Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: OGZeSNxW6FPjjTYgLefqeWSpCJmmDe2/Gvr1GbPLq0U=
Subject key identifier: AA:AC:A8:49:63:1D:83:9D:C2:6F:84:A0:7B:E1:4B:E5:59:48:FF:A1
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 0196ACFB4C5B54F64FDF5A87EEDF6EDEF3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 073E
Signing time: Wed 07 May 2025 23:01:12 +0000
Manifest this update: Wed 07 May 2025 23:01:12 +0000
Manifest next update: Thu 08 May 2025 23:01:12 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: 05vBPdesEhEBUHMEQfw6Opemsgynbajodgu3jfCmVo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fb:4c:5b:54:f6:4f:df:5a:87:ee:df:6e:de:f3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: May 7 23:01:12 2025 GMT
Not After : May 8 23:01:12 2025 GMT
Subject: CN=aaaca849631d839dc26f84a07be14be55948ffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:be:e6:2c:da:66:2d:f3:92:9f:0b:97:96:
a1:5a:20:be:d7:24:e1:3c:e6:0f:dc:85:e4:b4:85:
f3:8c:8e:9b:ac:5c:ed:48:20:49:f6:eb:58:4f:bd:
65:d5:b3:0d:5b:38:5b:f8:07:d6:52:17:b8:61:2b:
76:13:67:6b:0e:bc:dd:b7:4f:39:74:e9:90:8c:f4:
ff:1d:26:55:3e:11:cc:e1:b1:e0:c1:6b:f4:8c:10:
38:bc:c2:f4:82:19:77:8d:b9:cb:78:94:70:72:b0:
65:13:36:f2:a4:68:9c:5f:4e:b3:92:a8:f0:68:4d:
83:3d:bc:90:56:f4:de:88:e7:77:e4:b5:1b:5e:43:
d9:69:d3:8f:27:20:51:93:f2:3d:0c:05:d6:7f:d7:
55:4b:bd:0d:6a:2f:6b:9b:f1:c2:31:4d:44:0e:ab:
5f:b0:8d:d4:45:02:b9:93:2c:ea:f9:4e:58:16:ab:
b8:9a:fb:6b:a5:6f:ff:48:81:e0:77:f6:d6:db:94:
0a:5a:76:d5:27:4a:ff:60:b6:1a:63:88:38:28:37:
c3:31:f5:c6:3e:0f:5e:7b:4c:7e:73:9d:02:38:40:
f7:20:66:9c:a6:20:c7:49:75:21:6e:94:d2:43:61:
02:d6:19:89:b1:1c:b6:30:3d:dc:bb:8b:2a:cc:d8:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:A8:49:63:1D:83:9D:C2:6F:84:A0:7B:E1:4B:E5:59:48:FF:A1
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:0b:b9:e9:7c:a5:c4:fd:30:94:68:c8:b3:6d:f0:53:25:
f1:d3:85:0e:84:d0:8d:f0:91:45:c7:da:bc:06:9b:d2:fd:98:
e0:7d:51:e5:bc:a5:52:fa:0d:46:93:2d:15:85:94:5a:61:b0:
af:2f:6a:2f:ff:f8:ff:ee:99:33:fa:c6:94:60:eb:dc:a8:90:
78:77:fe:2c:5f:67:97:be:33:6e:dc:5f:c6:fb:4a:56:4d:23:
17:5b:c0:ef:45:c7:49:16:7f:ce:03:02:e6:d5:1e:38:fe:6b:
d2:0d:7f:b4:de:b5:6e:d6:f8:1f:b9:17:c6:cf:98:ac:9e:9f:
36:19:2f:77:47:de:ef:6e:b9:fc:8c:5d:14:08:2a:53:8f:2a:
0f:f1:21:18:2f:f5:8d:6a:dc:f2:ea:a5:a0:9f:af:e3:63:01:
ad:92:80:bc:cf:61:d8:a5:18:23:e8:76:01:b1:11:b5:d1:4f:
6a:80:5f:b8:ce:5d:11:9f:ea:fc:9b:0a:15:0b:9b:b7:2e:75:
cd:ce:af:12:8a:b9:69:64:f9:20:62:8d:9c:ea:6d:1b:b1:dc:
91:4f:6d:23:2b:9a:1d:20:77:ac:ea:bf:4d:0e:e7:00:9a:61:
7d:ad:5a:0b:dd:56:a4:e4:c9:3a:bf:6f:30:cb:e2:76:f2:50:
93:2f:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:01:34 2025 by rpki-client