Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: cxr5jcSjW1dJrHvIZLR7b7A0EJP9f4cTwskQikPcwIQ=
Subject key identifier: 05:03:74:23:C5:3E:51:17:CC:B3:9B:7C:57:AA:61:03:17:D7:C1:EC
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 01964C6BC099EF37E84B3F56EA338DA87AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 05:00:52 +0000
Manifest this update: Sat 19 Apr 2025 05:00:52 +0000
Manifest next update: Sun 20 Apr 2025 05:00:52 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: Iq5S6IsVEhsWGtB7xSlbeIL77xm9B79qr2G6k7zg5Fo=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:c0:99:ef:37:e8:4b:3f:56:ea:33:8d:a8:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Apr 19 05:00:52 2025 GMT
Not After : Apr 20 05:00:52 2025 GMT
Subject: CN=05037423c53e5117ccb39b7c57aa610317d7c1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:02:86:bf:5c:f0:71:96:62:c5:eb:fa:31:
c0:33:1b:1a:0e:5e:41:12:e5:51:b8:fa:c5:fb:49:
49:e4:ac:75:33:13:d2:62:49:f2:71:36:f6:0d:ee:
fa:b7:8b:53:63:e6:12:f9:25:76:f5:1e:c5:e2:17:
54:7b:25:dd:9d:c7:fe:54:69:db:85:e1:35:e0:cb:
61:dc:0a:52:24:36:ef:cd:c0:08:dc:27:e0:e9:b5:
62:14:df:d5:24:87:96:42:59:52:93:23:1f:29:63:
8d:9b:eb:5c:e2:e0:9e:61:26:33:36:2f:4d:42:30:
8d:8e:ea:17:0c:cb:ed:46:12:1b:19:c1:a6:ab:08:
7b:9c:77:81:89:09:a5:e6:a3:fc:09:80:8b:53:50:
47:cd:d4:0d:0d:a9:7d:b2:09:60:ed:73:cc:8c:81:
58:a4:39:09:a1:d5:f0:19:2f:66:5d:1a:eb:c1:5b:
ef:5d:34:bd:93:9b:bf:a3:32:18:4d:65:8e:03:f3:
23:f8:1d:0a:bc:5f:d9:4b:e1:13:02:e3:aa:d2:af:
f1:02:10:eb:d9:18:a3:1c:46:03:d5:99:c1:38:07:
2e:ef:59:e5:63:a5:f6:66:f0:8e:e7:88:ab:f7:2a:
03:bb:c5:09:79:bd:45:06:e3:4c:9f:75:9a:9d:50:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:74:23:C5:3E:51:17:CC:B3:9B:7C:57:AA:61:03:17:D7:C1:EC
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fb:59:a7:ff:93:00:c4:7c:bd:65:27:55:5a:f4:d7:a6:34:
94:97:fd:24:2d:8a:3b:83:22:b2:47:d5:37:59:fb:e0:94:b4:
49:a2:24:60:4f:90:51:37:63:57:1a:92:60:08:94:d1:20:86:
dc:45:82:00:01:82:08:60:9f:1c:94:92:80:84:5e:e4:11:8d:
02:3b:04:63:24:62:35:d7:00:7e:a3:64:bb:ba:9b:3b:56:64:
85:97:0c:e0:f7:df:51:dc:bc:16:fb:f5:dc:97:df:9d:08:86:
9d:b8:20:84:3a:34:b2:c2:f9:80:88:34:7b:4d:b9:75:25:c6:
af:79:e1:05:3e:f2:70:25:17:1f:74:aa:ed:5c:c0:70:87:07:
8a:ca:17:c8:ea:23:50:38:89:0e:9e:8d:53:4f:c9:95:a1:af:
b0:a7:8a:18:5c:f6:36:4f:50:9c:d1:27:c6:18:02:19:ed:57:
61:f6:d1:89:8b:1a:ea:2b:ea:40:b7:ec:af:b3:01:7c:3d:7f:
9e:d0:24:a4:d5:56:59:a2:fe:a4:d2:50:34:ca:0e:47:cf:5c:
88:6f:12:50:ca:ee:df:16:84:61:c5:53:0c:3e:c8:41:44:a1:
97:5f:7c:d7:8c:34:83:59:37:4f:a7:af:01:35:46:7e:69:99:
79:4f:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:36 2025 by rpki-client