Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: m8LGPJ9NLazAsvGGFk1W/FtYuPirJtSF+0XLIKUArMw=
Subject key identifier: AF:AF:F2:6C:72:4D:8B:21:EA:6F:85:B7:CA:6A:36:EB:3E:24:14:E2
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 0196553760EB4A3904D0F7467963409D1005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 0E6A
Signing time: Sun 20 Apr 2025 22:00:14 +0000
Manifest this update: Sun 20 Apr 2025 22:00:14 +0000
Manifest next update: Mon 21 Apr 2025 22:00:14 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: X1HCCCZFvLBc6FePZ0cSNfYVfbOyIbMAgqzoFgrWbeU=)
2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:60:eb:4a:39:04:d0:f7:46:79:63:40:9d:10:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Apr 20 22:00:14 2025 GMT
Not After : Apr 21 22:00:14 2025 GMT
Subject: CN=afaff26c724d8b21ea6f85b7ca6a36eb3e2414e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:18:7b:4d:19:a1:78:bf:bb:98:87:38:a7:
2e:ab:bd:84:47:a9:3f:89:0c:78:21:9c:7a:b4:58:
02:e2:4a:70:fe:2b:5a:05:64:3f:39:78:f6:03:23:
a8:43:8b:98:61:c5:18:cf:d1:ee:c9:af:1f:5c:24:
db:7f:be:bc:fc:98:d1:bc:61:59:83:c4:8d:34:16:
fa:35:ea:68:89:ca:81:cf:13:bc:cc:c5:af:26:3e:
83:ff:2c:7a:ea:44:e5:e2:ce:d9:02:21:8b:fb:88:
3e:8d:c6:5a:a5:1b:58:92:c5:0e:5d:81:84:99:b3:
e8:41:9b:f8:44:71:28:86:ca:a2:1f:18:87:be:91:
c1:80:40:ea:b2:9c:ef:41:3b:bc:8c:0c:c8:39:25:
b2:b5:07:af:4b:d2:57:14:21:01:ce:ff:9e:14:30:
ac:f5:98:ef:6e:15:00:58:cb:a6:63:88:f1:b3:fe:
cf:a2:5a:18:fe:d8:2b:37:1e:0b:9c:3d:c0:3c:f3:
de:22:87:a9:5e:e0:57:de:6d:19:4f:a4:ef:2f:57:
27:e2:16:e3:1e:b7:37:84:1d:9c:a7:b3:fb:ef:04:
a9:70:a3:ec:89:9c:78:6d:e9:f5:ff:28:e3:08:8c:
5a:d6:db:0f:d8:0e:9e:b7:e0:bd:16:a3:bc:06:1b:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AF:F2:6C:72:4D:8B:21:EA:6F:85:B7:CA:6A:36:EB:3E:24:14:E2
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:12:d0:c3:07:90:ac:9f:fa:71:0e:c2:d4:fa:94:df:c2:8b:
3b:e7:1c:21:ac:d4:ad:59:42:5c:2d:2d:3c:59:cc:c1:e2:2e:
36:dc:4b:ca:0a:37:de:e2:07:97:b4:d6:43:3c:77:22:0c:e9:
fb:26:8e:21:bb:0f:8d:2d:1d:48:54:25:4d:72:4d:52:ae:bb:
34:03:36:59:4f:25:4e:6f:fd:9a:d1:ea:c7:27:23:3b:d8:c2:
e3:26:96:cc:78:5f:9b:b4:3d:31:18:c2:b3:c4:96:69:b8:10:
ad:1a:64:bb:23:fe:d7:7a:91:f5:2b:c8:3f:99:dc:2c:e7:7e:
f4:ff:49:d9:6e:9d:55:94:f0:d0:06:dd:f1:04:a3:5a:d8:ad:
f2:be:1e:5a:5c:4e:4b:2d:51:ce:36:ce:11:39:62:98:22:82:
ab:45:4a:22:a3:ac:1a:2e:ee:bb:44:47:30:34:74:b8:da:f2:
15:da:3d:58:23:ed:7d:70:37:f1:9e:48:74:9e:72:2f:21:f6:
04:2a:4c:13:a9:82:02:f3:79:64:f8:b6:9a:a1:eb:33:75:6c:
68:d4:9a:cf:3b:82:eb:66:1c:a9:5f:14:2a:e3:5b:5f:f7:25:
f1:15:04:d1:e1:76:79:b6:5e:9d:e4:32:15:d0:e9:6d:03:49:
2e:53:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:04 2025 by rpki-client