Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: A602+Z4stxq6hpW+TMneiBtW8FToDVraWZpzLy91vb8=
Subject key identifier: 5B:07:6C:62:94:55:4D:84:EA:F6:20:A1:79:89:35:32:DB:5B:96:04
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 0196A2E4A79535EC021646AF12E6A2E9DBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1522
Signing time: Tue 06 May 2025 00:00:16 +0000
Manifest this update: Tue 06 May 2025 00:00:16 +0000
Manifest next update: Wed 07 May 2025 00:00:16 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: v0wF8kNkvQip3xIz+bu5Uhev8SKsk9sotvIF4DNwUOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:a7:95:35:ec:02:16:46:af:12:e6:a2:e9:db:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: May 6 00:00:16 2025 GMT
Not After : May 7 00:00:16 2025 GMT
Subject: CN=5b076c6294554d84eaf620a179893532db5b9604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:65:f7:83:47:59:7e:6a:dd:a7:3a:c5:99:
53:0a:08:30:d5:65:d5:e4:df:f0:e9:d7:de:01:7c:
71:57:1a:e4:19:bb:ea:dd:cb:c9:9e:d6:f4:b8:60:
5d:73:c3:39:49:17:d3:ac:bc:b0:53:30:b2:85:e4:
f0:3b:ed:ef:c0:13:bb:ac:aa:d6:ef:9a:4b:7c:b6:
23:52:ef:60:4c:ef:9a:c8:98:38:6c:48:2f:d9:84:
8a:be:3f:93:99:ac:db:dd:15:47:e6:89:7c:c0:f7:
11:1e:73:04:fc:ac:0f:0b:c1:9b:4d:52:b5:a6:f4:
f4:ef:2b:b9:cb:d5:6c:e5:53:83:8e:66:5c:e0:cc:
46:f5:e1:d0:1e:82:7e:4b:f8:82:0b:4c:b1:98:33:
9f:e4:a5:b6:ef:ce:6a:dc:87:86:75:35:53:2e:e5:
04:86:43:62:72:86:73:dd:98:62:4c:6f:bb:cb:c5:
57:03:e7:ae:52:9b:e0:40:4e:f4:a8:58:a6:de:a1:
96:ff:3f:a0:56:59:0e:cd:78:2d:a8:86:6a:38:c3:
c5:3d:55:ee:ea:0c:30:30:bb:1c:d8:b8:ea:15:8d:
37:f4:4b:a0:05:7c:58:6b:6b:22:e0:83:a9:c0:d1:
7e:49:ea:86:2f:26:c8:7e:74:44:73:0e:d6:18:16:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:6C:62:94:55:4D:84:EA:F6:20:A1:79:89:35:32:DB:5B:96:04
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:48:85:f5:d3:e9:c1:92:26:d7:21:be:36:0f:28:b8:85:1c:
4b:82:14:5b:a6:ce:db:9a:4f:eb:31:8a:61:f3:85:30:d5:81:
e1:2a:46:d7:1d:f1:89:b7:bb:8d:53:e1:68:6e:eb:a3:6b:04:
51:68:f0:42:85:23:60:fb:db:14:6b:36:dd:55:4b:29:f0:0a:
22:40:59:2a:15:7b:3c:3c:55:f4:40:eb:6c:b3:38:18:2f:bd:
fd:66:f6:75:3b:f3:7c:46:44:2c:4c:a7:33:95:f0:9f:40:68:
64:f8:12:4d:08:5d:68:d3:4b:cf:f2:ef:bb:8d:eb:f5:db:a6:
b5:d4:c4:e2:b5:f5:79:a0:66:a2:2b:51:7f:e9:c1:e9:b6:45:
86:6d:00:f8:c8:a8:fc:bf:7e:11:48:5d:1c:be:19:18:22:2e:
be:be:7b:8d:02:46:0c:97:fd:c0:3b:3c:e5:1b:0c:81:b7:3d:
1a:81:02:f3:b7:0d:81:8b:a7:1a:00:b0:b0:3a:f3:13:ce:02:
ef:39:35:a7:94:c1:ae:28:d6:3f:74:da:01:83:a1:8c:59:bd:
7a:6f:8b:14:4a:a8:a0:e4:84:7f:c6:cb:f6:bc:3f:9e:22:08:
a5:2e:1c:54:6f:63:68:6a:cb:8e:df:f4:92:23:c8:8e:f1:ce:
a8:f4:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:41:50 2025 by rpki-client