Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: i5a+HCtIQ7Vs8cH/arx+2LsQG58IuAtdnn0cO+WmOG8=
Subject key identifier: 2B:9C:FA:67:4E:68:E8:21:87:91:9A:0B:B0:9C:89:69:B4:6B:FA:84
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 01963EE6C722D61FA79FA291B6A384116EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 14:00:33 +0000
Manifest this update: Wed 16 Apr 2025 14:00:33 +0000
Manifest next update: Thu 17 Apr 2025 14:00:33 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: YvEmn+1fA5XrqzNJpgPaEIYOiRgYzuONStiDnOiCuEs=)
2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:c7:22:d6:1f:a7:9f:a2:91:b6:a3:84:11:6e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Apr 16 14:00:33 2025 GMT
Not After : Apr 17 14:00:33 2025 GMT
Subject: CN=2b9cfa674e68e82187919a0bb09c8969b46bfa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:07:52:00:c4:5e:cf:5c:e4:96:2a:4f:50:
6d:5f:6a:0c:76:2d:fc:f4:f3:10:fd:43:af:f2:0b:
d8:7d:54:6d:10:31:ed:6d:1c:4a:e7:4a:82:da:79:
54:51:a9:3d:a2:70:2c:db:99:ac:cc:cd:bf:71:f1:
55:fd:a7:a3:fa:c7:bd:85:ff:87:a3:28:78:95:8c:
1d:5b:e9:1c:6d:c0:6f:07:a9:1f:0b:4c:b6:5b:fa:
74:26:2e:8b:7f:07:d5:70:94:ce:b6:b6:df:57:4e:
7e:16:9e:4b:ca:b4:71:b8:2b:98:9e:d4:db:56:3e:
23:e6:db:22:d4:08:ad:48:50:05:e8:87:77:96:71:
42:62:c6:80:8b:62:1e:da:b9:3d:27:76:dd:50:0a:
68:6e:f1:ad:6c:1b:d3:85:cf:c3:ac:e9:04:9d:59:
18:a2:79:fb:e3:d0:3b:5e:15:13:f3:41:29:e1:a5:
23:a1:ec:33:6f:7e:93:c0:04:5a:1e:63:98:e7:c1:
b3:cf:41:33:82:fd:79:14:91:5b:40:60:8e:92:25:
bd:7e:c8:f7:bb:70:65:b9:4d:3f:03:2d:1f:4b:ca:
9e:37:1a:c3:56:46:6d:e7:cb:4f:b0:9e:0f:5c:ab:
fe:52:09:a6:2e:a2:43:e9:8a:37:48:30:43:f5:00:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:FA:67:4E:68:E8:21:87:91:9A:0B:B0:9C:89:69:B4:6B:FA:84
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f4:2c:9d:b2:d1:26:0e:b9:a5:db:09:20:26:df:2c:c9:dc:
ad:9d:a5:0f:11:15:b0:bf:16:17:03:c0:71:e8:9a:be:56:28:
57:33:73:04:0a:20:a6:72:bd:88:d7:de:c7:a6:e3:b6:1c:dd:
b9:ec:d2:fb:bc:8f:da:c9:20:34:a6:e4:32:a3:ad:19:ce:19:
de:15:69:02:0b:97:bf:c7:8c:8a:8b:8b:d3:56:83:02:bf:08:
fd:27:6d:fa:20:82:c0:17:6a:1f:9f:a9:39:5a:35:79:af:d9:
cc:5d:21:52:76:66:a3:36:07:f3:01:d8:92:fe:b6:61:36:3d:
5c:56:e3:2f:d9:b0:69:87:e0:43:4c:39:4b:2b:45:f7:cf:cf:
21:40:10:35:58:27:96:b8:77:c0:e4:21:81:e2:15:b3:f2:f2:
4e:de:10:35:0b:13:15:44:22:7a:45:34:2a:e5:f1:78:e5:01:
d5:ec:db:37:20:d1:3c:80:6c:07:7f:85:37:90:5e:da:79:d6:
f1:30:a0:47:86:d4:e7:2a:fe:21:c0:84:97:1c:3a:f4:ed:7a:
20:a8:88:9b:f4:42:3a:21:be:54:26:29:3e:d9:83:67:96:b0:
fd:02:7a:af:06:20:0b:8c:17:5b:1c:98:44:bf:41:75:a1:ad:
f8:fd:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:06:57 2025 by rpki-client