Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: ykaBXiXACZwSXX4c6GX8C2k25T3kqNUw6mo+EUvzYfo=
Subject key identifier: C1:D1:69:E5:E0:AA:3C:FD:05:4F:6E:ED:9A:2B:84:33:BB:5D:B9:C4
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019510C7B63346398742D70AD647D3C4439B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:18 +0000
Manifest this update: Sun 16 Feb 2025 22:01:18 +0000
Manifest next update: Mon 17 Feb 2025 22:01:18 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: kei44Cd7CA90gO6A00sGK++L/6f8G7rf3CE1QG+jCU0=)
2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b6:33:46:39:87:42:d7:0a:d6:47:d3:c4:43:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Feb 16 22:01:18 2025 GMT
Not After : Feb 17 22:01:18 2025 GMT
Subject: CN=c1d169e5e0aa3cfd054f6eed9a2b8433bb5db9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:21:df:44:be:67:e5:b5:e2:f6:39:15:6d:
44:a7:a8:a9:6a:da:d7:b8:c1:46:58:ef:56:6a:3b:
63:4e:a6:02:04:86:bf:66:a1:ec:28:e5:22:d7:95:
b5:7e:6a:23:dc:fb:4c:d8:10:9f:52:61:e8:28:81:
4a:f2:28:6b:6c:59:a1:86:bc:35:38:7c:cf:8d:33:
9f:75:a5:8e:62:84:02:eb:36:56:11:18:5c:0a:0f:
c6:f1:e5:69:1e:f2:22:84:f0:c1:9c:1e:60:1c:36:
81:ea:18:94:ce:7a:f5:e1:11:ec:32:49:04:ff:89:
0e:40:33:09:51:ff:34:7d:b9:3f:14:be:a1:69:9d:
88:61:87:21:db:ad:ec:41:38:12:f6:ea:ac:46:5d:
56:b1:41:95:34:26:03:ff:6f:1d:c6:03:41:f5:23:
e5:2b:f2:32:0d:cb:bb:7f:9c:b4:00:b5:f3:8f:12:
3e:ff:e1:13:b2:d5:ee:8a:42:95:be:f4:24:53:9a:
1d:8e:4a:41:9f:53:d0:07:9d:80:c4:c6:5e:55:d1:
72:9f:5d:e8:ee:73:bf:1d:f1:98:65:6e:32:42:1c:
46:40:44:a2:d7:0d:6e:a7:a1:95:3b:22:4e:92:78:
7c:ad:6b:c3:be:6c:44:fa:b7:67:6a:d0:49:75:07:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D1:69:E5:E0:AA:3C:FD:05:4F:6E:ED:9A:2B:84:33:BB:5D:B9:C4
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8a:dd:54:8a:36:9d:72:81:f4:2b:2b:bf:9a:49:cc:e3:98:
28:ad:72:9f:e7:ca:1f:54:34:60:30:37:52:cb:62:e2:e5:44:
b5:c9:d3:25:ef:b1:2d:b7:db:98:e7:b5:58:62:6e:eb:0b:a1:
a8:98:ad:a9:28:d9:e6:33:fb:0a:ff:d8:ce:37:0e:4a:b7:7c:
d9:ad:85:c1:88:79:a3:79:2f:23:98:40:a9:85:09:65:0c:65:
f0:d0:95:23:9b:79:12:37:96:58:38:29:55:73:ee:43:80:13:
64:39:5f:54:31:3e:2b:e3:d3:f1:fe:3d:ee:9f:ab:d7:b9:e8:
c5:70:d5:aa:f1:22:58:60:ce:90:7e:75:f1:14:a4:2c:57:08:
6c:13:88:34:17:3b:c9:3a:18:c1:52:9f:98:ac:81:e1:da:df:
55:3a:0e:40:3c:84:17:45:10:50:e8:a2:11:ec:4b:18:d4:cf:
74:e3:70:d7:fd:77:12:63:66:82:db:c6:5e:37:8e:40:07:0e:
cd:52:ee:75:67:42:7c:40:ae:ea:95:0f:80:31:ee:d5:cc:cc:
c8:e4:42:53:79:20:35:a1:f8:43:50:4f:5f:f1:c5:78:36:96:
79:10:bc:e3:99:1f:08:66:64:db:64:06:9f:37:3f:3a:20:74:
82:37:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:53 2025 by rpki-client