Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: tgAQquAZdOYI6VLKfc6BNy7Hr9tgUXQ4HZG5soLVJLc=
Subject key identifier: D9:84:F2:40:1D:25:AC:E0:18:75:F5:E0:9A:B4:CD:45:6D:F4:91:7C
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 01964DB50004442E5AECDCDAE3375D7FD03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 055F
Signing time: Sat 19 Apr 2025 11:00:29 +0000
Manifest this update: Sat 19 Apr 2025 11:00:29 +0000
Manifest next update: Sun 20 Apr 2025 11:00:29 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: 7yQ+1KhEdRN8bTLt2PEap+s65dCDyAF7aLHa6a17gYo=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:00:04:44:2e:5a:ec:dc:da:e3:37:5d:7f:d0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Apr 19 11:00:29 2025 GMT
Not After : Apr 20 11:00:29 2025 GMT
Subject: CN=d984f2401d25ace01875f5e09ab4cd456df4917c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:dd:48:90:07:dc:b4:3f:ac:01:44:19:81:
e8:55:17:e8:ce:db:0b:95:87:b6:59:8a:74:52:96:
78:44:82:35:65:28:2d:04:d7:49:6c:10:58:21:1f:
c9:04:2d:8d:64:50:ee:c9:89:8c:fe:9e:96:a9:9e:
1f:b0:3c:e5:7d:84:05:b6:ea:c4:46:77:e9:ed:de:
cd:a1:8e:1c:a0:08:07:25:56:78:89:bd:5d:32:7e:
76:18:1e:5a:f2:fe:ad:05:13:90:6b:bc:bc:01:d6:
f8:f3:a9:9c:d3:d5:72:c4:4b:3f:18:21:fc:b6:69:
74:a5:f7:64:7c:98:41:01:b6:b7:fb:d5:13:f2:75:
65:a2:22:76:56:10:50:58:97:a3:d3:b5:cc:44:3c:
53:d5:6e:1a:af:2e:73:9a:19:67:2f:da:c8:6a:ce:
0e:0d:4d:f0:78:ae:1a:53:46:a5:91:32:4a:9b:3c:
45:a7:9d:f8:5b:a5:42:79:37:c7:3c:71:dd:1b:66:
17:86:cc:36:20:3d:ae:77:91:2b:48:e6:a9:6d:b0:
29:14:b7:8b:4c:3d:86:f9:80:1c:27:43:f7:6b:67:
3a:80:0f:21:69:a1:2f:e9:7b:6e:65:21:11:6b:96:
bf:e1:64:32:bd:dc:e5:25:87:89:38:b2:aa:65:ae:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:F2:40:1D:25:AC:E0:18:75:F5:E0:9A:B4:CD:45:6D:F4:91:7C
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5e:08:c2:f4:a4:37:b3:0a:05:8e:22:f1:fb:23:51:90:6b:
b1:bf:91:7d:f9:5a:c4:35:56:c9:d6:f4:2f:e2:fb:fa:82:5b:
86:c9:3f:dd:6b:d0:a0:c8:4f:2b:cc:e1:b1:27:dd:08:be:3e:
a1:2a:c7:31:f0:3f:fa:d6:56:9f:60:10:25:26:0d:97:3e:33:
6b:3a:68:a8:dd:9b:a9:11:26:f4:6e:d1:42:8a:70:de:28:9e:
c2:8e:12:c9:14:39:1f:ef:84:3f:b6:aa:28:9e:d2:57:f1:fb:
51:b4:62:34:a7:dd:77:78:43:88:6d:88:f5:f3:80:ec:fb:66:
19:f3:ea:7a:9b:c1:ae:a1:99:3d:b8:6e:96:e7:bf:d0:6a:d2:
e8:b2:d1:91:a3:ad:c8:09:0e:2d:a2:3f:ee:fb:b6:94:dc:ad:
30:d0:f1:af:fd:46:ea:48:65:2d:3c:ba:15:19:fe:6e:6e:bf:
6c:bd:88:8b:7f:05:00:7d:5c:bb:42:86:65:d2:f2:f2:bb:b1:
81:f0:d6:21:4c:36:03:a2:52:ca:49:4e:5d:45:6d:e3:6b:d3:
11:76:29:e6:68:6e:59:56:db:0c:f1:f3:c8:88:c8:84:ab:a3:
4d:05:62:4e:c5:f7:cc:c0:98:c8:92:d1:f0:fe:49:40:d5:98:
31:b3:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:01 2025 by rpki-client