Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: ZmYmwu85B8LhCU7HPvBpA47CALoTYNfy2t1L7DHXSMg=
Subject key identifier: D3:52:F3:84:27:2C:92:AB:6D:F0:35:D9:7B:C0:93:5A:2D:6E:CC:4B
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 0196C2DD754CDD6C94DC1EC582A198AF4B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 05:00:15 +0000
Manifest this update: Mon 12 May 2025 05:00:15 +0000
Manifest next update: Tue 13 May 2025 05:00:15 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: sMmlDF3ebW0RfbOs1prUrCFUuwH9CmyxJwD7igngdOk=)
2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:75:4c:dd:6c:94:dc:1e:c5:82:a1:98:af:4b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: May 12 05:00:15 2025 GMT
Not After : May 13 05:00:15 2025 GMT
Subject: CN=d352f384272c92ab6df035d97bc0935a2d6ecc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:6e:d0:26:e8:6c:4c:2d:a2:27:db:66:76:
7c:15:10:50:81:8b:ac:44:90:8c:a8:c7:29:b6:32:
80:7e:7c:f1:ac:7d:64:cf:cd:2e:f2:b5:79:e6:32:
fd:aa:5e:88:49:5b:45:a6:e8:23:aa:44:bb:3f:4c:
92:e6:8b:1d:c6:45:25:80:93:12:d9:c4:c8:9d:88:
4f:5a:00:a8:5d:d7:77:f3:ff:af:3f:c4:ba:a8:3c:
cc:ee:1a:27:77:a3:cc:8d:28:39:30:a6:d1:ab:69:
d4:72:00:a9:2f:07:e0:37:f4:33:16:3d:f2:02:fc:
c5:4e:43:e7:4e:ab:d0:f8:4e:72:cb:84:97:d2:f5:
c8:f5:28:6c:8b:80:20:25:44:16:6c:18:71:c7:05:
4f:04:24:c4:9c:26:a8:48:9e:19:2b:52:e1:7f:21:
06:87:b2:c9:6a:22:e0:cc:8b:67:2c:99:49:d3:ff:
c6:04:fe:47:6c:7f:d0:85:3b:f2:b6:6c:f8:13:8f:
3c:44:66:c3:39:fb:22:a8:f7:b2:2e:11:62:ac:04:
14:ff:01:6e:7c:13:4e:6e:5c:7c:f2:5a:2f:a6:28:
a6:9b:db:de:08:f8:82:70:08:b3:34:25:12:4b:80:
ba:90:d7:f4:63:92:b2:d0:e2:94:d0:78:d7:5f:b3:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:52:F3:84:27:2C:92:AB:6D:F0:35:D9:7B:C0:93:5A:2D:6E:CC:4B
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3d:15:bf:40:73:2b:44:e4:ef:6b:f3:ed:ff:2a:84:78:12:
f6:f9:19:83:cf:fa:67:b7:dc:a8:0c:58:00:b9:28:82:43:a6:
a0:02:10:e2:c8:73:c5:d6:95:79:40:35:b1:ac:16:bf:d6:bf:
d9:86:e0:dc:ba:00:95:7c:34:00:00:1b:3c:2b:8d:24:72:2a:
bc:6f:b8:25:8d:05:95:0e:92:d6:e9:a5:58:ff:fd:23:0d:a0:
e1:95:2b:12:50:00:b6:11:55:28:48:5f:56:98:4d:1c:3e:43:
8c:51:4a:71:1d:bf:9e:27:8e:bf:6f:0b:ac:b4:8d:8e:f5:8f:
28:30:fe:2c:79:37:3e:48:c6:59:f0:5a:53:f6:f0:5e:79:86:
92:bf:d5:91:19:0e:69:71:42:5c:ec:8c:f7:53:db:be:62:7b:
50:19:77:f2:48:2f:26:28:bc:9c:3c:99:f2:c8:f5:e8:34:99:
30:f5:a4:21:44:cc:f8:66:49:e3:92:c1:67:71:bd:06:f3:50:
08:c7:2b:b1:43:df:a0:0b:58:b9:ce:b7:cf:34:c4:8e:a0:75:
18:5f:51:f9:a1:b6:a5:ae:e9:9e:c9:39:e9:9c:03:93:5c:85:
e8:f5:64:4a:52:43:49:78:f1:78:2e:f5:19:74:f0:36:cb:dd:
f1:ef:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:05:08 2025 by rpki-client