Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: bw7t/lkVxjUN6g/7yrvxS7+QqDoIlBXXzNX0KvvFtUc=
Subject key identifier: A0:54:47:59:D1:5D:A7:6B:00:CC:BC:27:6C:EA:35:43:57:4D:D4:11
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 0196B935FD779C6820B8E0352612B93B50B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 0DAF
Signing time: Sat 10 May 2025 08:00:45 +0000
Manifest this update: Sat 10 May 2025 08:00:45 +0000
Manifest next update: Sun 11 May 2025 08:00:45 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: t7Y+rn53jsujm9KrzXyhwHXIOxzCKZHa7lUBnwWfpF4=)
2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:fd:77:9c:68:20:b8:e0:35:26:12:b9:3b:50:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: May 10 08:00:45 2025 GMT
Not After : May 11 08:00:45 2025 GMT
Subject: CN=a0544759d15da76b00ccbc276cea3543574dd411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:34:2f:0e:4b:6a:09:85:dd:d8:e6:82:e5:
50:60:77:95:38:8b:1e:0b:96:1d:67:e0:27:d5:cd:
a4:a9:76:39:8e:bc:98:bc:35:91:21:89:1c:ee:fb:
76:79:4e:8e:48:91:3c:9d:6c:c8:52:7b:00:d4:97:
3f:cb:a1:f4:f8:68:d7:52:b4:d6:22:98:ef:2d:50:
50:c8:a9:80:a2:d1:3a:c6:ed:c5:18:4b:db:22:16:
e5:67:37:1d:da:c4:cf:24:c2:02:cf:ac:e7:0f:2e:
98:20:b9:db:5f:33:96:55:ff:01:bc:0d:ee:99:69:
22:02:e4:d3:d1:9b:1f:1d:ed:67:7b:13:42:00:36:
a4:f8:39:23:30:5f:80:07:d3:58:71:53:f1:20:20:
64:cf:26:c2:ac:f9:12:83:1e:a4:09:5f:5f:10:2b:
10:2e:6b:32:ce:6a:c3:c4:a1:c5:95:90:72:93:5f:
21:17:49:3f:92:34:9d:f3:e7:17:dd:50:15:4d:d0:
ff:46:d1:d7:c6:7d:aa:7f:e9:b0:e8:dd:88:8d:a2:
94:b4:4d:8a:28:62:31:14:cb:e2:be:fa:d1:3c:a0:
ac:b3:7d:8f:dc:e3:e4:ab:60:3b:5a:10:e7:17:28:
a8:8e:7d:67:a7:49:f2:0b:25:6a:86:7c:41:54:39:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:54:47:59:D1:5D:A7:6B:00:CC:BC:27:6C:EA:35:43:57:4D:D4:11
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d6:da:8e:51:1a:34:e8:e4:e9:f8:c3:78:cd:cb:39:fb:2b:
8f:a3:6d:6c:9d:89:49:2f:c3:51:cc:42:0c:65:10:85:49:37:
7a:f8:6b:d0:1c:5f:e8:ed:c8:2d:29:e9:61:93:c5:dc:f0:83:
33:03:dd:f5:c1:1c:0f:ab:fe:9e:2f:60:be:8b:51:64:46:c4:
13:c3:ca:f0:41:a8:e3:b7:d8:96:20:fc:c4:ab:16:94:a4:4e:
48:91:c6:a9:1f:11:33:28:61:f6:21:03:2b:b1:4b:77:ab:8c:
ed:07:e1:10:f2:d4:93:30:b7:7e:59:a0:df:f0:d9:22:ec:c0:
80:a1:41:4e:0d:1a:e5:98:31:97:b5:8d:db:89:62:19:0e:1b:
ea:1e:01:24:95:26:c4:e3:92:72:5f:26:72:0d:a1:93:28:6a:
bd:42:9a:95:ca:35:8c:fd:ea:98:f8:ac:1d:10:60:4a:98:22:
a2:7a:9e:7b:85:7a:30:4c:25:97:f3:f3:8b:4c:6d:e7:4c:f9:
7d:db:cb:91:97:21:2a:cf:78:e5:72:c8:a8:cf:50:af:6a:1d:
82:81:c4:f1:f8:da:09:71:29:f8:ef:6b:b7:82:8e:58:ed:08:
f3:bc:17:a4:02:fd:54:88:7f:ba:70:a1:f7:89:8d:12:b3:07:
cd:a6:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:40:08 2025 by rpki-client