Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: h1nWzqkZzLl6W+Zk7KbdVKPKsbn+FiBqlw7MVAwSyys=
Subject key identifier: 29:10:4A:F0:29:97:22:51:77:F2:10:20:FB:00:CD:0B:DB:8A:8D:6E
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 0196C26FDFE1F3F5FC1414F1B1B6AF93ABDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 02D7
Signing time: Mon 12 May 2025 03:00:33 +0000
Manifest this update: Mon 12 May 2025 03:00:33 +0000
Manifest next update: Tue 13 May 2025 03:00:33 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: KExmtDtr7UCLCZWkz+G52sVa5LLfJjd5mzBXg1N/4Tc=)
2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:df:e1:f3:f5:fc:14:14:f1:b1:b6:af:93:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: May 12 03:00:33 2025 GMT
Not After : May 13 03:00:33 2025 GMT
Subject: CN=29104af02997225177f21020fb00cd0bdb8a8d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:7e:b6:f7:b8:71:e9:7d:4e:a4:90:51:b6:
4a:32:06:be:88:c2:46:df:9e:4e:33:3b:42:5a:d8:
71:d9:e5:73:8f:60:20:57:46:37:5e:49:4a:33:10:
e2:91:5e:5f:f4:89:c1:b4:95:ba:cd:fe:28:ce:c3:
6e:3a:c8:e9:96:bc:17:83:c3:e3:a8:3c:ec:af:48:
51:80:4c:52:53:33:c5:4b:e9:36:49:fb:9f:48:da:
46:c0:45:62:50:12:47:0c:ac:3f:bd:46:3b:d3:03:
85:a6:92:b6:ab:9b:26:76:d4:1e:a7:24:00:17:9c:
67:8d:37:0a:fd:59:27:4e:5d:ac:ad:d5:79:9b:f7:
04:9c:d6:1c:c3:d0:4d:30:85:67:4b:06:03:f8:42:
f3:3c:af:bd:8d:89:1a:72:c5:f5:c7:2e:de:69:64:
42:c1:44:70:69:b1:95:31:52:a9:b8:c8:00:80:35:
6e:b4:dc:d8:fd:16:db:8f:61:25:66:bc:80:94:42:
0a:6d:a0:0b:ea:88:a3:17:4b:24:37:0b:3c:3c:bc:
1d:07:d2:a6:d5:66:4a:8f:5f:c0:95:e3:ec:60:24:
c0:4d:d2:1c:c6:5b:12:1c:3a:d5:a3:01:ed:a0:3c:
54:a7:2c:01:79:77:ed:23:6f:0f:ea:7b:90:39:db:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:10:4A:F0:29:97:22:51:77:F2:10:20:FB:00:CD:0B:DB:8A:8D:6E
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:a4:22:b0:89:7b:2e:6a:57:fc:58:40:25:cc:c5:ce:05:
42:3e:d8:ea:de:8f:7e:49:49:24:c7:1f:f1:dd:b8:6e:a3:93:
24:4e:55:1c:89:63:4a:03:f3:96:c2:8a:12:be:69:38:7d:38:
2c:9b:70:89:57:0c:2f:07:ec:f1:7a:c1:15:37:d1:d2:c7:35:
7f:1f:c5:18:f4:f4:2d:1f:8c:c2:17:a7:64:90:f0:9f:ec:19:
1d:e8:91:31:2d:4c:4e:a4:66:a7:0d:de:bf:60:cf:f3:0a:f4:
bd:73:f8:2b:ca:de:91:b0:1d:20:59:30:9c:3d:97:37:5d:48:
84:db:3b:98:f8:bf:4f:ce:8e:b6:74:ed:6c:65:36:c9:f4:dd:
50:7e:cb:e7:b9:74:b3:f3:57:73:e2:93:f2:52:03:bb:9b:a8:
ec:d9:ad:0f:7c:30:88:be:b0:98:b1:df:be:35:08:a9:82:95:
9d:fc:e9:ce:84:d3:ce:ee:73:77:a9:7c:25:9d:8a:47:cc:78:
26:e6:75:f8:44:0d:c5:b0:58:b4:e5:e8:c2:c3:e0:d5:6d:d7:
fc:35:12:93:a4:63:db:df:da:aa:54:26:8a:49:cb:49:9c:07:
77:12:74:bd:93:a0:5e:c5:63:c2:04:8d:92:65:30:24:7a:f0:
d7:aa:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:39 2025 by rpki-client