76842f8b58633ebb0cfce40b5ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:8f:10:b1:45:3c:dd:96:5a:c7:a0:84:ec:
08:69:05:80:2b:3c:b5:9c:ad:bc:7f:8f:f9:d0:ec:
c4:c5:4f:b7:12:9d:1b:d1:d8:fd:59:82:ac:cf:2a:
a6:d6:c0:e0:4e:cf:54:fe:56:b6:8d:35:41:06:12:
25:b5:13:45:0a:e5:4d:91:77:c4:b8:6f:64:28:a2:
79:6b:cf:e0:4d:e5:5c:46:14:da:48:00:06:68:95:
2a:a0:e3:5c:58:51:12:b9:c2:51:05:0a:85:a6:23:
05:6f:e1:52:0a:9f:3d:d2:f9:da:d0:0b:93:dc:67:
81:78:f2:b1:a8:0f:f7:64:24:99:d6:3a:65:6c:02:
80:64:25:54:d1:1b:2a:b3:dd:20:79:d2:66:bb:d0:
c5:07:d1:7b:57:0d:7f:aa:de:ad:20:b7:8a:fa:f6:
f2:d8:62:95:0f:a3:0d:6c:30:92:25:d6:93:7c:90:
da:0f:02:d6:06:e2:1d:50:48:32:ee:37:9f:9b:45:
f6:50:7b:f1:3f:f6:58:4f:15:d2:0c:48:11:1c:45:
85:ff:01:c0:a1:67:db:67:15:0e:ae:12:50:b3:a5:
4d:74:e5:09:5b:7b:b9:e5:f6:98:d1:fb:a3:58:02:
3e:bf:a6:87:8f:cd:b0:8c:8e:e1:a7:32:d7:23:74:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:74:C8:EF:5F:76:84:2F:8B:58:63:3E:BB:0C:FC:E4:0B:5A:D6
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1d:ca:9e:27:20:6f:e4:a0:78:86:87:c2:14:4a:86:3d:ac:
72:9a:3f:1a:75:47:11:8b:fa:20:79:45:a2:63:ec:5d:75:53:
f0:30:93:d8:6c:3b:35:3e:ba:65:d1:b9:cf:54:99:c3:97:93:
4d:e5:0e:34:58:b2:55:57:b5:1c:fd:f1:58:b1:0b:44:2a:75:
7c:23:dd:de:c5:c3:21:c3:09:8e:85:a3:89:07:ba:ba:42:b2:
f2:01:18:61:af:4b:73:5d:62:d6:4c:7a:a9:f3:d9:70:df:0e:
96:ef:24:80:a0:5b:bb:3c:b3:58:05:be:a7:e5:1d:6c:61:e7:
85:ab:b6:cf:b9:b9:d1:80:ae:64:36:ab:ec:25:9d:8c:af:c7:
24:07:54:8e:0d:3f:cf:64:54:1c:97:e1:7f:32:ca:f5:35:82:
fd:15:a1:a8:f1:e4:c0:d6:37:3f:14:a3:2c:a4:e2:7e:59:8d:
d6:e0:84:93:8a:ae:b1:7d:27:f5:0c:37:0d:73:4a:9f:d3:ab:
6f:6e:c5:e1:64:78:d6:92:f6:08:79:ac:54:0f:40:90:2d:d7:
4c:36:27:dd:84:04:00:ec:69:b7:4e:9c:68:d4:b2:56:1a:08:
de:a2:d1:bc:49:1f:7f:c7:a5:5a:0f:66:1c:80:31:88:a7:38:
e7:70:12:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:49:07 2025 by rpki-client