Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: /6gdyq25pn2kMMJ3GxUtgkU9PDbQa/zoOpTyc1UzEWQ=
Subject key identifier: AC:1B:A9:F5:46:F9:83:AA:C9:5E:57:30:1A:AC:9F:19:ED:C6:E9:86
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019659F0545C248DB9BA237093CC0C358B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0A0A
Signing time: Mon 21 Apr 2025 20:00:44 +0000
Manifest this update: Mon 21 Apr 2025 20:00:44 +0000
Manifest next update: Tue 22 Apr 2025 20:00:44 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: Vi1YmK8lMOsvebrg9RoDoOfWs5z5SzASygoYFm+oL0E=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:54:5c:24:8d:b9:ba:23:70:93:cc:0c:35:8b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Apr 21 20:00:44 2025 GMT
Not After : Apr 22 20:00:44 2025 GMT
Subject: CN=ac1ba9f546f983aac95e57301aac9f19edc6e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:5d:f9:22:b0:b6:5d:67:fd:51:41:0f:6b:
11:a5:77:b6:9d:fe:9c:31:ab:6a:24:30:de:68:e7:
08:c7:26:b4:6d:3a:99:07:30:08:54:2d:84:5e:e8:
34:4c:ef:a0:13:47:df:73:b3:b3:c9:ba:84:d5:7b:
09:c3:f1:a3:19:9c:ae:b8:b3:c7:14:65:3b:34:d0:
eb:8f:84:47:d8:ef:ea:e7:13:d9:34:92:e0:e4:24:
76:3a:72:4c:46:b5:af:a7:f2:5f:7f:90:0b:ba:05:
f8:10:84:7f:a9:54:90:b6:ee:9c:fc:6a:48:18:09:
8b:76:4c:a4:82:75:15:05:e2:20:2c:f7:85:d7:1d:
54:bf:13:86:3f:33:0f:80:ac:bf:86:cb:7e:7b:43:
42:75:12:67:15:e8:c7:5f:81:71:5e:f3:2b:d0:99:
01:d6:c5:6e:37:a2:45:89:b9:85:43:61:1f:c9:82:
c2:c9:c2:f9:56:ad:43:b6:3e:ca:39:86:4d:05:1e:
54:e9:6a:19:dc:82:ab:af:52:6c:81:54:d3:78:ca:
36:b5:5c:71:4f:4a:f9:8a:80:1e:de:6e:1e:37:1e:
42:3b:96:2f:02:72:7e:da:fe:be:57:46:42:81:ed:
98:a4:1a:2b:2a:fb:98:34:6c:25:cc:b6:d5:d3:29:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:A9:F5:46:F9:83:AA:C9:5E:57:30:1A:AC:9F:19:ED:C6:E9:86
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f2:83:c0:f7:23:3c:78:e7:bf:44:0c:3e:d2:7e:e6:0d:77:
8d:a9:4d:c6:e4:c8:e8:6c:55:9a:85:1f:99:85:54:99:b8:f4:
70:f6:a3:f9:2a:8c:c4:bd:48:d6:77:36:9e:f0:71:f8:33:15:
4c:3e:6a:f3:5b:a8:34:fb:f2:6b:26:21:fc:ea:aa:79:2c:b0:
d0:64:16:03:9c:2c:f6:a4:9f:10:5a:a2:a6:b7:54:2e:e1:64:
95:02:d1:15:cf:52:f1:93:2e:b9:45:f6:6e:22:24:d1:6c:73:
73:85:00:cc:70:d1:ac:cd:ed:15:ab:13:5c:58:86:74:fd:13:
36:ed:25:81:14:e1:ee:20:8b:c0:78:8f:84:11:01:5c:6c:61:
59:d5:67:0a:1c:55:0a:a3:28:c9:b8:d7:b2:8a:89:30:a9:ac:
63:96:f6:c1:4e:c1:82:3c:f8:aa:81:1c:64:2e:f0:2a:55:d7:
68:58:7e:0e:51:e9:e3:11:e1:a0:70:39:a7:54:ca:d1:8e:d4:
d4:79:4c:79:a4:13:f6:92:6c:07:09:11:04:f1:28:d1:d5:55:
30:be:35:bb:58:41:5e:37:02:83:be:e9:76:8b:62:49:61:22:
4b:c6:17:3a:07:db:22:3d:c7:30:2f:3b:d6:65:fb:b6:8c:50:
ef:17:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:56 2025 by rpki-client