Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: AbsClvJZIWWPQgrdgGKVpN+vVDUmWjkveXycTjtgW9o=
Subject key identifier: 95:13:8E:8C:27:B2:35:4F:99:0F:10:81:88:57:FB:AF:38:1D:7C:FB
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 01960489E0A40862186DF280D02FF4038FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 07A1
Signing time: Sat 05 Apr 2025 06:01:06 +0000
Manifest this update: Sat 05 Apr 2025 06:01:06 +0000
Manifest next update: Sun 06 Apr 2025 06:01:06 +0000
Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: GAgAE2OdKjZ0sw0wRSybZphs+szfrXAjxyRtQFeEi9E=)
3: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:89:e0:a4:08:62:18:6d:f2:80:d0:2f:f4:03:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Apr 5 06:01:06 2025 GMT
Not After : Apr 6 06:01:06 2025 GMT
Subject: CN=95138e8c27b2354f990f10818857fbaf381d7cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:f0:2c:d2:ac:5c:c8:21:00:9d:80:63:36:
e7:60:05:52:2c:ef:c6:af:38:25:e8:d4:f4:40:60:
82:a7:16:3d:af:09:9b:d5:f1:27:f9:98:64:97:fa:
e7:7b:1f:e8:ce:ca:99:84:c0:8a:60:8d:fb:10:03:
5a:a4:10:57:5b:3d:54:4d:08:d3:3d:e0:f0:d3:5b:
c1:21:99:cd:19:b1:5a:ee:ba:dd:a6:bc:ba:a8:f4:
a2:bb:ae:1e:44:79:e0:d2:b1:02:6d:06:8e:0d:bb:
d3:31:56:ca:d1:64:d6:21:7b:d5:1e:67:f8:0b:e3:
be:00:ae:91:26:13:45:e7:8c:90:b3:3e:f8:65:e3:
a2:40:14:51:f3:04:bf:78:df:97:71:01:00:e9:f0:
2b:ef:60:1f:c1:8c:c8:83:35:d3:a4:a6:7e:30:09:
f1:9d:19:3c:e0:ca:e7:19:5a:a0:e7:98:8b:65:4a:
58:16:91:85:20:9f:7c:50:05:a4:4a:ff:cc:b6:20:
af:14:ec:e4:52:92:5d:ee:c9:56:1a:dc:3b:6c:a0:
72:5d:0d:d9:70:c1:ed:3b:02:7c:1a:e9:cb:b8:8d:
67:ea:b4:77:ff:b9:f7:7d:99:62:67:47:87:49:8d:
33:72:bf:28:e1:f8:98:69:13:ff:36:e0:a6:40:44:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:8E:8C:27:B2:35:4F:99:0F:10:81:88:57:FB:AF:38:1D:7C:FB
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d9:48:54:a2:88:01:b3:e3:66:12:6d:05:a8:e3:66:85:25:
0b:1e:89:8c:5e:18:5c:b8:d3:39:2b:53:9d:59:16:ab:26:38:
76:1e:e3:e8:2c:ac:21:0f:7b:1d:1d:b5:c0:1c:94:04:63:a8:
9a:db:75:03:13:d0:af:61:21:05:3d:06:32:7e:85:d7:b3:a4:
52:70:48:b8:04:9e:88:8a:98:f9:dc:61:ec:d0:33:8c:4a:a9:
13:e0:cf:9b:05:84:2a:3a:24:6e:4a:2e:59:29:a1:83:f2:bc:
fa:9c:54:52:13:73:cc:30:5b:c8:c4:72:02:de:fd:e9:f0:59:
61:ac:39:b1:9c:b0:f8:3d:17:be:31:01:0e:41:dc:90:30:d1:
c2:18:f5:ac:18:cc:7f:b5:04:ef:74:b4:2c:3c:37:4a:eb:44:
5e:41:80:7e:2a:d7:14:4a:4a:00:15:83:cb:31:a0:a6:cc:38:
75:17:e1:b9:d3:78:00:af:8a:81:4a:f3:3e:6c:53:76:6c:e5:
5c:ad:38:52:17:f2:d5:ce:10:7e:cc:25:1e:c9:6d:51:2c:90:
34:02:28:6d:d5:4b:1c:95:f4:a7:4b:61:dd:17:99:b1:71:75:
b0:8e:59:20:a5:33:3f:76:c7:a6:94:c6:f6:04:1a:dd:81:5c:
21:d9:9a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:37 2025 by rpki-client