Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: 14UCAxzmXvaWTvZFP9ZDTB4InalV5hBpNoUl2//1kyM=
Subject key identifier: A6:48:C3:24:C0:83:23:52:37:E5:85:33:8A:FF:5E:93:7E:01:74:78
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 019652DB9DEDB87A9BFB7A76068732BEBFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1509
Signing time: Sun 20 Apr 2025 11:00:46 +0000
Manifest this update: Sun 20 Apr 2025 11:00:46 +0000
Manifest next update: Mon 21 Apr 2025 11:00:46 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: HNmE/oOs+d5KVRN4yKmpze2muaKrrUnIYLksJEANdCo=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:9d:ed:b8:7a:9b:fb:7a:76:06:87:32:be:bf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Apr 20 11:00:46 2025 GMT
Not After : Apr 21 11:00:46 2025 GMT
Subject: CN=a648c324c083235237e585338aff5e937e017478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:aa:29:8b:db:f3:2c:a3:e2:2a:76:82:13:
fd:53:15:fa:8a:32:a5:5c:2e:da:a7:23:dd:55:2d:
dc:ce:9b:d0:7d:6b:58:8f:f0:9c:27:de:d6:11:76:
c9:4b:67:54:a8:72:97:81:45:11:70:47:06:13:2a:
37:68:c8:34:df:f2:b6:84:1d:16:22:bc:ca:31:5a:
e3:43:0b:d5:e5:ec:a8:81:e5:b7:c3:bb:e8:f6:5e:
52:0c:ee:22:15:aa:4f:d6:16:fe:79:72:19:9d:a1:
46:e8:29:f9:94:0f:5f:f9:77:4e:db:54:c6:b4:b6:
97:16:98:7a:72:ad:be:18:d5:36:e1:64:b7:59:57:
f0:f0:98:f3:6d:95:5d:e6:ae:d9:80:84:0a:fa:75:
05:eb:55:b2:dc:d1:08:8c:8f:34:a7:80:70:bd:49:
63:f3:9e:01:8a:2e:e1:cc:95:69:1c:3c:f0:7d:75:
74:b9:af:67:28:8f:8f:bd:43:e7:bc:41:4b:36:a9:
15:1e:86:61:38:32:6f:0c:d0:7b:79:54:00:95:9b:
d5:bf:0d:53:95:5c:5a:ce:c7:5a:f1:fc:98:ea:69:
b9:60:9a:0e:09:31:be:49:a2:f6:f6:46:d0:eb:80:
67:e6:62:ba:c0:0e:5a:42:71:3f:b1:40:87:e6:3f:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:48:C3:24:C0:83:23:52:37:E5:85:33:8A:FF:5E:93:7E:01:74:78
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:f1:18:ce:3e:88:ec:61:c6:ea:d9:62:b8:22:4c:8b:dd:
a3:94:0a:84:19:74:ca:de:ac:47:b0:c9:e8:2f:35:17:1e:04:
8f:bf:ca:a5:de:0f:8d:8f:4d:91:c0:9b:2b:8e:53:c1:87:9f:
a5:cc:bc:6c:cd:d2:44:8d:a0:e6:db:a9:b2:94:fe:e4:a5:1c:
05:3d:df:cd:77:37:89:ea:33:5a:8a:3e:c1:d7:54:d6:74:96:
97:9b:64:68:a2:b0:bb:48:bb:78:21:3e:c2:fd:30:3c:01:7b:
42:48:1c:64:bc:84:c5:cf:a7:07:d4:e4:05:3a:5c:1d:b0:6b:
de:2d:fd:24:8d:8e:e0:f6:98:69:5f:40:39:66:a2:9e:48:02:
37:06:3a:ba:f9:9d:0f:8c:54:98:22:2b:04:73:b6:e9:84:35:
24:11:0f:76:0e:d5:8c:11:f9:64:69:82:93:b3:a1:97:69:69:
a0:ed:25:3f:1a:db:5d:b2:ad:92:d1:d0:30:99:47:e6:07:6d:
39:45:f6:54:5e:16:38:2a:1f:37:11:ba:1b:f6:7d:bc:ca:2b:
09:ed:24:67:e4:4b:a7:c7:6b:43:bb:e4:b3:66:d0:6c:3e:b6:
5f:88:fc:c7:af:e4:1b:c4:ec:7e:60:ae:64:c7:e3:55:7d:dd:
33:31:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:11 2025 by rpki-client