Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: AkIVOZmHptZz7TyunxkXjjjdkHczQn7Za+C+zTC7INc=
Subject key identifier: 8F:A9:FA:CB:64:27:26:A3:51:B8:E7:A4:AE:B2:3B:73:86:0C:61:41
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 01965982C201882F5DC9F1C8305063A6EB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 18:01:03 +0000
Manifest this update: Mon 21 Apr 2025 18:01:03 +0000
Manifest next update: Tue 22 Apr 2025 18:01:03 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: YVipdgHFnmsRH37TU7ngN8MDKIGhAo0dIaeR6kCf8S4=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:c2:01:88:2f:5d:c9:f1:c8:30:50:63:a6:eb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Apr 21 18:01:03 2025 GMT
Not After : Apr 22 18:01:03 2025 GMT
Subject: CN=8fa9facb642726a351b8e7a4aeb23b73860c6141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:22:9a:6a:52:3f:83:d5:6f:2b:68:97:eb:
8e:30:7e:1b:86:55:47:bf:33:55:1e:bb:d4:6a:60:
18:97:05:fc:17:a3:4b:bb:95:5c:6b:2e:a9:65:48:
94:bd:6b:b1:f2:4d:9b:8d:9f:0f:62:f8:48:e3:cc:
f9:b7:65:e4:4f:5f:be:a6:7b:0b:49:ed:a0:8e:c8:
6a:82:21:0d:51:0d:8d:e3:41:29:a1:28:ed:1a:d0:
98:98:70:e7:c9:f8:45:90:b8:db:36:86:5f:5d:a4:
21:ab:73:2f:0a:5f:0e:28:0a:6e:fa:b1:c8:44:0b:
cb:ab:3c:1f:c9:b9:b9:56:c9:67:d4:e2:c6:33:2e:
56:0d:a8:d1:83:ad:e4:ad:36:75:13:3a:fe:3b:fd:
6c:15:1b:35:ea:f0:ca:bd:fe:6d:c2:19:de:bc:5c:
bb:3d:80:09:af:53:f3:26:06:6f:2a:c2:22:92:ed:
fd:fa:e5:ff:20:3d:b7:88:4a:5d:66:31:51:03:59:
16:4d:d0:a1:e9:22:e3:83:bb:91:0b:44:74:97:6b:
50:42:bc:9b:ac:13:14:c5:11:8b:52:04:5b:03:cb:
76:f7:3c:14:c7:c0:74:21:2f:15:47:ef:f9:60:10:
82:54:24:1a:ba:51:cf:e4:59:d7:37:ea:4d:4c:f5:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:FA:CB:64:27:26:A3:51:B8:E7:A4:AE:B2:3B:73:86:0C:61:41
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:c1:25:46:63:e3:32:b4:ee:24:9b:b8:ff:2d:39:4d:91:
b2:8d:b2:9a:1e:14:34:17:ac:d0:d5:60:4c:ac:ab:a5:be:f5:
de:a9:e0:6d:d9:df:73:9d:1f:04:a9:76:12:f2:22:49:98:1a:
35:ed:89:57:30:89:06:50:32:2b:51:9c:c5:b0:e3:9d:76:d3:
03:f0:c0:83:44:8f:25:88:a1:3d:23:a0:ee:fe:da:a9:cf:8c:
88:a7:02:76:88:ab:f7:5e:3a:4e:b0:ed:74:ae:17:14:d7:28:
53:6d:f9:fb:52:87:14:d2:95:21:50:42:7a:34:16:2c:1f:61:
41:3b:98:53:ab:7f:1d:5e:88:d5:e2:80:3e:f3:fa:61:d6:d3:
1c:88:27:46:75:d3:fc:81:00:1a:64:1e:b1:5f:99:fd:a4:43:
45:44:12:b9:ef:0f:26:44:01:28:fe:5f:05:42:b9:7b:c5:60:
a4:88:83:ff:3c:d8:dc:95:74:58:50:b2:8f:6f:73:34:22:2e:
d8:1f:79:bd:61:a6:05:cf:d0:8e:bb:3f:3c:7e:43:ef:bb:ff:
8c:c6:74:94:67:f0:49:72:c5:ed:c8:b8:bb:1c:4f:7d:b6:88:
83:45:74:0f:64:44:49:6f:24:2c:f9:90:e8:d6:dc:a8:0f:bc:
0f:c3:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:46:56 2025 by rpki-client