Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: T1sq415utHZYIb2MH5Ie0wjm108e/SLkZrVPONdLRpc=
Subject key identifier: 44:58:77:73:BA:0D:D9:D4:72:82:E6:F3:63:C1:BF:BB:BA:07:3F:FE
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 01965A2739F5ACF81788ACD0880EE2669AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 21:00:42 +0000
Manifest this update: Mon 21 Apr 2025 21:00:42 +0000
Manifest next update: Tue 22 Apr 2025 21:00:42 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: nZHtIEqJiiX4FQ6fVPJK7qLHXf09TRt/2sIuLfGVE48=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:39:f5:ac:f8:17:88:ac:d0:88:0e:e2:66:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Apr 21 21:00:42 2025 GMT
Not After : Apr 22 21:00:42 2025 GMT
Subject: CN=44587773ba0dd9d47282e6f363c1bfbbba073ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:a4:5f:f6:9d:af:a5:02:de:0b:17:cb:cb:
73:de:c7:82:e8:ae:10:34:c5:dd:e3:cc:bb:2a:85:
7a:f7:16:61:0b:a2:f8:00:f4:7d:c2:47:56:6f:b2:
fe:12:aa:74:e4:89:cc:24:92:23:a4:19:8c:0b:38:
f2:dd:45:bd:69:cd:5b:04:c9:1f:44:7a:c8:31:23:
6c:47:1c:43:72:4f:7f:f6:09:a6:e9:29:61:66:4c:
8f:03:76:1c:69:7c:47:6d:1d:f4:4b:87:1c:cc:c2:
ce:73:72:a9:10:a8:1d:80:fe:d7:a9:27:01:cd:92:
55:bd:f5:69:c3:89:48:fb:f9:20:30:2f:2e:4d:33:
ae:ba:86:b1:5b:b7:17:be:5a:46:26:2e:3d:bd:f5:
4c:51:37:65:cd:e4:e5:c9:19:ba:e6:21:8b:32:e5:
af:27:d7:30:6c:40:fd:aa:3f:03:f2:9d:ec:5f:4e:
a9:eb:45:24:f6:2f:81:56:01:f9:18:73:d0:3f:35:
8e:99:dd:6f:37:10:31:e6:25:ee:c1:72:8a:00:25:
e8:74:fc:8a:00:a9:cf:54:99:50:e4:18:81:44:1b:
2c:59:6a:76:b6:d7:aa:09:15:8a:ff:24:d0:84:62:
ae:dd:97:16:13:c0:ce:c5:4a:24:cf:fd:c9:5e:61:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:77:73:BA:0D:D9:D4:72:82:E6:F3:63:C1:BF:BB:BA:07:3F:FE
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7f:7a:b0:55:68:32:c8:bc:13:d2:e8:f8:18:d2:da:3a:f3:
59:c1:db:20:b9:6b:69:15:5f:0f:93:b9:ea:ec:57:93:fd:75:
c9:54:07:9f:9e:85:7d:33:3c:de:46:da:48:08:5e:e4:5a:0a:
c1:79:75:f1:73:9d:40:09:09:67:b0:ac:13:b1:58:53:e6:ad:
50:5d:5d:43:08:6e:cf:78:16:14:4b:aa:73:59:a9:85:dc:fd:
e9:34:a4:68:02:dc:e9:21:b8:7e:78:e9:cf:85:61:84:36:1f:
64:33:65:f5:2d:ae:c3:50:46:b9:0f:f5:4b:74:51:fc:fe:0f:
67:40:eb:06:5b:90:91:87:fb:4e:9f:f2:81:a8:99:c4:88:21:
04:21:5b:57:75:2d:a1:9d:b7:9d:7b:dd:aa:8a:14:4e:08:2f:
c4:b4:08:5e:77:55:85:7a:f5:69:fa:ef:a8:d5:83:2e:11:59:
9a:ad:be:3c:a0:81:c7:34:de:30:9d:de:4e:7b:d2:0e:2b:1d:
ee:8f:3a:bd:04:00:8c:60:b5:75:1e:5a:07:a9:00:0e:63:21:
98:31:02:f7:f2:5a:de:87:8d:41:b2:9f:ba:af:2c:fe:11:66:
af:ae:28:60:3c:72:ae:a6:75:cd:2a:b7:02:08:7c:01:98:98:
bb:47:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:40 2025 by rpki-client