Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: 5h6K0qaSAP9QT8bk3AFS9jcP897sxOkYgZYCA9c8moA=
Subject key identifier: 38:1D:67:08:7C:B3:40:E4:BB:EA:18:D8:CD:09:37:0D:4E:EE:1C:56
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 01965CF22669FDCCA316D8C1B2735EB81FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 11A1
Signing time: Tue 22 Apr 2025 10:01:35 +0000
Manifest this update: Tue 22 Apr 2025 10:01:35 +0000
Manifest next update: Wed 23 Apr 2025 10:01:35 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: TqJt/lc+KCtfcTlnem0L4rB2gVagtCEUeOSTJ8n2V4E=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:26:69:fd:cc:a3:16:d8:c1:b2:73:5e:b8:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Apr 22 10:01:35 2025 GMT
Not After : Apr 23 10:01:35 2025 GMT
Subject: CN=381d67087cb340e4bbea18d8cd09370d4eee1c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:73:cd:f2:8b:46:55:d4:98:51:1a:db:bb:
e6:7c:84:70:fa:75:0e:0b:c6:5d:4c:a2:cb:ff:ea:
7b:50:4c:c2:b8:4a:66:7a:49:d5:57:d4:90:fd:ba:
5a:29:27:d1:5e:23:e3:dd:34:78:22:cd:75:b8:56:
4e:22:06:75:55:0c:7d:d8:dd:d3:bd:20:09:59:e5:
71:45:2c:93:a7:11:13:02:76:f4:a6:16:70:26:d7:
54:ed:e5:c8:50:f8:dc:aa:0c:45:24:f2:70:74:94:
0b:1e:d0:dd:9a:59:d7:ea:73:93:7c:51:de:32:11:
68:e4:8d:fa:dc:7f:9d:e0:2c:7b:a2:79:56:7b:66:
e4:47:45:9d:6c:80:ee:f3:91:76:ff:dd:29:95:95:
ed:65:6d:8d:1f:9b:a6:98:91:5a:a1:bf:18:7a:44:
7d:d2:e6:0c:65:c4:c8:3f:db:29:c9:2c:52:ea:31:
2d:37:a7:80:57:b5:b7:fa:dc:d5:f1:0a:f3:5b:31:
17:89:64:6b:46:26:a5:bb:61:3c:df:59:54:de:c8:
44:b2:b6:3e:0b:b9:c5:93:d9:2e:79:ea:6d:88:44:
44:b9:e5:01:5e:02:95:62:2b:62:01:2e:75:05:3b:
b5:5c:4b:6f:19:89:df:7f:32:6e:ab:d9:0a:e7:c8:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:67:08:7C:B3:40:E4:BB:EA:18:D8:CD:09:37:0D:4E:EE:1C:56
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:46:4f:43:25:16:f0:a3:db:d8:be:8f:ef:26:3a:a2:15:
0f:bd:8e:16:7e:2d:20:fb:1f:46:8e:ff:89:f9:8d:a1:7c:b8:
a5:d6:70:8c:c7:8c:37:23:28:5c:85:5c:86:e2:f6:99:5b:b0:
3e:72:51:9e:f8:f6:74:5e:93:ab:b8:c4:0a:3f:65:44:94:96:
9e:85:10:04:0a:05:8a:22:91:c5:49:f9:77:39:e5:65:83:8c:
87:30:f0:be:ad:b5:6d:5f:4d:28:7f:46:28:4e:3e:4d:a9:18:
6d:93:d9:c1:ae:ee:06:aa:08:eb:79:f7:75:b3:0f:d0:d6:fe:
24:23:fd:b6:d7:3f:5d:51:92:33:5a:7c:17:02:54:7c:db:80:
ff:d6:ce:91:7b:d8:ea:a2:f1:67:bc:26:e7:2d:b8:86:44:91:
94:95:20:c5:0a:a1:ea:c5:5c:02:20:36:2b:51:6b:6d:7b:2e:
9d:93:7f:5f:13:e1:f6:28:4a:e0:d6:5d:d6:22:0a:95:64:31:
02:2a:78:62:db:60:74:fc:82:0a:cc:9c:2c:de:e8:04:fc:52:
0b:d2:f4:0b:53:b1:a2:43:9b:fb:75:ff:18:e9:cf:e6:8e:d7:
67:83:c2:77:00:70:0f:b1:4b:b3:c8:a5:38:55:f3:49:18:4b:
6b:f8:26:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:41 2025 by rpki-client