Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: H+uw+ON2ZWi+11XShVZbG0w85U8mpfN1Iu+0a/7dX14=
Subject key identifier: CE:D9:D0:7E:AB:9A:22:2C:6F:75:06:D9:B9:EA:A6:C3:8E:9D:74:21
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 0196120E629A4881FEC54BC074AE06524F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 21:00:54 +0000
Manifest this update: Mon 07 Apr 2025 21:00:54 +0000
Manifest next update: Tue 08 Apr 2025 21:00:54 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: aSxhSESTFYUe0/A3+iaJ+jpxTezQhLt3XfPlZ1ypGJw=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:62:9a:48:81:fe:c5:4b:c0:74:ae:06:52:4f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Apr 7 21:00:54 2025 GMT
Not After : Apr 8 21:00:54 2025 GMT
Subject: CN=ced9d07eab9a222c6f7506d9b9eaa6c38e9d7421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:3a:a5:26:b6:49:12:fd:c8:93:f8:0c:32:
26:c4:77:91:14:8a:8d:b0:61:31:8c:44:0e:59:69:
e4:f5:9c:3b:da:cb:24:aa:a3:0a:56:f9:74:a8:d9:
1b:99:2b:1c:94:8c:b8:d1:d4:e0:f7:6e:d4:2c:ec:
0e:d0:16:2e:75:b6:06:58:03:ed:da:af:14:0d:c5:
3e:99:aa:64:c9:be:6c:0a:17:4c:0a:92:e4:1d:61:
65:6f:52:85:55:b9:71:c7:38:d1:d9:03:70:07:84:
ae:8e:0f:b9:f8:52:6b:58:8a:9e:39:85:02:1f:6a:
55:87:02:a7:7e:ef:2d:b6:a6:6e:2c:12:e5:f3:e0:
8d:43:1d:81:fa:0b:d9:7b:50:75:4b:00:c6:94:a1:
c3:2a:5e:56:d8:c6:c0:d3:41:ae:d7:89:aa:82:6d:
30:e3:71:01:af:af:7e:69:74:f5:0f:51:f9:4d:88:
d4:7a:d7:b3:92:c4:28:8a:0f:4e:4b:86:aa:25:af:
f1:4b:27:40:f0:0f:55:e3:fb:cc:c2:22:e6:fb:10:
04:17:da:8c:e7:fe:80:a8:a0:6a:6e:40:9e:19:a9:
37:63:f1:9c:f4:a5:da:32:59:2e:f4:6f:50:ca:d2:
c9:b1:59:bf:45:4a:35:97:bb:6a:6c:aa:f5:5f:7a:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D9:D0:7E:AB:9A:22:2C:6F:75:06:D9:B9:EA:A6:C3:8E:9D:74:21
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:61:9f:1f:13:f7:c8:84:4a:44:c8:20:e2:ac:21:79:21:
26:d4:ce:df:18:52:c0:d0:53:fd:e2:b4:65:da:e8:db:69:dd:
06:71:12:93:57:b4:46:81:cf:0b:b6:94:c3:b2:52:ed:f4:6c:
2f:9a:2a:0e:7d:03:92:b5:d3:e6:54:09:88:78:74:e7:fb:07:
27:0a:f6:4e:27:36:df:4e:0f:d4:1c:4a:4b:14:7f:97:3f:6e:
27:22:ff:c7:d2:78:86:1c:82:a5:93:7f:7d:2d:38:12:d9:4f:
0e:48:2d:da:0b:a0:16:6e:09:5b:0a:b8:8c:f4:e0:99:1f:89:
df:49:c4:3a:43:56:78:03:b9:95:4c:37:01:22:42:7c:0a:40:
1d:e9:c8:de:e8:f3:fb:46:29:15:80:da:b4:b4:5a:0b:b7:6d:
e3:d7:d3:e1:c6:9a:57:05:56:66:f5:92:77:44:ec:b1:8d:c0:
15:b8:75:8d:4f:82:5e:a5:11:67:e3:41:9d:a2:6f:19:1a:ce:
9c:74:34:35:53:a8:a6:48:dc:e7:0a:77:ba:59:c8:c0:4b:85:
3f:2e:7e:b0:21:bf:33:e4:8f:49:df:20:67:be:bf:d3:6e:17:
57:f7:14:a5:83:70:70:87:da:95:d4:5c:d2:f5:06:4f:21:03:
6f:08:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:11 2025 by rpki-client