Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: myifjZahoRre5zsRptvSGwoc/5a4v03VkkUO+d5dmlw=
Subject key identifier: 34:73:08:E9:00:39:5D:A8:29:0A:94:7B:50:63:85:8A:59:56:B5:A7
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 01965EA87A81B3BA55C655B96A7118CD3460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1509
Signing time: Tue 22 Apr 2025 18:00:21 +0000
Manifest this update: Tue 22 Apr 2025 18:00:21 +0000
Manifest next update: Wed 23 Apr 2025 18:00:21 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: tCvRfGYaxyW3tkvESZ8ntN6MqYiHckfSEVLYKUylJ1Q=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:7a:81:b3:ba:55:c6:55:b9:6a:71:18:cd:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Apr 22 18:00:21 2025 GMT
Not After : Apr 23 18:00:21 2025 GMT
Subject: CN=347308e900395da8290a947b5063858a5956b5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:9f:5b:43:d9:a6:4a:0c:b7:b2:f6:74:36:
9b:6f:e7:3f:1d:28:2f:e8:55:00:8b:1b:bb:08:98:
4c:cd:2a:32:2c:4f:93:b7:de:52:f5:10:ae:cf:41:
cc:05:dd:1f:64:5d:0d:4a:74:f8:58:6f:3e:49:f3:
58:cf:f0:ba:b2:a4:f8:5b:62:c2:fd:13:12:aa:02:
24:5f:88:c4:5c:73:a5:30:db:73:45:08:ac:7c:57:
0a:4f:8f:7c:28:29:d0:6e:e1:9e:5c:82:0a:f6:0b:
b6:62:41:1d:2e:90:a6:18:89:d6:b8:69:19:19:7f:
3b:dc:27:b1:8b:c8:92:71:fc:4e:eb:5f:62:82:91:
d7:20:70:f3:f6:7e:35:c5:98:82:0c:c4:27:86:e1:
60:71:a3:94:11:3b:7a:6d:a3:e1:63:52:eb:c3:c9:
31:71:6f:49:5a:c1:9e:7f:5f:cb:46:a7:27:93:2a:
7b:1c:b8:82:08:fa:be:9e:3e:14:6c:10:66:95:e0:
12:93:1a:fd:6a:22:fd:9a:ce:9d:29:fb:17:d5:60:
60:48:7d:de:74:82:48:65:8c:4e:5c:55:b1:f9:ac:
17:13:87:a2:04:08:2a:2a:ec:81:e3:75:40:cb:61:
a3:f2:56:02:a3:33:52:85:02:88:06:2f:51:4e:73:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:08:E9:00:39:5D:A8:29:0A:94:7B:50:63:85:8A:59:56:B5:A7
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:b2:61:02:8d:16:70:8f:13:33:9b:40:62:62:d1:09:c7:
a7:c0:e0:c7:f4:49:39:e7:5e:bd:40:81:72:44:26:73:2f:6d:
62:4f:b2:82:7a:1f:73:2c:15:ca:e2:c8:15:8b:73:80:90:ba:
bf:5c:37:09:0b:3a:4e:17:72:9b:e0:45:58:45:c8:51:3f:8b:
0a:c3:ea:25:cd:59:44:0f:1e:dd:90:25:af:68:2d:6c:00:22:
af:d2:82:7f:bc:9f:77:8e:f2:53:34:b8:38:61:55:6a:cc:af:
02:b6:02:48:23:3f:e4:73:0a:e0:75:42:db:4c:07:29:12:e2:
71:60:92:92:bc:3c:b6:b6:60:ca:a7:2c:87:3c:da:9c:96:99:
52:ec:ae:7d:f4:4b:04:79:f2:f7:cf:e0:04:22:47:63:90:1d:
f1:63:c5:b0:7a:81:1d:77:be:00:a5:1b:b0:c4:00:a8:36:ad:
a2:7d:cb:a0:78:36:9d:59:4d:bb:0f:8b:6c:05:c2:ba:8e:8a:
2c:d7:70:d9:fa:8d:ea:a5:93:dd:4e:50:5e:4d:c9:80:3a:3e:
19:f2:24:82:2e:7f:cc:3c:8b:02:d9:51:2e:27:71:f0:9c:5b:
ea:66:29:83:7c:8b:c8:11:32:2f:76:28:d8:cc:74:c2:8c:fe:
db:d3:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:26 2025 by rpki-client