Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: /RFeyHDYKDmqXlmyAQAQ0uiXeLquiXfhVrDtSi1ZWrE=
Subject key identifier: 0D:74:B2:5D:DE:B6:D9:AC:CD:FD:BA:3F:C7:97:25:C6:4A:DB:08:62
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 0196515B54603AC5DF89DCA68A6DB0D14AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 04:01:01 +0000
Manifest this update: Sun 20 Apr 2025 04:01:01 +0000
Manifest next update: Mon 21 Apr 2025 04:01:01 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: kWFJTxhhQikqSR9iyRq/zl0wIXEgcnpcJHw0N3y5SIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:54:60:3a:c5:df:89:dc:a6:8a:6d:b0:d1:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Apr 20 04:01:01 2025 GMT
Not After : Apr 21 04:01:01 2025 GMT
Subject: CN=0d74b25ddeb6d9accdfdba3fc79725c64adb0862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:ca:7f:f6:9f:02:ce:eb:66:54:46:a6:f8:
2b:2c:f7:3e:c0:fa:4a:2d:c8:94:9d:36:94:3f:ba:
75:cd:ea:3a:59:e6:f5:da:b2:9e:79:d0:2f:54:08:
a8:68:59:7f:68:df:86:60:19:23:2c:9a:31:0b:ba:
2e:e4:91:f2:b5:b9:8b:24:d8:7a:2b:bf:90:1a:ff:
d0:89:c8:fd:09:59:b7:6a:33:3f:02:da:dd:f2:76:
b2:01:80:c7:91:71:8d:f6:5b:9a:13:38:5b:75:0b:
b8:69:f1:81:06:4e:62:33:1a:89:f6:48:c4:73:b5:
b9:c0:42:f1:22:55:fb:53:7b:0f:23:f9:66:03:05:
d4:79:fc:e1:a4:aa:44:be:4e:f2:5e:88:56:54:e8:
75:71:ae:1a:19:38:3a:d5:90:58:28:71:48:8c:38:
fd:0c:c1:1e:56:7a:2c:9d:2b:66:1c:1b:de:43:4e:
8d:29:9f:93:73:cb:c4:11:b3:7d:82:f0:5f:8f:e1:
7c:29:55:53:5f:11:99:5a:6d:af:b1:1c:bf:3e:21:
88:f7:1b:40:e7:52:fd:ba:91:44:19:7d:02:76:9d:
2a:84:a8:a9:7d:18:db:1a:fe:2e:64:ee:85:75:62:
0c:a1:ea:f4:2f:8f:2d:f0:56:51:b5:31:8e:9d:33:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:B2:5D:DE:B6:D9:AC:CD:FD:BA:3F:C7:97:25:C6:4A:DB:08:62
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d0:d3:ee:61:2d:e1:4d:35:09:1b:8f:f5:e5:87:5c:a1:4b:
7d:93:b9:70:26:5b:de:b5:c5:a4:a9:9c:c4:b7:4c:a6:99:28:
43:5d:7a:ce:be:15:e5:0f:bf:b7:13:10:11:6d:a1:ab:98:4b:
53:b5:c6:7d:53:86:c7:dd:f9:42:30:fd:a7:cb:d7:d5:95:d0:
89:b2:bc:3e:66:d3:96:95:f6:06:06:fb:84:47:e7:e6:38:7d:
c9:96:89:d9:35:e2:fd:2b:81:0a:77:a7:f2:72:16:7a:b7:6c:
f6:0a:26:0e:c7:89:e5:9b:1f:5a:be:0a:fa:13:ad:d6:33:9d:
d5:13:d5:cc:e6:23:c8:60:9f:74:f0:64:8e:83:aa:94:ba:63:
13:eb:47:d1:12:72:fc:69:93:a0:5f:1c:db:0d:80:6f:82:52:
38:fb:7b:06:0b:a8:52:85:9f:e3:88:42:5e:a3:ac:f4:23:6c:
91:77:83:fa:0d:10:72:2d:66:81:4f:13:4a:ae:f5:10:10:cc:
74:8b:6e:8d:ff:ca:f3:ab:ec:ea:31:b2:e9:1e:58:a4:cb:ad:
8d:aa:44:26:d4:36:36:1d:ab:69:91:a9:4c:1e:ca:0d:c9:ff:
bd:79:a9:24:60:cb:cf:5f:e9:24:ae:ed:b4:02:b6:24:9c:fc:
a5:25:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:26 2025 by rpki-client