Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: OpbkGB0n0pNKbCGZ/Qw/tSdpqcmtIsxfhU43SbyRvnQ=
Subject key identifier: 83:F6:BD:58:5A:B0:FD:09:8D:CD:28:84:C0:75:81:1F:58:1F:21:63
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 01969F08266211E47317050A41B378F5936C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 10C9
Signing time: Mon 05 May 2025 06:00:33 +0000
Manifest this update: Mon 05 May 2025 06:00:33 +0000
Manifest next update: Tue 06 May 2025 06:00:33 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: 7bVAWe25CuN75IdXq87xW2JhaCa9ZpnA9C3EYNedXJ8=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:26:62:11:e4:73:17:05:0a:41:b3:78:f5:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: May 5 06:00:33 2025 GMT
Not After : May 6 06:00:33 2025 GMT
Subject: CN=83f6bd585ab0fd098dcd2884c075811f581f2163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:40:39:e2:2a:49:29:d0:9e:89:30:25:c5:
4c:55:c8:db:fd:e0:34:9f:bf:39:c9:5e:b1:3c:26:
f7:f1:fd:a1:c0:20:f1:9d:9b:06:fe:12:78:75:15:
f5:53:c6:e8:cd:8d:d6:ed:40:a3:b4:61:a6:56:6b:
da:2e:c3:38:c9:e1:89:f2:00:2e:bf:b7:c3:5f:36:
a3:04:21:f9:6a:cf:0b:a5:2e:1c:38:71:57:da:7e:
ca:0d:de:2b:05:27:ea:86:6b:4e:74:7c:e0:f4:88:
68:ae:af:d8:4e:dc:26:f7:ee:70:5d:63:a5:71:b5:
78:81:cf:f4:71:95:34:75:46:68:87:93:82:0e:5a:
b0:17:c3:9e:62:cc:7a:78:e6:8a:66:84:c8:68:99:
40:96:05:9a:87:97:64:e1:35:75:59:6b:7c:79:fa:
ba:91:ce:70:0a:44:c8:19:83:dc:ab:1f:50:30:0f:
fa:da:0b:14:49:ad:af:3b:39:c7:80:70:22:9a:08:
80:35:cf:7f:08:64:04:4e:ba:23:f0:c6:5e:eb:f1:
bc:6c:32:8e:38:8e:7b:09:a3:2b:9a:79:88:c3:00:
80:0b:66:f7:87:89:f4:a1:f2:75:4c:15:bd:22:d7:
e8:29:88:a4:98:6f:7e:4d:6d:55:b8:bb:c2:2e:90:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F6:BD:58:5A:B0:FD:09:8D:CD:28:84:C0:75:81:1F:58:1F:21:63
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e9:41:31:d9:5a:b6:43:f4:8a:e9:77:b6:ab:13:c6:9b:cd:
b7:5b:8b:29:94:f6:57:15:81:b0:71:24:48:42:66:41:85:9d:
21:91:63:9b:e3:df:c3:62:b6:7e:fe:ab:57:6f:9d:41:87:de:
c7:e2:65:1e:60:32:bf:24:eb:9a:17:52:f3:43:6a:6c:8d:e4:
d2:bc:44:8c:19:31:72:97:47:ac:02:cb:fa:d5:be:ef:5e:5b:
e1:43:dc:33:8a:b7:e5:6f:63:96:c2:6c:f8:aa:69:66:b8:1b:
c3:a2:90:84:cc:97:17:03:2e:43:ae:c2:5e:71:4e:00:d5:46:
c3:e3:76:8e:6c:8a:4e:dd:97:0e:55:04:48:00:da:2f:cc:4f:
62:f1:f3:53:6b:27:b7:23:80:ad:e7:31:65:2f:3b:59:c2:21:
4e:07:b6:0f:e4:ef:af:44:4c:47:01:37:af:91:72:23:c5:76:
e4:3e:b9:ba:e3:d4:69:91:99:d5:7e:92:42:72:44:d6:85:42:
bb:1e:dc:1e:97:3e:b6:30:92:68:92:67:b0:cc:92:e8:99:86:
30:5e:3a:c4:b2:95:65:ea:39:a0:a8:b1:79:08:40:50:7e:97:
87:32:19:71:43:eb:53:f3:d8:f6:38:d2:48:26:6c:60:8a:7f:
71:f3:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:15:58 2025 by rpki-client