Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: ZaerS6HRA4097HrK17R5bwSxcp2uDlvulh0orgLDHqA=
Subject key identifier: 1C:C2:AC:3F:6A:18:C4:AF:1D:D2:EF:73:FC:CE:5B:21:98:BA:B6:B3
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 019609E873F17689C3DE6C467862A9A28557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 14E9
Signing time: Sun 06 Apr 2025 07:02:31 +0000
Manifest this update: Sun 06 Apr 2025 07:02:31 +0000
Manifest next update: Mon 07 Apr 2025 07:02:31 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: XJLEcCD6vlHUA52r2uJWPzwoeBl5HKJxOSNEvF9j3jE=)
2: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
3: tLS4xU-vtXZpX37sjW7SyqQqQ0M.roa (hash: Eq8qKDr4X5oijarNEC8B7aqyt4IhqQ1MlTcTqvRwOtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:e8:73:f1:76:89:c3:de:6c:46:78:62:a9:a2:85:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Apr 6 07:02:31 2025 GMT
Not After : Apr 7 07:02:31 2025 GMT
Subject: CN=1cc2ac3f6a18c4af1dd2ef73fcce5b2198bab6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:5c:f3:d4:40:fb:0e:2b:05:4e:7a:79:c7:
80:49:c2:44:18:f5:f4:53:7e:fc:fa:79:e8:a5:bf:
90:71:96:f2:36:43:ec:06:76:e7:b6:21:e3:36:02:
de:45:1c:0a:94:c0:64:61:24:d1:60:39:20:69:5a:
8a:bf:21:b1:5d:a5:70:63:26:b4:74:9c:4f:b1:60:
bb:85:a9:bc:8b:a3:47:9e:bc:af:07:82:43:e6:a4:
32:b0:c4:00:71:ad:e0:26:28:05:d9:85:b8:2b:cc:
35:02:61:99:70:2e:07:a0:96:ab:1c:ae:5a:1f:b5:
21:36:40:ea:fc:4c:7f:94:4b:97:bb:c1:a3:01:cd:
a9:51:90:34:7b:db:d4:6c:c4:f2:0c:20:fe:8a:d2:
ff:5a:13:6e:78:fa:34:c1:42:d6:50:93:0e:89:48:
59:f1:ab:92:e2:88:5c:f4:a3:1b:e9:cd:38:6e:9a:
06:8e:97:a7:f0:b1:a0:ad:5d:d5:88:51:6a:82:27:
a8:1c:30:5a:7f:1a:ac:82:7d:8a:42:7d:ca:25:50:
80:67:38:db:61:31:fc:7d:b0:28:6b:bc:e4:08:1a:
49:57:b6:7f:65:d8:c3:1a:c3:a1:57:40:49:2b:56:
3e:f0:61:01:b7:d3:0f:d6:d1:f0:9e:70:3e:25:0e:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C2:AC:3F:6A:18:C4:AF:1D:D2:EF:73:FC:CE:5B:21:98:BA:B6:B3
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:53:f8:ab:2f:c0:c3:cb:38:84:1e:5e:1c:5a:2b:4f:a4:
fd:ef:04:cf:ae:86:76:b5:7e:b9:bc:0d:4b:47:e3:ca:e3:33:
1d:15:c1:c1:e0:2e:1e:bc:60:4a:d0:54:3b:78:d8:32:cb:9a:
c8:c3:7a:02:36:5e:b2:a3:e9:52:32:4c:b0:d5:c6:00:73:30:
8d:f3:35:33:54:96:8d:4d:16:96:7d:c8:ad:5a:d2:74:f7:a2:
e2:72:11:ba:66:a4:db:eb:13:68:7a:4b:3b:61:e4:fb:75:67:
44:6f:17:cd:b8:78:a2:29:c9:9e:07:50:b7:0d:83:63:a8:58:
d5:24:85:35:95:7b:bc:68:6b:0c:6e:5a:a0:9e:c2:85:77:43:
5c:30:a4:6c:ed:1d:eb:e8:ad:4a:17:fe:cd:16:af:a5:e9:74:
8b:87:8d:95:3a:d1:92:1b:b7:6f:3b:60:a6:a0:91:34:d0:a8:
5a:52:d4:4b:be:2b:79:55:8c:df:8f:e8:3a:7d:b7:53:7a:a1:
05:9a:19:44:31:cf:b9:f3:8e:d8:ad:60:20:a8:0c:8e:97:f0:
13:b2:d2:70:26:f3:23:e1:bb:c4:c0:c0:ed:25:86:07:19:5e:
e1:f0:1f:31:fc:19:51:62:96:92:0c:c3:b7:87:07:af:26:3c:
32:9d:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:05:06 2025 by rpki-client