Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File: 1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier: a3lHwphTsmOOhNQa7eeZRZ6mA/T0Yagj2kcMUGkOajk=
Subject key identifier: 54:C6:CC:B3:C7:44:9A:15:81:56:4B:1B:5E:CD:7E:78:21:18:EB:00
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer: /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial: 0196120E919F3F5A0A719BC5DCDDA2AFF12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number: 0FEF
Signing time: Mon 07 Apr 2025 21:01:06 +0000
Manifest this update: Mon 07 Apr 2025 21:01:06 +0000
Manifest next update: Tue 08 Apr 2025 21:01:06 +0000
Files and hashes: 1: 1lITG_UqnfavYQ_xoQlV3wFv38U.roa (hash: EEjmi7deVkOh9RZ1Yb2ahklKAUhFdcMk/pd79vay4U0=)
2: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: WyMuoclSylQNb1savfN2I+xII6lTks0VUxcW4KW9Oo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:91:9f:3f:5a:0a:71:9b:c5:dc:dd:a2:af:f1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
Validity
Not Before: Apr 7 21:01:06 2025 GMT
Not After : Apr 8 21:01:06 2025 GMT
Subject: CN=54c6ccb3c7449a1581564b1b5ecd7e782118eb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a6:a6:77:24:ec:f4:90:f4:b5:29:b4:0c:b6:
23:3e:e8:bb:7a:bf:05:94:6d:a7:0a:e9:11:80:fc:
55:13:94:1b:5c:54:50:0d:69:c8:26:ae:94:2c:c1:
65:10:9d:04:0f:b7:15:aa:f1:e1:a4:92:c0:4f:58:
5f:f5:8c:65:fc:c7:b0:3f:e0:ec:ba:f9:c3:0b:85:
96:80:e6:a2:7a:18:78:c6:b4:11:0c:1b:17:cd:3a:
b9:53:d5:0a:ca:a3:53:40:21:83:76:6f:b7:1d:d8:
a7:43:8e:6a:a4:17:1e:17:80:06:9a:b8:27:a0:75:
46:1d:b0:e2:2a:85:0f:35:5d:15:dd:9f:3f:d9:5c:
d9:8a:84:cd:8b:71:23:df:1b:1a:de:b2:7d:9a:1d:
05:a8:37:e0:5b:2f:4c:a5:04:32:d8:b8:e2:4f:a9:
b9:6c:60:b9:cc:a7:2d:7e:13:1f:85:fb:c5:7c:91:
f2:00:17:15:e2:0e:6b:76:88:b8:80:2a:10:b4:4b:
0f:a3:d8:7b:45:97:0c:fd:d0:42:c3:bb:39:9f:d8:
cd:ae:97:ef:e7:27:1c:0c:47:f0:9a:a6:89:96:f9:
c0:b7:ad:81:11:c8:e1:73:3f:1b:f9:a6:ba:48:71:
47:3d:d6:f3:6a:38:9f:a4:79:84:34:30:90:51:94:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C6:CC:B3:C7:44:9A:15:81:56:4B:1B:5E:CD:7E:78:21:18:EB:00
X509v3 Authority Key Identifier:
keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:f3:3e:00:a9:cf:af:5c:53:bf:1d:48:a9:1a:ef:96:63:
2c:c2:3e:43:17:98:4b:b2:b1:ee:68:8f:d7:9d:a5:11:92:37:
20:d4:c4:1a:c6:8b:f1:3a:2f:13:e7:12:6d:0f:21:d2:95:41:
42:78:58:bd:9e:13:29:47:cf:6b:23:c7:27:1c:88:45:43:21:
c6:8f:45:fc:ca:a8:86:d9:f8:ae:1e:6c:91:13:8c:fd:b5:1a:
db:3f:bf:82:00:60:0e:e2:b2:da:53:82:48:4b:aa:fb:8c:43:
6d:5c:a0:28:15:d8:8c:af:77:e0:12:b4:7d:6c:37:d5:7b:e1:
1c:ed:cb:73:25:27:b2:53:43:ce:32:59:c5:27:4d:61:44:44:
38:01:f9:c5:71:a6:c4:6d:df:9d:0c:34:76:32:e0:a2:77:ee:
9a:df:f6:60:08:1e:21:14:a6:67:ce:e0:ed:89:cb:c8:9e:f9:
1b:78:99:f8:fd:75:60:46:d5:68:89:23:b7:e1:f8:47:0a:37:
01:a0:ae:92:d2:b5:19:c9:db:55:21:f6:12:b7:7a:de:61:74:
9d:38:30:7b:ad:85:9c:05:dd:b5:32:60:4f:05:61:a6:16:a5:
cf:0b:10:16:1d:e9:35:5a:d9:8e:4d:74:bc:b0:4f:78:f6:2c:
82:90:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:34 2025 by rpki-client