Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: iihX4lNA+9uCayLUq0PAjWQOPz7iSZ0Vw5JKFaqYqMo=
Subject key identifier: 71:EF:C2:39:87:4D:DD:AE:68:2D:02:1C:DD:09:83:A0:AD:B3:AD:CE
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 019648583488B217545CF3856D5B930819E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 10:01:02 +0000
Manifest this update: Fri 18 Apr 2025 10:01:02 +0000
Manifest next update: Sat 19 Apr 2025 10:01:02 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: il35PaQJeJHXWLzLiBkRc53p5BG38f8f1XXkDpBQ1pY=)
2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:34:88:b2:17:54:5c:f3:85:6d:5b:93:08:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Apr 18 10:01:02 2025 GMT
Not After : Apr 19 10:01:02 2025 GMT
Subject: CN=71efc239874dddae682d021cdd0983a0adb3adce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:ba:11:a5:39:36:09:17:52:a8:49:53:5d:
4c:f1:4e:ba:de:c0:8c:ae:b5:7b:bb:23:ee:4d:90:
65:14:eb:91:30:d4:25:4a:3d:a4:71:b3:eb:51:2d:
09:e0:a3:39:05:e2:9d:06:42:67:f5:35:6a:f1:51:
58:a8:e9:df:cc:d6:49:43:51:fd:24:08:92:7c:63:
a2:0d:1f:cd:05:98:83:4b:f8:0e:d6:dd:01:41:8f:
0b:0d:a5:6d:c2:58:e6:c8:10:ef:54:a8:a8:90:ff:
f3:3f:b6:5b:01:5e:ca:bf:51:65:82:91:3a:f3:33:
56:83:c9:e9:aa:bc:67:df:1b:71:eb:4d:8f:e5:a7:
b3:34:2a:cb:0a:03:ad:e5:8b:27:95:66:26:9c:40:
17:95:ba:91:e7:8d:77:97:a8:95:7e:8f:d5:17:15:
57:81:8a:2b:8a:70:b0:e4:40:d9:cb:ae:f5:b0:0f:
ba:fd:f7:d9:c2:2f:91:f3:95:09:91:08:40:c2:ee:
7c:8f:fd:4a:21:52:69:61:57:02:0d:f0:e0:a9:75:
54:d9:5d:00:e7:8f:e7:c9:0d:92:5d:e9:c6:19:8a:
f0:7b:17:d7:79:0e:43:4f:fb:14:d7:c0:63:a4:1e:
6a:d0:5a:4b:0f:35:7f:d2:94:0c:22:38:d0:c2:79:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:C2:39:87:4D:DD:AE:68:2D:02:1C:DD:09:83:A0:AD:B3:AD:CE
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d0:29:21:19:b9:58:ed:9b:ed:a4:39:42:45:4d:03:af:42:
46:39:87:1c:1e:c5:89:eb:e2:c0:54:f1:f3:7a:0c:03:5a:8f:
a6:ad:56:78:d2:88:8e:6f:00:3f:3e:d8:99:f7:86:9f:91:8e:
d4:07:12:85:1f:b3:5b:e7:12:55:db:52:be:a7:c1:ac:73:67:
c8:a3:14:20:9d:94:b9:a5:4b:25:5d:d3:d7:b5:66:69:92:b3:
7d:97:40:17:af:02:1a:32:dd:aa:8a:3d:3e:4f:55:df:b9:e6:
b8:90:8c:74:6b:59:89:99:15:c0:a3:ce:d3:4b:fb:ae:76:66:
6a:4c:fc:b5:7d:d8:7b:a2:71:e9:95:56:9b:5d:40:b2:ce:db:
80:cb:93:c9:13:58:a5:38:42:f9:d2:26:55:f2:6e:bf:86:fa:
50:fe:70:b6:24:14:ab:00:e4:0e:9f:b5:83:12:74:d5:37:86:
50:e4:3c:fd:67:39:78:60:35:de:e6:20:f8:b8:c9:17:58:83:
e9:38:a9:57:c9:05:50:a4:da:4c:bb:46:a4:de:9f:da:07:88:
d7:3e:b1:9d:6e:41:2e:53:96:d7:44:c5:98:24:b6:56:16:22:
d9:61:c6:8b:9a:5f:81:fc:64:8d:bb:ad:4c:28:01:97:ba:70:
8b:72:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:34:04 2025 by rpki-client