Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: ADAaDjyrAEePWv9jbsJx8bx3EalvF+p5buhBszHRFh4=
Subject key identifier: 53:09:D9:7B:2B:A4:8F:EB:36:C5:A2:AB:E0:36:66:5B:47:07:E5:A1
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 0196B7B5583F2370699DAC8153E1819D0B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0C66
Signing time: Sat 10 May 2025 01:00:37 +0000
Manifest this update: Sat 10 May 2025 01:00:37 +0000
Manifest next update: Sun 11 May 2025 01:00:37 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: Ts4Jtg4N7RpSDUeMwWbV055U0qcPZBlmF8isODMCzZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:58:3f:23:70:69:9d:ac:81:53:e1:81:9d:0b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: May 10 01:00:37 2025 GMT
Not After : May 11 01:00:37 2025 GMT
Subject: CN=5309d97b2ba48feb36c5a2abe036665b4707e5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:48:f3:cc:df:e9:9d:4f:fd:48:7b:e6:cd:
a8:08:0c:4d:74:53:7b:a6:26:de:ba:7f:d3:5c:32:
1b:32:fc:73:1e:d5:8b:b4:68:af:c3:29:31:f9:8a:
ed:a9:6e:11:5c:f7:9c:27:90:8a:e4:56:5e:20:15:
04:70:25:40:95:d9:7c:51:34:90:6a:35:76:c3:3b:
64:be:01:9f:c1:14:21:55:1a:ad:de:ed:eb:c1:b6:
29:50:1a:b9:d8:ec:b6:d4:9d:81:8a:aa:26:e0:01:
75:da:b0:c8:ab:b5:b1:67:05:20:3c:ff:04:19:5d:
08:2d:76:63:9d:3f:f3:a5:e8:a2:8d:9f:ab:ce:11:
51:81:71:c1:4a:b6:80:d7:a3:ee:66:fc:67:ef:d3:
44:f8:7c:99:cd:23:53:a3:f3:75:4f:89:08:24:1b:
58:e7:40:68:63:e2:3c:b0:08:c9:ca:05:90:10:5a:
5f:27:86:80:a5:eb:3a:1a:cd:23:20:b4:30:20:94:
f4:8a:08:08:c5:9f:1a:93:23:f0:19:53:18:4c:b3:
c3:e7:8e:0f:67:5d:6f:df:49:ab:0f:26:dc:f7:51:
8c:2d:98:04:35:f8:58:90:81:9d:4d:b6:23:c7:35:
3e:62:37:87:a0:86:35:a5:50:70:1a:d9:8d:0f:40:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:D9:7B:2B:A4:8F:EB:36:C5:A2:AB:E0:36:66:5B:47:07:E5:A1
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:29:f8:34:10:d6:15:22:c5:d9:b7:ea:da:c7:5a:ac:01:89:
8b:84:12:d8:96:d5:7e:79:25:71:be:58:cb:8d:a5:ac:48:10:
cc:38:c5:9d:bd:63:00:dc:9d:a8:14:de:04:29:f0:0b:b3:c0:
31:a4:15:b0:d9:a2:30:4c:15:be:4d:2c:05:e7:8e:ab:cf:0b:
b6:20:28:c7:bd:13:f7:3b:02:e4:8d:39:5f:46:e3:cb:09:64:
54:e3:1c:c5:9a:db:c1:6d:ef:a7:c5:0c:cd:e5:54:29:a1:3c:
47:ea:e1:16:e4:3b:93:65:a5:48:ca:f9:c2:4f:97:23:34:a1:
88:99:4a:85:63:a1:50:dc:22:7b:ae:5c:1a:c1:5a:4f:e5:65:
27:2e:ba:e7:80:93:4f:d5:54:59:80:7a:52:23:99:39:4d:5d:
b9:a7:17:62:10:b6:3c:ba:f4:a9:c6:89:d9:e7:f7:32:c4:de:
c1:97:46:61:01:52:e9:f1:7b:59:85:0d:bd:e2:19:6c:2b:42:
9b:bc:35:51:18:90:aa:df:4d:a6:99:95:fe:b6:82:dc:6b:e0:
1e:ca:38:db:8b:08:aa:65:d6:85:dc:6a:5a:a9:03:4e:cd:05:
e6:42:8c:aa:f3:e0:64:b1:73:9a:05:58:25:80:53:5f:dc:a1:
7e:f8:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:17:46 2025 by rpki-client