Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: RA93CfGESrw14Pz4TATnAjZrzOTroQPc4sFTP0ofQEk=
Subject key identifier: A8:B9:D9:78:A8:45:30:83:35:09:37:5D:42:5B:55:12:2C:F6:30:E3
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 019655A5381D2B3B1F206D2D651FDEA91BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:00:13 +0000
Manifest this update: Mon 21 Apr 2025 00:00:13 +0000
Manifest next update: Tue 22 Apr 2025 00:00:13 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: yHTUbrPJeTxVJI5bQNG4S9kse93uazi163XjtUcY9b8=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:38:1d:2b:3b:1f:20:6d:2d:65:1f:de:a9:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Apr 21 00:00:13 2025 GMT
Not After : Apr 22 00:00:13 2025 GMT
Subject: CN=a8b9d978a84530833509375d425b55122cf630e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:e3:2e:e5:a0:a1:da:6b:59:42:5a:8b:db:
88:71:71:91:26:85:6d:33:db:2e:8b:5e:83:c9:b7:
29:72:53:5a:2c:f7:64:fe:07:bf:a8:c7:36:99:41:
88:a2:8a:8f:be:53:75:62:63:ab:52:be:ff:df:43:
e8:60:bc:30:5b:9e:e6:33:07:d9:f0:41:f1:4a:06:
f6:a1:1f:ec:94:00:d9:fc:29:a0:05:3a:b3:ab:bc:
69:78:3f:8c:36:f2:0c:2b:6e:b5:59:25:04:07:bc:
82:f0:21:29:54:0b:e6:db:b6:96:bc:89:3f:2e:cd:
c8:79:a0:70:3c:25:49:9e:57:9e:eb:c6:0f:83:8c:
b7:f5:0d:73:96:77:c0:7c:cd:39:27:1c:c1:5d:1a:
24:c2:16:4b:52:5f:08:c4:07:36:cd:56:68:fc:99:
c3:50:20:06:ea:f4:0c:4b:ec:5c:6b:a4:48:1e:1d:
83:6e:3e:48:7d:13:38:69:00:29:d3:b4:ff:f7:f3:
34:12:67:49:46:15:76:a5:2f:67:6a:c6:50:ae:16:
53:a8:29:a7:3e:7e:4a:15:66:09:c6:fa:ae:3a:17:
4b:36:68:5a:58:fb:24:96:2a:39:2b:1d:31:45:47:
ac:2c:b6:43:c7:bf:dd:78:8c:21:ec:df:37:8c:e8:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:D9:78:A8:45:30:83:35:09:37:5D:42:5B:55:12:2C:F6:30:E3
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:70:db:84:35:d4:94:7d:a2:66:8e:8d:bc:0c:d2:22:71:86:
15:ff:52:d8:a0:0b:9e:d6:28:78:3d:1b:0e:51:a8:2f:bf:f4:
47:8f:ab:98:52:ac:40:fc:1e:0e:d7:19:7c:4a:8d:ca:26:91:
0b:cf:7a:10:34:d6:09:0c:b6:60:35:78:86:9b:2e:c4:c4:9c:
5b:7d:f7:b4:7c:a9:8e:44:25:1e:bf:a5:1a:ef:f7:12:ae:d7:
05:50:68:38:81:15:88:e5:95:94:76:a4:e0:33:d4:f1:17:64:
57:2c:f5:d8:eb:d3:d9:a9:0f:42:09:d4:d9:98:4a:61:dd:44:
7e:c5:8b:fb:05:f1:eb:1f:bf:74:5d:86:c9:a9:58:87:f8:11:
09:2f:e7:2c:b2:b0:2f:84:6a:36:28:bf:fd:6d:32:5d:5c:f8:
12:7d:aa:62:2e:75:27:bf:a5:fa:a1:f2:8d:b2:ab:9a:d4:3f:
68:8c:50:89:e3:a6:30:d4:cb:7c:b3:03:34:f8:96:e3:cd:a4:
9e:64:8f:f5:d1:f4:cd:35:88:ea:52:4a:de:8d:8b:f5:68:c0:
c1:11:2c:4f:e1:04:41:f7:ef:04:f1:b8:ad:e7:0b:17:96:46:
ef:36:ff:fc:1a:42:87:39:e2:be:7d:6b:5a:8e:16:7b:aa:b8:
74:92:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:57:31 2025 by rpki-client