Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: 55NxE8OrdF/Nx12f0UgAj41VXEEE345ju69r71pzVSI=
Subject key identifier: 9A:C4:54:47:4F:A1:CF:A0:05:6F:D2:09:B5:14:8A:6F:27:D6:EA:2C
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019652DB10D570CCDA8E44DF3ABBEC116727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 0D83
Signing time: Sun 20 Apr 2025 11:00:10 +0000
Manifest this update: Sun 20 Apr 2025 11:00:10 +0000
Manifest next update: Mon 21 Apr 2025 11:00:10 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: pmfmehEpYj1pulpH56I6PKlz7Xo0K+EIwlwnD82ycGk=)
2: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (hash: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:10:d5:70:cc:da:8e:44:df:3a:bb:ec:11:67:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Apr 20 11:00:10 2025 GMT
Not After : Apr 21 11:00:10 2025 GMT
Subject: CN=9ac454474fa1cfa0056fd209b5148a6f27d6ea2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:14:31:04:05:0a:12:f0:0f:75:de:fb:bc:83:
11:ed:7d:57:2b:61:48:33:6e:f1:00:04:ce:af:bf:
17:ea:57:65:12:ff:8b:08:09:77:f8:ef:f7:d9:e1:
2f:de:35:fd:33:cb:aa:38:2a:3e:92:e8:f5:d1:9e:
41:36:78:4a:f1:01:d1:2f:76:8c:1c:1e:b6:a7:ac:
83:02:64:ae:01:7e:80:fc:5b:b8:39:6c:40:c1:07:
1e:c4:55:32:18:85:a3:b0:7f:ef:76:e7:6f:53:62:
5b:37:d6:e1:47:75:20:57:0e:d5:40:9b:f3:29:be:
1b:06:b7:54:61:8a:3b:72:7c:be:6e:35:09:a6:37:
52:b8:06:a7:ea:0a:e4:6e:6a:eb:44:e2:49:99:17:
cf:a9:cb:ca:d5:f8:5b:59:bc:f0:c5:b0:fc:13:21:
10:8c:cf:bd:8d:be:45:1b:bd:a8:36:b1:60:97:bc:
f3:a8:a4:77:6d:eb:6a:6b:d1:76:a0:79:2f:19:ba:
0a:ee:2c:43:65:00:3b:33:ec:64:90:5e:2f:05:2c:
a4:73:da:77:95:7c:b7:21:31:e2:e0:2b:9e:c5:69:
07:2e:83:16:45:82:fd:3d:87:df:c1:64:12:65:b4:
4b:6e:6b:dd:f3:5f:f8:5c:6b:1a:2e:dc:28:18:aa:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:54:47:4F:A1:CF:A0:05:6F:D2:09:B5:14:8A:6F:27:D6:EA:2C
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:62:a2:b6:67:d0:0f:03:2a:1e:88:7e:dd:3b:59:02:ac:
7c:bf:f1:77:fe:a9:9a:67:d8:2b:98:3c:12:67:33:5a:75:12:
0d:ec:26:c7:90:e4:54:4c:f9:b5:56:75:73:e2:aa:5a:55:6a:
ae:be:19:42:30:2a:ce:9d:bf:f6:af:f4:31:70:37:e6:5f:c9:
36:f2:7f:96:9d:d2:1b:5e:23:ea:bb:74:21:63:c5:c9:82:b8:
8c:e6:f3:ca:7c:85:3b:55:36:8a:7d:9d:f5:ef:93:3c:ad:9e:
af:83:00:af:8b:14:b6:8c:4b:04:5b:56:e1:a2:d3:96:7e:61:
17:57:88:04:03:21:0f:d7:3c:d2:65:ad:c4:4e:49:4c:04:ee:
e1:95:17:17:24:b4:d8:12:50:77:1d:4c:85:ba:51:05:4e:39:
fa:07:e5:87:55:71:80:95:eb:05:15:a2:c3:d2:3b:91:e8:53:
f5:76:8f:56:6e:cd:2e:6a:6b:ef:99:5c:59:f2:74:d3:12:b5:
b7:51:0e:d0:3a:93:80:cc:14:fa:5c:d9:a9:49:cc:9f:7e:7c:
7c:22:4b:ca:9a:3f:16:fb:2c:91:47:db:70:dc:e1:cf:ac:95:
79:7e:9d:1a:1b:ba:cc:43:9c:ef:05:e8:ff:84:31:f8:d1:a8:
4f:ee:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:00 2025 by rpki-client