Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: aqhNQg2SWP88m7EB4uJ26vs6Oli5jTCHemvEjj0TlHk=
Subject key identifier: D8:67:7E:AA:10:F0:51:3F:BE:9C:61:FD:66:8A:FD:65:FA:20:AB:CB
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019655A615EC73DB49BF78BF8CE8C4264D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:01:10 +0000
Manifest this update: Mon 21 Apr 2025 00:01:10 +0000
Manifest next update: Tue 22 Apr 2025 00:01:10 +0000
Files and hashes: 1: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: dJAelZDwwTBEWO88cRUwXx/4j4ApSTjqogGq/cR1cZY=)
2: qmxsyUbW81VdsinEooDwPTqDgYg.roa (hash: 5mMYBqM+9mhhKL1z8ft7+FIG5whvIdm78M3vwoV475A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:15:ec:73:db:49:bf:78:bf:8c:e8:c4:26:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Apr 21 00:01:10 2025 GMT
Not After : Apr 22 00:01:10 2025 GMT
Subject: CN=d8677eaa10f0513fbe9c61fd668afd65fa20abcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:cc:a6:86:d0:7e:fe:58:57:58:9a:e3:02:
ac:5e:15:25:52:dd:46:ed:6a:d1:56:01:66:41:c5:
e7:94:14:50:e6:d4:21:df:17:9b:82:ff:99:3a:29:
e0:bb:c6:a8:72:c6:e4:01:1b:f6:be:67:c8:25:50:
77:0c:3e:88:00:77:3d:42:9d:fa:d5:b9:b7:6c:f3:
99:b3:ff:9d:2c:f2:57:cc:33:e6:4c:fb:4f:80:ec:
9a:48:15:a0:2a:39:ac:58:89:e9:a9:39:c9:a8:a9:
c4:6a:5f:1b:57:26:2d:63:eb:56:41:45:fb:0a:e1:
7f:38:4f:fa:81:44:c0:6c:31:bf:17:ca:d1:58:7c:
26:cb:44:1e:89:64:b4:e2:cc:86:dc:55:2c:b7:dc:
0c:26:ed:a1:b2:96:1f:95:a8:08:45:24:4c:08:cc:
96:75:cb:5d:38:6c:3c:f3:42:d4:d8:53:a9:cf:d5:
66:ed:55:fe:5b:be:b4:83:6e:02:04:e7:53:bc:66:
c3:dd:8c:5d:af:c7:11:e7:5e:85:f1:15:1c:7d:f5:
b1:07:9e:20:e0:67:c4:04:8c:57:e0:98:43:bd:ef:
5f:06:c1:b0:c9:38:d4:a4:3e:c4:37:c7:6f:15:32:
21:73:02:8a:7b:0c:5b:e5:a3:4b:f1:d7:58:f4:9f:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:7E:AA:10:F0:51:3F:BE:9C:61:FD:66:8A:FD:65:FA:20:AB:CB
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:32:5f:90:d3:bb:9a:e3:35:02:10:48:e4:61:43:f5:3f:
0e:68:8e:05:81:f8:75:e4:3f:62:14:c3:9b:98:fe:a9:a7:28:
ad:0a:84:16:a2:80:56:09:ca:ad:03:b6:9f:64:73:6f:ef:d3:
47:79:82:97:28:a7:8d:b3:b6:eb:37:ea:49:6b:46:18:ee:fb:
72:5d:e4:9a:e6:d6:b9:64:ae:dc:a5:52:6d:b4:d7:18:ef:e4:
5a:f7:8e:92:c2:a3:ef:9e:c5:4a:a3:81:cb:7d:78:47:c5:10:
b7:8c:0e:4d:7e:e1:66:28:79:29:5b:b8:ac:73:95:df:a7:3b:
2f:97:1d:bc:c4:5d:02:c1:fc:97:5f:bd:7d:07:65:85:6e:a4:
4f:46:8f:7a:7e:c8:c8:60:c6:5a:47:59:ec:11:d6:ca:4f:0b:
43:bd:13:0d:f0:96:3f:2b:ed:17:cd:14:a4:9f:8a:cf:91:c0:
02:78:e8:b0:7f:b7:57:ad:8b:95:1a:0d:eb:f4:5f:8b:fa:38:
86:ba:3b:54:15:49:08:bb:84:9f:2a:f9:7d:04:ee:08:76:c6:
80:6f:ae:be:2e:79:63:e0:f0:67:46:0d:f5:fb:98:a4:2f:21:
dc:5b:bd:41:b5:76:b5:1b:ae:14:55:5f:04:69:40:44:b5:96:
97:62:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:09 2025 by rpki-client