Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier: ZeQFkX4lkXk+7g6sfqWeSrfR7W4mqc7zi8wENhS2Ayo=
Subject key identifier: 5D:8D:94:DA:EB:D5:2E:BE:A8:BC:40:9A:A8:B6:71:A2:0E:8B:43:68
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer: /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial: 0196AC1F70A303A5CF775EE8EDD5FD6D2DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number: 0BD3
Signing time: Wed 07 May 2025 19:01:03 +0000
Manifest this update: Wed 07 May 2025 19:01:03 +0000
Manifest next update: Thu 08 May 2025 19:01:03 +0000
Files and hashes: 1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: m+BhrAUDXW7LjqBlQKL9CHnZPjfzz+YCxgC+GydfwvU=)
2: 1-eEKcv2-HlB3jOunD8sGEQP3iuo.roa (hash: 1bxmvhYpMOeABQ7wYp60dzQC7ktJL7nqMNn/zKkAUDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:70:a3:03:a5:cf:77:5e:e8:ed:d5:fd:6d:2d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Validity
Not Before: May 7 19:01:03 2025 GMT
Not After : May 8 19:01:03 2025 GMT
Subject: CN=5d8d94daebd52ebea8bc409aa8b671a20e8b4368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:f9:f5:4a:87:3b:0b:7d:ee:2b:31:ea:6e:
84:77:db:91:92:34:c7:24:4f:a9:25:61:82:70:08:
d9:a7:e1:34:cd:15:a8:1f:d2:b4:43:bf:ca:e8:ca:
3c:df:22:2d:ec:8c:04:cc:fc:b8:52:04:0a:cb:c4:
45:80:f3:45:f3:1d:6e:5a:25:56:ff:17:30:1d:78:
c4:11:05:c9:cb:ce:ca:bb:d4:b1:6c:c1:8d:ef:a1:
43:fd:41:3c:30:73:1d:0a:c1:42:a1:a6:c0:59:78:
3b:42:14:d5:23:3d:28:35:e7:2e:db:92:41:04:21:
5d:23:1f:b8:a5:2f:8c:7b:79:48:29:3f:19:75:2a:
bd:2d:76:0b:c4:e6:91:34:74:57:b4:5a:63:97:c3:
cb:d7:6c:ce:e4:85:9c:b5:eb:10:41:c0:82:88:66:
f3:3d:ec:95:0b:10:57:d7:91:65:98:28:df:df:65:
ec:f6:80:b8:5e:1f:ab:71:eb:64:a2:f7:e3:81:da:
54:77:44:6d:ea:8a:2b:10:45:f0:9b:f2:12:89:00:
a3:90:69:4a:a4:5b:ac:94:bb:b1:fe:7d:de:cf:14:
73:09:aa:bb:e9:49:aa:c4:9b:b1:3f:e8:03:b0:f3:
0b:07:3a:8a:e0:27:fd:61:bf:5b:e2:25:34:6e:cc:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:94:DA:EB:D5:2E:BE:A8:BC:40:9A:A8:B6:71:A2:0E:8B:43:68
X509v3 Authority Key Identifier:
keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:19:2a:2a:7f:5b:0c:5d:c1:79:a9:11:ac:ec:6e:8e:82:7d:
8d:9a:a1:75:de:a8:4c:b2:4f:55:97:3f:cc:cb:2f:84:06:27:
27:ff:e4:72:58:90:b4:fb:40:f2:b5:b6:94:9c:4e:a2:8c:d4:
0f:57:83:4e:6b:85:61:c6:4f:47:f3:3e:a9:d9:98:a4:48:43:
05:da:eb:b6:c6:82:8a:15:e4:e9:84:a3:dd:72:72:18:e2:a7:
17:c7:85:77:f8:fe:c9:24:ac:6d:0f:16:34:42:1e:7a:04:f2:
80:e1:e9:30:83:ae:d2:21:eb:88:25:6f:c8:fa:57:2d:6f:69:
53:f7:88:06:a8:e5:af:76:cc:b6:37:44:4e:32:45:48:dc:95:
94:90:75:0a:24:ff:a9:e6:f2:fc:63:2e:3b:b3:73:d1:cb:07:
ee:c0:3d:8a:17:79:92:08:6c:2c:9d:de:1f:50:e5:a0:0b:a1:
39:fa:9b:a2:d3:f9:69:67:b8:df:cd:38:f9:f4:87:ea:cf:de:
df:b4:a7:53:8f:d1:50:b4:21:72:7c:02:bb:cb:c7:56:24:c0:
8e:71:61:e6:13:ae:bf:a1:c0:6a:f4:49:04:c3:8b:29:a7:d8:
1b:55:86:c0:0e:f8:3c:91:8d:9a:e3:e7:68:e2:ac:24:ec:97:
05:4d:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:17:13 2025 by rpki-client