Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json)
Hash identifier: 7QPs6gzBU3aY/MbFMoPMW6HxgPtijpxMfe/WFmogM0c=
Subject key identifier: 34:31:7E:53:E8:12:62:3D:60:ED:23:FC:F7:90:6E:05:91:57:85:2F
Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Certificate serial: 0196C34C4968EBBCAAEDA27D8DC6D9F97928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
Manifest number: 013B
Signing time: Mon 12 May 2025 07:01:18 +0000
Manifest this update: Mon 12 May 2025 07:01:18 +0000
Manifest next update: Tue 13 May 2025 07:01:18 +0000
Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: lz6eshDrMrLgetnXRMC1Q6T4ZVO93egjsD/Bkxchoms=)
2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:49:68:eb:bc:aa:ed:a2:7d:8d:c6:d9:f9:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Validity
Not Before: May 12 07:01:18 2025 GMT
Not After : May 13 07:01:18 2025 GMT
Subject: CN=34317e53e812623d60ed23fcf7906e059157852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:66:e6:0c:35:0d:a4:45:41:7d:74:4a:76:
a7:08:fe:d8:8c:e0:96:89:5e:dc:c7:9b:96:d0:b8:
c4:81:7b:6f:bc:86:54:b8:96:21:a3:80:26:75:b2:
ed:a5:f8:bb:d3:30:c8:97:f2:fc:45:72:8d:7c:0d:
da:1c:99:81:55:23:09:f2:68:11:83:e3:6b:e6:2b:
f7:80:11:1f:1d:69:68:4d:8c:7e:50:66:36:72:97:
d4:6f:94:b4:95:3e:6b:3c:1a:d7:3b:78:49:3e:c9:
e9:f5:ae:da:ec:56:b2:75:a3:2f:22:79:96:c3:68:
a0:66:b2:f0:20:c7:09:a1:24:03:c7:c8:a6:cd:10:
6b:53:54:f8:ea:11:f7:89:29:ed:c6:24:41:3d:bc:
bd:f7:74:77:fb:99:96:ec:4c:5d:5a:64:09:fe:d4:
8c:de:9a:8b:f9:66:ed:de:fd:0f:61:99:14:72:f6:
7e:f7:27:60:45:27:fa:59:d9:42:0e:84:5c:3f:50:
3a:85:d4:60:f5:fe:27:83:85:9b:22:26:ce:7a:b0:
1e:1d:a5:e2:b7:c1:48:3f:e4:d6:35:da:0a:35:ee:
0f:be:cc:84:75:3a:69:ee:98:54:5c:96:df:8e:e3:
71:2a:f0:6b:c5:bc:c5:f0:77:47:20:a9:4c:40:28:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:31:7E:53:E8:12:62:3D:60:ED:23:FC:F7:90:6E:05:91:57:85:2F
X509v3 Authority Key Identifier:
keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9b:73:2e:08:54:6a:3b:e1:df:86:4c:20:10:96:57:87:a5:
5e:3f:44:1f:d4:38:0d:8c:45:c9:43:5e:de:72:7f:5f:6d:fb:
ae:0b:2d:4a:19:d6:91:d9:0e:ea:d6:da:0b:c1:15:04:e7:21:
29:b7:ee:8c:8c:85:36:5f:39:19:ba:0d:9b:fc:56:b4:26:d5:
60:19:ce:9e:86:24:71:0f:f9:78:9e:a8:e9:d5:89:4e:cd:06:
6f:72:1c:73:cb:8f:bb:58:17:c7:fc:b4:29:18:1e:6a:3f:5d:
47:20:48:e3:a1:2f:6d:67:9e:ee:2f:4d:c4:82:4f:10:b9:a8:
3f:c8:12:e3:84:1b:c1:c3:82:1c:37:69:f1:94:a3:ea:5b:7d:
ea:56:84:ab:ff:31:03:b6:a5:ee:78:9e:26:c0:d7:ef:cb:10:
a6:c4:b5:58:48:d8:77:cd:34:b5:5d:e5:70:1f:83:2e:4d:4d:
bc:a9:b2:a2:06:4d:a4:18:ea:1d:63:6b:82:ec:2d:fe:0a:02:
40:bf:b2:33:ca:87:ce:26:43:52:bc:d3:bd:56:c7:32:6c:43:
c2:5a:b5:48:83:b5:8c:3f:cb:0c:b8:a6:b2:d6:3e:e1:5e:70:
f4:35:df:99:3c:ce:21:8c:12:c9:9b:e0:62:b7:ee:24:4c:9a:
6d:8e:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:01:50 2025 by rpki-client