Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier: v+XDDL4ULzpN7+hiV4KMhoTQIQBpZ2h9/GVNym8erY4=
Subject key identifier: C4:88:A0:F4:46:B2:C8:9E:F8:41:DC:D3:15:E8:9D:08:DD:7A:65:DD
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 019652371FC136D2B814087C1BFF3B00C197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 08:01:06 +0000
Manifest this update: Sun 20 Apr 2025 08:01:06 +0000
Manifest next update: Mon 21 Apr 2025 08:01:06 +0000
Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: UyZGUrRaXtVjDvLAZHgQCTyNUGsYnUmPYD058DVgVQI=)
2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=)
3: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=)
4: yVJnFS7lt_m44ZGvk9I8EF_xDD0.roa (hash: /jOq2cHp+9BcWaWydmDU1C8hLNvjhT4eXiMG9sdmdg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:1f:c1:36:d2:b8:14:08:7c:1b:ff:3b:00:c1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Apr 20 08:01:06 2025 GMT
Not After : Apr 21 08:01:06 2025 GMT
Subject: CN=c488a0f446b2c89ef841dcd315e89d08dd7a65dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:1f:fa:74:54:e8:85:33:00:27:df:68:ae:
13:5c:35:39:51:15:00:76:33:d0:7d:11:76:59:d1:
43:e9:6b:22:72:2e:81:fe:1b:82:90:1b:86:af:67:
01:e2:16:f1:8c:da:a0:53:b8:64:81:ba:b7:ad:ce:
d1:fb:30:40:d9:46:69:c6:0d:72:c2:d7:91:cc:57:
aa:bc:47:51:6d:d4:d6:ec:18:e5:9b:1a:3a:b1:0f:
c2:f1:dc:c2:6a:12:5f:6f:44:e5:f6:f6:07:3d:17:
87:78:c0:36:52:d4:e8:96:75:64:0e:a9:2e:7d:12:
ff:cc:5d:45:6a:9f:b8:ff:35:b3:e5:03:f0:3a:b8:
72:67:6b:b0:a7:37:27:f3:b8:b5:4c:4b:7e:28:97:
42:ed:9a:87:f7:02:ea:b8:59:b3:98:94:06:6d:20:
79:d4:60:37:bd:85:e5:de:58:c1:c9:e4:4a:14:c0:
16:81:2c:ae:03:6d:24:f3:fc:f2:e6:29:cf:f6:0e:
f2:f2:f3:73:3d:ae:ee:93:3d:3b:36:1f:7d:69:16:
b1:6c:3b:91:43:da:d2:b5:a9:c5:05:37:e5:82:76:
4f:ec:a6:1d:5e:8a:b1:60:23:94:6a:8e:1e:e9:ee:
b7:a7:24:44:11:df:b8:b8:04:86:85:94:d3:b9:94:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:88:A0:F4:46:B2:C8:9E:F8:41:DC:D3:15:E8:9D:08:DD:7A:65:DD
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:31:b0:7f:19:ce:cf:33:4d:0f:16:81:a8:47:9d:f2:fa:a1:
1f:d7:4a:ef:64:0b:8d:db:9f:86:70:f1:31:9c:40:b9:dd:77:
54:7b:89:2c:2e:f6:49:77:45:70:7c:90:9f:da:00:93:bf:d4:
fd:9b:5a:0b:eb:08:1b:16:08:6f:1c:e0:18:2a:c8:3d:09:f4:
15:25:40:55:50:d3:4d:23:93:74:fa:5e:58:46:fd:ba:08:4e:
c8:89:ce:70:f1:d0:ad:18:83:31:15:a0:b9:06:39:08:39:90:
30:4d:fb:73:3b:0c:bf:10:3c:22:02:fd:a7:e3:11:24:19:d7:
c9:ec:a6:9f:ff:2a:7b:25:0b:ef:36:53:20:ce:54:c8:42:b2:
09:5d:62:17:4d:6c:d8:1b:2e:ea:86:bf:c9:cb:b3:7e:1a:0f:
b4:cd:5c:3e:00:ac:53:41:cc:81:cd:ae:65:f1:3c:eb:80:a6:
17:fe:ec:9b:5e:52:28:63:77:30:26:c0:e3:df:c5:cc:1e:1d:
6e:47:b3:d2:b8:33:80:ea:90:6d:71:e4:0a:bf:ee:42:c8:89:
0a:a9:bd:8a:50:2b:4f:9e:24:62:fa:46:25:ad:9c:1a:47:5d:
c1:46:13:a4:15:1f:a0:9f:a8:19:b8:91:29:f0:5b:af:b2:20:
ce:a3:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:56 2025 by rpki-client