Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: 4ny2jrSzj/c0fMrbDrLwiFI6kbsGf/N4xRNTZzefEmk=
Subject key identifier: 6F:BC:C4:D4:3F:7B:B6:F3:4E:6F:13:A7:E7:9F:E1:47:11:4B:67:F2
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 01964D7E0E9E8ABC4B5368BC1851DDFA1271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:00:29 +0000
Manifest this update: Sat 19 Apr 2025 10:00:29 +0000
Manifest next update: Sun 20 Apr 2025 10:00:29 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: 1A9axtdIY/r6Td9gONLTfEItUVDFhdK+yVUwJqsFKs8=)
2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:0e:9e:8a:bc:4b:53:68:bc:18:51:dd:fa:12:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Apr 19 10:00:29 2025 GMT
Not After : Apr 20 10:00:29 2025 GMT
Subject: CN=6fbcc4d43f7bb6f34e6f13a7e79fe147114b67f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:be:63:1d:63:10:88:23:0b:d4:b4:a8:26:
eb:16:5e:4d:b1:f1:a0:9f:29:67:a4:d7:9b:b7:42:
26:6e:be:0f:58:a2:87:c7:7d:ab:26:7e:26:c0:5d:
72:2b:ed:42:c3:75:ff:fa:a6:7e:a6:ed:c1:4f:57:
a6:bc:27:f1:3b:26:e4:21:bc:9f:f2:b6:63:a8:52:
70:39:24:7f:40:42:25:ce:80:0a:ef:f3:85:5b:8e:
05:2f:33:a0:69:65:27:d0:e3:e6:e6:ab:83:a7:fa:
dc:dd:84:ef:c5:a7:9e:4f:0c:29:93:77:95:9a:30:
88:2d:b3:a7:f1:e6:f0:20:92:4d:57:89:77:14:7a:
19:26:cd:4d:9c:83:4e:a6:36:6d:80:54:d3:02:da:
d2:c4:b1:b4:2f:96:3f:d2:22:71:6f:6e:ea:a2:b8:
b5:3d:6f:f4:8d:74:ae:0e:b0:91:16:8e:3b:33:6d:
04:55:32:0e:79:19:e6:6f:5c:f9:d4:9a:ee:d3:8d:
fd:1c:af:41:89:e9:84:8b:57:00:ed:91:8d:b3:ff:
5c:53:69:99:aa:4a:a3:48:30:1f:e8:a7:f4:56:91:
9a:42:5b:41:8b:dd:25:f2:2f:07:ec:6e:4b:29:15:
52:fe:c1:e5:22:e9:fa:94:c6:d8:65:fc:e8:fd:97:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:C4:D4:3F:7B:B6:F3:4E:6F:13:A7:E7:9F:E1:47:11:4B:67:F2
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f1:d9:54:d3:dc:7e:6d:08:2f:4b:8d:91:19:de:2b:66:d9:
51:27:2a:00:67:0a:a1:45:e9:14:b1:17:d4:94:81:07:e0:0e:
86:f6:8c:93:f0:50:51:cf:79:8d:d1:40:f4:24:3a:63:c2:2e:
2b:dd:a1:d1:cc:03:a2:e3:17:f4:b5:49:07:b1:c8:84:aa:7d:
51:38:8e:59:ab:3c:44:05:1e:3b:06:13:c3:4e:6e:df:05:32:
f8:b8:46:9f:97:db:19:5e:e5:b8:6c:26:e1:c2:f8:d3:a3:b7:
72:3e:cd:16:1d:76:6f:da:c8:48:c3:4e:17:44:ac:84:06:47:
0c:1e:49:29:4e:3b:d7:20:c0:89:ec:57:a9:23:0d:74:b8:57:
ca:2e:4a:a6:4c:52:ce:09:5a:4f:74:f3:eb:f6:09:e7:45:38:
af:21:b9:de:f1:be:02:30:c1:07:8b:32:8a:84:58:25:ff:dc:
ed:5c:39:7b:f3:86:20:de:62:cd:37:7d:b0:23:bb:5f:34:26:
56:83:31:9e:62:ea:da:7c:5b:2d:ce:e9:c7:f2:3e:de:6c:3a:
cd:8b:2f:6c:a9:0c:d3:11:a8:72:b2:51:1c:f4:38:2d:b1:1c:
d7:fb:e8:58:a1:f1:55:33:5c:86:9f:b9:8f:0f:7c:ec:6e:a7:
64:cd:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:20 2025 by rpki-client