Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: D8rGBZIKMtNKy4ES5DxlcN+tKRMGGJdg6uPy0+9Li/M=
Subject key identifier: AE:31:53:95:14:38:E5:A8:43:C9:10:B4:1A:31:FB:D9:28:7D:C5:FF
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 0196439F8CCD96BD3BBE32D6A90A7C221989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 0837
Signing time: Thu 17 Apr 2025 12:00:51 +0000
Manifest this update: Thu 17 Apr 2025 12:00:51 +0000
Manifest next update: Fri 18 Apr 2025 12:00:51 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: R8k3YOExTcKdUhQnA3n24+qdMiEoIZ7qkT7GfwBdDB8=)
2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:8c:cd:96:bd:3b:be:32:d6:a9:0a:7c:22:19:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Apr 17 12:00:51 2025 GMT
Not After : Apr 18 12:00:51 2025 GMT
Subject: CN=ae3153951438e5a843c910b41a31fbd9287dc5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:76:e4:f0:ac:d6:7a:58:45:8f:82:f6:28:
db:ea:ee:23:b2:45:52:f8:68:c4:9e:37:52:57:8a:
fe:bc:38:16:2c:8d:34:22:85:30:28:77:c1:a2:8f:
4e:12:31:a1:1f:9e:6c:ee:cb:30:c2:27:9a:d0:74:
e8:7a:e2:44:67:fd:9c:09:42:80:2c:ea:d8:9d:0f:
dc:e3:f9:54:87:11:6c:a0:16:2d:8f:f8:f1:b4:17:
e0:83:c1:13:eb:ad:10:00:46:ce:c0:53:cf:8f:03:
04:58:ae:6c:ec:fc:4c:2d:16:21:35:2b:c4:59:64:
f9:9f:0e:41:a9:86:51:b6:94:48:53:24:d3:3e:05:
88:ff:82:12:2b:cb:af:9c:da:5f:60:1b:16:4c:98:
1c:f9:c2:08:57:87:67:2a:fb:23:ba:5b:59:cb:20:
dc:bc:18:af:4b:46:2d:64:fa:a3:17:3a:81:7c:69:
e5:fa:7b:82:8f:7d:83:9c:3c:37:07:76:ba:6e:cf:
76:76:fc:21:58:b6:fc:1d:79:1d:ea:7d:b0:ca:1a:
a8:c5:41:65:d4:69:53:8a:9a:c4:31:33:5d:46:fa:
a8:b6:09:dd:4e:a5:1e:f9:37:ae:c8:5b:0d:e2:3c:
6e:fc:53:c9:49:a8:cb:6c:46:15:61:ba:19:ac:fa:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:31:53:95:14:38:E5:A8:43:C9:10:B4:1A:31:FB:D9:28:7D:C5:FF
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:b5:1d:96:24:10:2c:6d:71:81:e7:f5:e2:8a:27:01:65:
d7:b9:88:12:d1:05:73:cc:53:d4:3f:89:57:4f:cc:fe:b5:11:
7c:11:01:9d:d5:0b:fa:6c:5c:d5:6b:58:3f:13:e4:95:fd:c6:
de:0b:d3:57:45:2f:63:9c:d3:e6:26:9c:2c:cb:6c:8e:4b:3b:
1e:7f:ec:9b:90:01:80:52:59:35:35:4f:3a:f5:f7:06:b3:a0:
81:94:fa:c8:3c:4f:5f:2f:22:df:4e:19:dd:d9:81:e4:71:17:
6e:a6:4c:f4:0c:f4:70:f3:5a:af:0e:db:55:17:71:24:0b:9b:
74:b0:40:22:da:51:48:9b:a3:7f:2c:91:32:5d:a6:6c:05:35:
60:b6:54:74:5f:e4:82:5c:a1:5b:2f:fc:65:95:41:01:8a:92:
06:26:b2:e9:c3:ae:4e:f8:d8:da:81:95:2b:38:ba:93:c6:cd:
35:72:d3:76:19:fa:73:c6:2e:fc:e3:7f:90:7d:fc:10:c2:62:
2c:be:de:eb:64:57:60:1d:4c:77:47:02:cd:a4:61:6a:f2:78:
ab:88:83:97:ec:57:cd:27:be:ca:8d:93:85:19:44:1b:f5:b7:
5b:13:83:d8:2d:b0:38:78:25:21:d0:12:95:10:1c:dd:e5:27:
16:d2:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:23 2025 by rpki-client