Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: F13HlZZELmRoFLZUiEyPCGOwA+2wMuomGbCU4VQV+4Y=
Subject key identifier: 2F:FD:A0:92:65:76:73:CD:81:3D:FB:0F:38:65:79:8D:51:7F:FD:EF
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0196A31BB62033E53632820BDFA1E1B6975B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 13CD
Signing time: Tue 06 May 2025 01:00:24 +0000
Manifest this update: Tue 06 May 2025 01:00:24 +0000
Manifest next update: Wed 07 May 2025 01:00:24 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: MTMesSPDBSLDWtsKVOFJqsbkAenKUQZG9HWXG07H/gc=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:b6:20:33:e5:36:32:82:0b:df:a1:e1:b6:97:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: May 6 01:00:24 2025 GMT
Not After : May 7 01:00:24 2025 GMT
Subject: CN=2ffda092657673cd813dfb0f3865798d517ffdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:d8:f4:8c:9b:cf:44:13:06:62:c6:7a:1e:
e6:31:1d:e6:12:c7:e9:e5:f4:58:76:f1:74:e7:43:
37:57:d6:85:79:1e:f3:cf:8b:71:11:c8:db:8f:12:
0b:cf:d5:4e:fb:af:9e:8b:a9:3c:1c:4e:d8:ba:af:
58:50:7b:ed:9e:3a:7a:16:be:ca:e6:ae:d9:d3:30:
c7:0b:e3:d6:0f:1b:81:23:73:a6:66:b0:ef:64:3a:
82:00:37:b9:99:81:52:1f:28:f4:83:da:ef:22:e3:
08:bb:e2:50:18:d8:09:89:1e:da:c5:ec:c1:45:f8:
47:f0:41:61:e7:b4:20:27:14:5f:ec:0d:7f:41:e0:
80:50:38:2a:a6:89:b5:cc:15:94:03:97:20:dc:7e:
cb:92:59:31:db:62:01:85:d1:7e:51:5c:c1:4c:2c:
45:11:97:cb:3b:c7:ad:5a:03:71:b7:7a:3d:15:af:
dd:17:66:16:71:fe:c5:12:0a:8c:41:ab:f4:92:09:
75:c8:c1:f9:dd:59:66:81:9b:f6:37:49:13:1b:69:
28:a2:15:ed:13:6b:55:48:70:d1:21:72:9e:ff:35:
55:23:04:c0:52:e0:a9:6a:a0:e7:ef:de:15:d5:0e:
be:e0:b9:c2:9a:ec:49:63:88:1e:5e:7d:46:47:46:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FD:A0:92:65:76:73:CD:81:3D:FB:0F:38:65:79:8D:51:7F:FD:EF
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4e:c1:6e:50:92:2c:62:ad:d2:0e:c3:20:82:14:e2:4e:23:
64:a7:d8:1d:7d:52:9a:e5:9a:c7:a6:99:90:f2:67:d0:43:ca:
06:3e:7d:88:83:ae:4c:e4:d7:4f:75:17:47:08:7f:08:e9:53:
92:4f:a7:b9:dc:1f:a1:ef:ad:69:cc:06:e0:ff:cb:6a:7f:78:
1d:e0:90:36:77:c7:84:72:a6:79:91:e6:b5:2e:2f:a3:2e:f7:
21:1a:5c:37:3b:28:8a:b7:f9:ef:40:a2:16:d2:47:d5:a8:b2:
bd:ed:42:01:27:9f:4d:01:62:5c:31:6a:33:dc:d3:eb:2b:5a:
42:48:5a:bd:71:e6:91:9c:36:51:e6:6b:00:94:ab:1c:c3:0c:
a5:af:2d:88:17:2f:79:c5:2c:03:3f:e5:6f:e1:cd:df:7f:b4:
f8:f8:ac:11:6f:68:81:e0:c0:35:89:76:af:18:6d:b4:a6:f1:
a4:39:24:1f:d6:23:cf:94:d7:0c:3d:6d:16:26:d8:fb:04:ac:
94:be:51:d8:fb:4f:8a:de:a6:24:8e:e5:28:96:b2:7c:3d:6e:
26:78:e6:81:04:4e:d9:23:9e:a1:ad:c0:3e:16:7c:60:8c:85:
e6:f7:15:49:ed:70:a4:c1:05:aa:eb:a4:f6:9c:d9:11:ee:c1:
7f:47:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:49:27 2025 by rpki-client