Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
File: 1ikBDNsLMSwy4Hqvm3INc9O806s.mft (raw, json)
Hash identifier: aXKjQ5cN1necJYzgnZQKASF/uhg9Kx7LjZ6YkPmHm+o=
Subject key identifier: 7F:5C:29:50:7C:15:11:33:47:01:CC:5D:55:C6:3C:A3:6E:26:2C:F3
Authority key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Certificate issuer: /CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Certificate serial: 019657CB5D4182A648AADF2E8F49DDCE13CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 10:01:07 +0000
Manifest this update: Mon 21 Apr 2025 10:01:07 +0000
Manifest next update: Tue 22 Apr 2025 10:01:07 +0000
Files and hashes: 1: 1ikBDNsLMSwy4Hqvm3INc9O806s.crl (hash: PczCdkuXdu8kvCUKSkMon5sB0onL8sPq4HJ9A71uJn8=)
2: 24_KLR4ZTxixXjMFlfIhygqGc5A.roa (hash: moxDA+OQx2vpPS9xIam1x12sDttHtdnUlxnInWiXYBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:5d:41:82:a6:48:aa:df:2e:8f:49:dd:ce:13:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Validity
Not Before: Apr 21 10:01:07 2025 GMT
Not After : Apr 22 10:01:07 2025 GMT
Subject: CN=7f5c29507c1511334701cc5d55c63ca36e262cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:d5:ac:c5:1e:67:4b:09:59:21:ec:32:db:
46:c8:b6:d8:f8:51:93:2e:62:24:14:70:68:02:81:
c4:b8:59:6f:60:df:1b:63:93:25:05:00:a5:f5:f4:
46:9c:37:13:75:9f:90:25:a7:47:df:ea:e2:d8:4b:
37:aa:00:83:2a:fa:75:a9:7f:f1:32:82:09:c7:06:
27:a1:52:ff:26:f7:40:bf:b0:90:5c:22:12:5b:94:
75:a4:49:d9:5b:3e:72:9d:5d:07:6d:e5:1b:73:22:
e5:03:53:0b:a4:68:0a:69:07:e8:ad:c4:df:41:88:
20:d6:c7:df:e2:7d:8f:07:07:7d:79:87:91:ff:fb:
95:ef:d1:78:a2:4b:e4:ca:c1:38:e9:15:4b:f4:02:
27:0e:fc:f5:ac:8c:31:9a:dd:4d:7b:54:2e:1b:5f:
e9:38:6c:5d:4f:1f:7f:0e:34:42:a5:69:72:60:3b:
77:ca:ca:51:bc:07:e7:9c:31:8d:43:5f:3d:7c:65:
03:4f:b2:86:c8:19:9f:73:2d:35:49:c8:5c:db:78:
e7:6a:7a:47:2b:a5:10:aa:d9:d2:42:4f:06:ad:5d:
01:44:fa:9f:1a:a5:68:6f:59:c6:1e:8b:95:7c:51:
48:47:d9:4f:2f:e0:12:f7:3c:2a:8a:34:2d:dc:75:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:29:50:7C:15:11:33:47:01:CC:5D:55:C6:3C:A3:6E:26:2C:F3
X509v3 Authority Key Identifier:
keyid:D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:39:a9:e5:a9:a6:7e:52:3d:40:8b:8e:bc:7e:02:57:92:
38:c2:00:7d:b8:99:dd:8c:23:cc:95:a8:83:41:8e:43:29:c7:
36:db:a7:4b:ee:f5:1e:ad:ef:30:c8:bb:83:34:39:af:70:66:
24:b3:88:7e:4d:54:96:b8:f4:b0:64:dc:5e:0d:d0:a1:76:78:
66:0e:a8:20:c0:0d:4b:23:5d:09:a9:df:fe:bb:c6:ed:5d:8d:
03:6c:fb:ad:e1:d0:e9:e0:54:6f:89:f6:0e:b4:79:62:cc:fd:
6f:23:52:24:09:71:d2:19:5b:56:4f:ea:6d:87:c1:ca:ac:f3:
af:85:1e:fb:61:0e:f6:0e:ff:0f:ed:dd:c8:c9:ef:38:78:69:
9a:57:22:bd:9a:28:89:bd:c0:1d:a4:19:05:0e:bb:a4:c7:40:
47:47:21:a5:84:33:35:f1:6e:85:73:43:ad:9f:65:f6:09:62:
17:ba:f7:9f:04:d7:53:8f:49:e0:be:4a:76:ae:82:88:13:fa:
bd:4a:54:1d:19:79:23:0a:be:b0:36:f8:c8:55:1c:07:18:f6:
24:76:93:55:1a:fd:68:32:52:60:c4:18:57:13:b6:d7:1c:3a:
a9:85:9a:de:0c:9f:d0:02:c3:fd:b7:39:18:92:7a:dc:60:e3:
f3:57:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:41 2025 by rpki-client