Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: l3fl4py30VV5aafMxCnAxWH/phRSSxVqdlwLcpfVTpI=
Subject key identifier: 39:F2:E4:F0:20:21:A7:CE:3B:64:06:75:EC:7F:DC:FB:A3:E6:53:11
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 0196AD9F56CDDC6160708559DDB1D92000F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 1059
Signing time: Thu 08 May 2025 02:00:22 +0000
Manifest this update: Thu 08 May 2025 02:00:22 +0000
Manifest next update: Fri 09 May 2025 02:00:22 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 0yI3yiymLuegqiiPFuAcZUS4EbWzDFq8N/xl4oNrbso=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:56:cd:dc:61:60:70:85:59:dd:b1:d9:20:00:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: May 8 02:00:22 2025 GMT
Not After : May 9 02:00:22 2025 GMT
Subject: CN=39f2e4f02021a7ce3b640675ec7fdcfba3e65311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:78:1a:a4:2c:75:eb:01:53:d2:4e:78:1d:
f4:1e:ce:a8:5e:95:ed:db:a7:4e:1a:5d:e7:3b:47:
fb:e9:74:59:73:01:0e:a3:a2:23:60:f1:16:99:8b:
82:3f:06:7a:03:8e:dc:4a:88:b9:b2:97:ba:53:52:
f5:57:3f:8b:4e:6b:5c:be:5a:92:7a:81:de:20:ce:
8a:43:15:5b:69:2c:54:a6:78:1c:57:24:11:aa:5a:
1e:9e:7b:58:a4:13:74:e0:4a:7f:6d:4c:e3:d5:c5:
3d:a8:b1:04:de:ed:7c:63:cd:b9:25:ac:a6:60:d8:
62:8f:bd:32:49:a7:14:3c:aa:e8:46:74:09:76:bb:
9a:93:bd:dc:a1:61:23:fc:3f:3b:74:66:a7:79:3e:
fc:18:d8:98:ee:a3:ee:37:25:04:4b:18:7d:57:f3:
cb:ef:e9:ee:0c:37:06:c8:7a:52:4b:42:b0:89:bd:
9b:f2:03:7a:a1:07:d9:29:b5:53:9b:b4:2a:5d:e3:
a6:35:16:3e:7e:d3:2a:9e:b3:e0:b6:ec:ba:17:ed:
ff:5b:c1:98:7f:8a:cd:42:6b:a9:8f:f9:bd:54:d4:
9c:11:d7:94:b0:f9:97:5e:cc:98:b3:2a:98:0c:da:
fb:32:bf:66:6c:1c:6f:24:c8:3d:6e:b9:5d:50:19:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F2:E4:F0:20:21:A7:CE:3B:64:06:75:EC:7F:DC:FB:A3:E6:53:11
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:21:cf:be:80:9a:0d:fe:0a:05:43:49:e7:bf:25:3b:e8:06:
c2:70:4b:dd:1e:0b:f8:b2:55:12:6e:27:d8:76:6f:96:6f:f6:
7a:b8:1b:68:97:90:f6:b0:ca:e6:91:d2:ec:e2:72:ef:7b:23:
b1:d0:99:13:7e:09:05:81:c6:69:c7:ae:83:9d:fc:f9:0b:68:
44:b4:dc:10:82:e0:3a:cb:07:01:1d:60:b3:06:58:aa:1c:e4:
eb:0d:af:39:89:d5:6d:d0:0b:d6:82:3c:77:f6:52:ca:33:b1:
52:6d:a2:13:b0:11:a4:bb:e7:bd:73:8b:bf:e4:c1:ee:26:9b:
a8:e7:40:35:ed:ad:b1:33:b8:04:9e:c3:95:63:79:5d:ae:8f:
6e:cc:2a:c3:d1:4c:30:37:59:be:fa:c6:14:87:9d:bd:1c:b9:
70:b2:92:00:0b:d2:9c:1f:fc:91:56:93:0e:14:a3:e5:d6:f6:
bc:ea:9f:53:d7:8e:01:a4:f5:45:db:5a:a7:5e:d4:e1:1d:d1:
11:73:2f:75:33:f2:d2:f8:71:0f:53:c7:3c:7e:f5:c7:09:54:
0c:df:95:5c:ea:be:a5:10:5e:7b:d4:c5:06:bb:bd:1a:84:2f:
83:c1:7e:66:94:76:0a:6d:87:59:48:98:7f:99:a1:44:7f:6a:
b8:32:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:38:16 2025 by rpki-client