Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: qIN4SM4Ze6JwuMuSrByLfRWMCITQEEi4rzgC21tjEkM=
Subject key identifier: 54:C4:D7:94:B3:C8:A0:31:24:7D:35:9A:5E:88:E2:BD:55:58:16:4D
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019610FC218EEC004F48FC48BAF53B54870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 041A
Signing time: Mon 07 Apr 2025 16:01:21 +0000
Manifest this update: Mon 07 Apr 2025 16:01:21 +0000
Manifest next update: Tue 08 Apr 2025 16:01:21 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: oyrWh2QE1C6zKGfTMoEHTRmQryGHvEqv2OmbNP2uSsE=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:21:8e:ec:00:4f:48:fc:48:ba:f5:3b:54:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Apr 7 16:01:21 2025 GMT
Not After : Apr 8 16:01:21 2025 GMT
Subject: CN=54c4d794b3c8a031247d359a5e88e2bd5558164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:23:61:31:ba:bd:01:7a:78:55:83:f3:30:
15:0a:bb:e5:97:fe:6a:12:7c:22:4d:1b:65:54:9d:
90:e5:2c:a2:1b:fb:f8:dc:b6:ad:b2:07:a8:f8:1c:
a7:4f:e1:49:f0:3d:45:38:90:95:d2:c2:aa:77:3d:
c3:b7:c7:9e:dc:be:e5:73:fe:06:6c:55:58:73:30:
45:38:19:ae:48:04:f0:80:d5:0b:d6:c1:88:f9:3e:
a8:ae:5d:9c:dc:cf:1d:a1:29:76:c1:ac:f6:a9:f7:
dd:ea:29:04:7b:63:bf:f2:e5:6a:c5:74:d8:e0:06:
de:98:fb:dd:f8:36:06:e8:32:3b:03:f5:e1:b5:4a:
77:01:45:5c:1f:9a:b4:18:54:9c:3a:78:a7:8f:73:
9e:48:25:25:84:81:ad:80:5a:9f:fa:2d:52:58:2f:
55:0b:ce:cb:0c:3b:09:0d:c2:66:6e:a4:a7:f0:a4:
79:d1:8a:40:da:ec:75:7c:e7:ec:41:d2:d5:5a:e9:
1c:b9:fe:1e:a6:16:ee:c6:5e:5e:89:e1:33:5c:b1:
0c:2d:03:75:da:54:fc:f4:fd:57:15:4b:bd:f2:60:
bd:a2:d6:0d:8a:86:0f:48:86:17:d5:9a:94:51:56:
e7:8b:1b:e8:0b:f8:a3:04:3d:e4:5e:9a:d7:28:cf:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:D7:94:B3:C8:A0:31:24:7D:35:9A:5E:88:E2:BD:55:58:16:4D
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:13:26:d1:62:a7:1b:ba:90:a7:b6:97:59:59:4c:61:9b:3c:
ec:4d:27:0f:a9:f0:ea:b1:00:07:4e:96:84:99:f8:23:53:d3:
e2:64:6e:f7:36:1f:00:2a:b6:96:e9:b0:74:aa:a7:2d:91:75:
1b:9f:e7:bc:8b:76:a0:90:ca:6e:c6:6e:02:64:93:a2:a1:a6:
0e:02:0b:1f:67:53:d4:3b:8e:5c:4c:01:db:22:d8:78:ff:f7:
b0:47:3c:d6:db:99:0d:36:b5:eb:3d:8e:fe:14:77:0c:81:02:
3b:91:e2:96:fb:8a:75:59:f3:27:25:c7:8b:e8:6a:85:20:26:
b5:cc:b9:71:ba:cc:76:87:e1:eb:85:76:c4:9a:db:fe:d0:70:
4b:8a:c1:ee:90:fd:48:7b:d1:62:60:bc:9d:c9:a6:f1:cd:dc:
9d:b9:aa:35:1e:a6:f2:7f:a8:2c:70:02:33:02:f3:35:f1:b8:
c3:fb:7b:3c:94:8f:a0:93:0a:a3:ce:d3:44:9d:48:ac:27:e5:
61:6a:01:bd:8e:32:d0:1b:31:25:c7:b0:df:d4:1d:2c:34:ce:
5f:bd:fc:63:c7:ec:a4:f6:d9:74:7a:77:07:be:93:ac:fd:af:
b6:3f:26:fd:40:6b:ca:b6:5d:5f:90:67:17:d5:d9:5f:c9:8d:
1e:d4:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:43 2025 by rpki-client