Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: ydstKpHv7+WCh8TLUauS2b1D/N+3nZvcdfHaTMM0cNs=
Subject key identifier: 7C:CB:43:2F:54:B9:60:B2:15:B4:CE:51:42:C6:D2:1E:DE:68:E1:1D
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01960D563B5F63458D59D35703C6088F5680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 14DD
Signing time: Sun 06 Apr 2025 23:01:17 +0000
Manifest this update: Sun 06 Apr 2025 23:01:17 +0000
Manifest next update: Mon 07 Apr 2025 23:01:17 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: uvZtXYMUES7twXD0OME0HIw2E3M2sUxIHLs9p6/MReU=)
2: _kWvdqNfB5Qi_pth9OeMu1E5uoI.roa (hash: NWHqYOJDwR6XeYKKHls7B7q+f2asHmCl+FEc/+iucHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:56:3b:5f:63:45:8d:59:d3:57:03:c6:08:8f:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Apr 6 23:01:17 2025 GMT
Not After : Apr 7 23:01:17 2025 GMT
Subject: CN=7ccb432f54b960b215b4ce5142c6d21ede68e11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:fd:d4:90:c3:04:7a:6f:d7:f5:dd:d7:24:
0e:c2:70:09:7e:89:87:d7:b9:76:2b:48:f3:82:fe:
60:73:04:7b:c4:19:47:6f:fb:dc:6f:c2:62:bb:84:
9d:44:d6:c7:81:83:db:71:07:c0:6c:d1:5c:c8:be:
19:94:02:51:69:42:80:f5:fe:9e:dd:c0:bc:37:e5:
5c:75:05:3d:bd:7b:26:78:ca:36:dd:d6:50:6a:b8:
b8:63:ae:20:0c:89:93:6c:89:d4:35:81:ed:0d:39:
6c:34:5f:7e:77:bf:9e:bd:7c:fe:33:2b:37:71:35:
44:25:42:8f:55:1c:93:1c:70:82:7b:de:1f:63:85:
83:b2:df:b5:1e:e5:32:dd:2c:51:ab:4c:51:34:52:
15:51:93:2d:ca:5f:26:68:27:26:c7:e8:2a:26:59:
d0:5e:49:60:9b:58:2b:f5:1e:4b:67:a4:5f:56:d2:
9f:f2:da:37:7b:48:59:5f:73:4f:f8:e1:18:77:56:
a3:a8:9c:1c:09:54:1d:02:9e:5f:2a:80:0e:bc:9d:
9a:2e:1b:4c:8b:1e:11:45:dc:a7:fd:b5:d7:21:4a:
cd:67:54:ea:85:0a:e9:c4:f4:2d:73:fd:d7:52:b5:
0e:7f:9c:81:cc:a4:af:c6:1b:ef:8c:d6:ab:7a:97:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:43:2F:54:B9:60:B2:15:B4:CE:51:42:C6:D2:1E:DE:68:E1:1D
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:69:fd:41:bf:27:1e:3b:aa:98:49:b9:5c:9f:7e:b5:64:
9c:fe:03:3f:a7:4d:2a:14:6a:b1:85:01:7f:a0:4b:1a:34:18:
eb:84:ef:48:d5:b3:a1:17:64:25:0e:4b:25:a1:f3:50:d3:f0:
e4:08:5f:8b:69:66:30:42:17:b1:a9:c8:1e:62:de:b4:93:c4:
7a:d2:79:cf:bd:77:4e:db:f3:6c:9c:ef:d1:0d:82:cc:a4:2f:
b6:7e:d3:30:12:f7:32:e3:1f:c5:ad:0b:d3:49:55:60:00:df:
4b:38:b8:52:49:86:7f:fe:d0:22:d7:41:d6:49:04:a4:5f:e9:
25:46:16:63:31:fe:e3:51:0c:26:8a:bb:8b:28:76:0b:30:97:
a5:2c:9d:8f:50:f3:68:58:c5:a2:a7:6f:18:40:92:25:b0:57:
f3:40:42:4b:c3:3b:4d:eb:c9:6f:fd:d5:00:e8:05:3d:df:31:
e8:9f:8b:e9:f3:93:ae:e0:bc:1e:f9:f0:c0:17:ab:b4:62:2a:
33:43:2a:ab:be:cd:14:70:b9:70:78:7e:f5:ac:40:14:76:b3:
0c:af:d4:ce:e3:8c:42:fb:80:74:6e:6e:67:98:87:d5:db:05:
22:bf:e9:2f:b5:09:00:e9:15:6f:fe:3a:da:e8:34:7b:f5:b2:
64:f7:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:28 2025 by rpki-client