Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: X4+TYHx1fXjZ2Od0f/TWp6zYVke1r7f4QtXl9DnMc+s=
Subject key identifier: 02:27:9B:2C:FD:03:71:2D:95:95:76:EF:31:67:6D:61:C9:F8:82:88
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0196B4EB4044CD3E0C0CA0542D6C00C6FD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0325
Signing time: Fri 09 May 2025 12:00:38 +0000
Manifest this update: Fri 09 May 2025 12:00:38 +0000
Manifest next update: Sat 10 May 2025 12:00:38 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: HnV6p7Q11e60DPksPoOZQr+soBVKRgH0i8L3KGcB4E0=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:40:44:cd:3e:0c:0c:a0:54:2d:6c:00:c6:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: May 9 12:00:38 2025 GMT
Not After : May 10 12:00:38 2025 GMT
Subject: CN=02279b2cfd03712d959576ef31676d61c9f88288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:0f:9c:2c:03:e5:df:84:7b:a7:d1:d5:3c:
b5:f6:6d:5a:17:27:84:92:cf:84:4c:31:19:b6:d7:
57:af:37:df:3c:b9:fb:42:4e:7f:63:ac:22:aa:9a:
aa:3b:a3:07:11:56:b0:de:d6:62:20:b1:4b:a4:94:
d2:14:70:5a:63:11:ff:8d:da:60:8f:80:61:79:9c:
2a:52:7c:fc:5b:1f:2a:2a:a6:56:32:62:78:df:88:
39:fb:2b:66:6d:74:9d:ca:ba:be:af:c2:3e:39:c3:
04:b9:a2:39:80:76:85:ed:3d:5b:4f:02:9f:85:0c:
ea:f2:db:ed:a7:94:98:ca:e9:4c:44:fe:a1:a0:76:
61:b4:ce:83:e1:1d:4b:c9:83:b2:46:69:ec:bf:25:
9c:2d:54:76:45:49:d1:a5:b1:d5:34:40:61:6f:89:
1e:1b:5c:3f:81:a9:35:dc:13:e2:57:e8:27:c4:39:
a3:09:ef:48:6e:0c:d5:6a:e7:93:0e:39:82:35:34:
7d:c1:bb:2f:6f:76:b4:eb:2a:79:bd:d3:62:7a:c0:
3a:4a:2c:b3:58:e8:12:18:58:33:fa:6b:41:26:c9:
a7:66:af:01:c8:5e:85:e6:32:a2:9a:cd:59:3a:f8:
0b:98:c9:f1:3d:e7:d1:07:7a:81:19:5f:8d:d2:b1:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:9B:2C:FD:03:71:2D:95:95:76:EF:31:67:6D:61:C9:F8:82:88
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:07:f6:8f:85:d4:1a:5d:f8:07:c4:14:b0:17:07:2d:1b:98:
d8:8b:f7:ec:02:34:3c:e0:e9:62:b7:3a:f5:13:43:d5:e2:6f:
9d:cc:a7:0f:48:e0:c9:cb:3b:68:06:af:d8:1b:14:ef:c8:cb:
10:ad:5b:16:89:61:1a:e5:b8:21:84:fe:53:fb:96:96:5c:d3:
85:dc:8d:20:a9:3f:aa:78:05:c9:f2:db:37:b7:df:c5:37:2a:
6b:43:07:22:e7:91:f9:bf:1a:33:5d:6e:d3:9f:a4:12:97:b1:
63:c7:d3:42:f5:76:08:96:72:8c:d9:a3:1b:f8:b3:dc:e2:4c:
75:1a:62:e4:d6:aa:64:6a:0f:5a:4d:e0:7c:cd:79:9e:1c:2a:
fe:9d:af:d0:9c:63:71:4c:e9:ab:ab:5b:49:7b:c1:d9:e2:c0:
20:19:fc:c7:8e:f7:32:ce:10:b5:e7:de:fd:35:0c:92:df:00:
6d:50:96:68:c2:91:aa:ee:78:40:3a:bb:97:1d:92:6b:23:1b:
d8:ff:4e:b2:66:b7:fe:36:e0:9d:4b:08:a0:ee:64:57:65:5c:
31:16:6e:61:f1:0e:f9:0e:f5:27:b4:1d:6d:2b:00:63:2b:3b:
66:d3:fa:d0:80:72:59:61:96:46:48:8d:b0:2b:f7:82:f1:09:
e9:db:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:44:00 2025 by rpki-client