Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: aAJ06+zUY7jqUcbxTs4LIOIJ/uGoNbegPhn0Z75JcVg=
Subject key identifier: E8:F2:97:4A:C9:78:7B:EE:F8:D2:9F:9F:8A:92:53:F8:51:8D:B2:6F
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019653EE2991D9107AD47EE9466962482961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 16:00:39 +0000
Manifest this update: Sun 20 Apr 2025 16:00:39 +0000
Manifest next update: Mon 21 Apr 2025 16:00:39 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: VR3tPg+GXMM5mmg1qjqRFYxftgahu5qZ5nAD1PKOFsU=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:29:91:d9:10:7a:d4:7e:e9:46:69:62:48:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Apr 20 16:00:39 2025 GMT
Not After : Apr 21 16:00:39 2025 GMT
Subject: CN=e8f2974ac9787beef8d29f9f8a9253f8518db26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:c3:88:a1:de:48:5d:b8:04:31:dd:d3:0f:
ec:29:db:dc:ca:60:50:92:53:91:b6:d4:7d:26:0c:
75:b5:1e:19:cd:bf:78:69:d4:ac:bc:70:49:7a:d7:
d2:47:5c:4a:5d:5d:f6:f3:e5:b0:1c:eb:f7:8f:b3:
c1:90:37:98:01:de:24:c5:4e:86:6c:fb:04:36:5b:
28:34:98:21:a3:5e:07:56:81:f4:6c:60:4c:9a:16:
81:7a:c1:6b:d9:f5:21:f0:0c:49:31:99:d5:1c:42:
5d:6e:02:aa:53:8c:7f:43:2b:d7:43:40:24:2e:49:
9c:23:0c:83:45:0a:24:9b:8b:df:7c:59:f5:f9:88:
9d:33:86:f8:2b:a1:20:93:01:c4:8d:d6:d6:d8:19:
5b:3f:69:aa:fe:5f:c0:a9:58:60:6a:13:92:39:a8:
e8:ff:69:aa:05:14:95:af:5a:54:42:ec:ef:5f:5e:
b6:5e:be:bd:6d:f8:84:76:4d:29:b8:c4:dc:bb:01:
a1:89:c2:1d:0e:aa:87:7f:e7:b9:3e:9f:ba:c3:7d:
7b:8f:21:62:45:a5:9a:2b:c9:cf:73:62:65:14:80:
2d:b3:d8:84:a7:0e:bf:b3:c2:1b:8c:29:d2:f2:bc:
b2:8f:89:f8:f6:d4:36:24:6c:cb:a2:33:8a:fd:0f:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:97:4A:C9:78:7B:EE:F8:D2:9F:9F:8A:92:53:F8:51:8D:B2:6F
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a6:6d:3e:be:b2:9d:88:05:7c:40:85:1d:55:7f:20:24:4f:
4f:97:e7:7e:23:31:59:c8:2b:16:1c:9e:42:e8:88:aa:59:87:
3b:9c:a9:3c:bc:87:66:0b:06:a4:15:cf:d4:be:fd:f9:f9:a3:
04:21:0f:bc:93:3c:15:b2:a8:db:c8:21:ea:8d:2c:6c:82:60:
8c:1f:d8:4d:78:88:2d:f0:8e:75:31:6d:05:40:50:95:cc:52:
ad:32:a4:eb:57:b6:50:b2:df:8b:39:d1:71:b4:b6:86:48:36:
e5:36:00:2a:95:1e:69:99:09:a4:6f:bb:59:45:8e:9a:c8:a1:
14:cd:26:ab:2d:c3:b2:b1:22:aa:be:ab:08:ea:2a:de:ad:f8:
b5:4b:98:47:bd:8c:e8:0d:4f:33:c3:dd:24:e0:a8:00:07:83:
de:19:10:29:e1:82:21:7a:b2:94:50:3e:4e:70:40:00:30:26:
21:50:5d:f5:ba:7e:4c:b7:a2:f4:1c:ff:fc:f7:ab:6a:ea:52:
98:31:dc:e0:6c:cb:af:8f:6c:f7:49:83:9e:82:5e:4e:8c:08:
e1:4d:c8:12:5e:23:86:64:c4:c6:3b:0c:5b:95:e0:d7:4c:92:
e4:37:c7:e4:91:94:5d:ce:97:7b:d6:85:b5:dd:48:21:56:40:
7c:dd:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:28 2025 by rpki-client