Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: 9fnQgmg0Rj6QqrK0dn85SjAWA0A+vq2XK8sTzv5j/oI=
Subject key identifier: 43:D9:F2:99:58:B9:85:28:52:9F:02:19:08:70:E9:0F:FE:B9:AE:53
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 01964D47057835C5F6D7439150549B023F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 0AC4
Signing time: Sat 19 Apr 2025 09:00:22 +0000
Manifest this update: Sat 19 Apr 2025 09:00:22 +0000
Manifest next update: Sun 20 Apr 2025 09:00:22 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: 3nHM4tRqHT44bXVuoxWKVgFyQUr6orcKciYJttf+O34=)
2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:05:78:35:c5:f6:d7:43:91:50:54:9b:02:3f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Apr 19 09:00:22 2025 GMT
Not After : Apr 20 09:00:22 2025 GMT
Subject: CN=43d9f29958b98528529f02190870e90ffeb9ae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:61:7b:f5:fb:20:19:3d:07:51:c1:2d:aa:
9d:f1:fd:9c:fc:71:2b:32:39:8b:24:9d:b8:7f:8f:
c5:de:d0:31:0e:56:80:a7:2e:f1:94:0c:18:da:1c:
a8:3c:f1:7e:f9:74:44:8a:70:1d:6d:e4:20:0f:d6:
57:6b:3d:0a:08:fc:b3:c3:55:6d:a3:bf:be:4d:b0:
97:fa:6b:a9:fb:19:40:c6:14:28:68:b0:94:3b:08:
21:a9:10:9a:8d:22:61:77:22:03:71:da:46:77:64:
94:dd:2f:6e:9d:db:85:65:d7:a0:bf:16:75:dc:9d:
19:6e:7e:d3:e3:38:fe:8d:ea:57:67:a4:e9:e5:37:
2e:f1:ee:97:03:31:76:a2:0f:89:ed:bd:51:dc:94:
07:ad:cc:e7:b4:15:5a:65:ed:0d:f4:14:48:27:3a:
c0:a7:96:07:c5:78:a0:15:29:b7:4d:42:2c:fa:97:
96:96:d8:8c:59:1b:2c:15:38:b0:57:8c:86:7d:c2:
75:ac:8f:f5:de:35:a5:ae:af:83:ec:72:9f:1a:44:
8f:a3:bf:b5:15:e4:fb:8b:b3:8e:33:a4:e1:0e:fc:
36:e7:d0:16:0e:11:38:fe:cf:fd:4b:f3:91:15:96:
f2:2f:f7:06:36:8a:20:2b:f0:94:67:53:1f:c1:a7:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:F2:99:58:B9:85:28:52:9F:02:19:08:70:E9:0F:FE:B9:AE:53
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:df:2d:28:89:ab:89:6f:33:d8:46:33:d2:bf:12:e8:86:
d6:69:06:dd:57:34:20:40:a1:ea:4d:e2:31:84:11:7e:ee:4b:
87:31:76:e2:98:25:63:53:13:94:31:f8:32:c2:6c:78:ef:61:
b9:3a:8f:e8:a9:ce:46:7f:a7:72:58:c9:cc:d8:76:48:f7:21:
3d:e0:52:20:32:70:78:b4:a6:6f:79:e9:32:4f:16:6b:2a:4e:
8e:ed:d7:0f:14:f8:8a:77:2f:66:40:44:b0:c7:98:4d:3a:e4:
40:d2:a0:22:c4:5c:19:43:1c:70:a1:f2:1c:f5:d9:6f:68:54:
f8:f3:5c:ce:ef:38:75:32:5f:18:a0:ec:e8:24:69:54:a7:a4:
55:6a:10:91:11:fa:cc:11:f1:8f:bb:f4:5b:79:69:fd:92:c7:
33:32:25:58:c9:62:35:d6:1e:29:9d:74:97:6c:b3:8b:71:03:
72:06:0a:e6:08:9f:bd:a9:bd:93:c9:88:01:10:72:fd:00:f1:
0f:7b:2f:4e:57:ef:44:88:dd:c1:f5:0c:c9:1e:b5:48:f2:50:
dd:32:8d:d2:53:02:69:73:be:ce:4e:34:79:fa:15:80:79:21:
ba:ef:0e:56:a5:96:83:c0:d1:5e:0a:ea:61:3e:3f:90:8f:c4:
15:b8:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:18 2025 by rpki-client