Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: Bgmf4kDT0StsT2DDyrMTzU5A81tICc/LotT3vCQyJcs=
Subject key identifier: 06:98:B5:D8:81:DE:41:C3:8B:8D:98:AD:10:82:C9:F5:2A:DC:94:60
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 019643D6E4CABFC9168B958D525982DCB32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 13:01:18 +0000
Manifest this update: Thu 17 Apr 2025 13:01:18 +0000
Manifest next update: Fri 18 Apr 2025 13:01:18 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: yL+VlFSNVok3nr3jXrJfVtzcCIsCjR8ioiDKFH9Bixg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:e4:ca:bf:c9:16:8b:95:8d:52:59:82:dc:b3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Apr 17 13:01:18 2025 GMT
Not After : Apr 18 13:01:18 2025 GMT
Subject: CN=0698b5d881de41c38b8d98ad1082c9f52adc9460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:2d:bd:8a:19:01:44:df:48:36:17:5e:3b:
b6:37:e4:81:92:9e:8c:ba:af:91:48:2e:23:62:12:
78:ed:18:b2:64:d2:b5:bf:41:75:b9:3e:16:b8:58:
9b:57:ab:db:8e:54:28:18:14:cc:2a:d6:a2:0a:27:
ab:d5:0e:46:79:15:1f:52:e1:66:fb:5a:d3:82:9c:
67:05:88:0e:32:b5:3d:26:13:1e:82:7d:7e:88:ae:
18:50:cc:47:8b:ab:8e:97:47:be:7c:4b:ea:3d:22:
b1:0e:44:c7:cd:07:1c:7e:56:7b:a1:60:23:68:77:
6c:6f:c0:0e:21:2e:6e:a2:e0:f9:1c:e0:80:a9:79:
21:bf:54:6d:74:78:97:04:a4:1e:d6:7f:36:12:3a:
17:25:88:42:d0:14:47:9c:cb:23:8f:a5:6b:ac:84:
b6:68:76:9b:3f:db:ec:82:a2:b6:f3:ca:e2:d9:9c:
83:10:69:7c:3a:01:fe:8a:bb:fd:20:55:b6:2d:34:
17:31:e6:da:58:7e:49:94:75:50:fb:01:5e:11:de:
6d:e9:d3:b6:01:78:d4:c4:02:84:eb:9d:88:04:f6:
78:ff:7d:fb:4d:b3:20:d3:87:e0:94:58:79:d6:42:
fc:31:44:ed:fd:88:28:d8:a8:72:b0:4c:d1:99:c0:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:98:B5:D8:81:DE:41:C3:8B:8D:98:AD:10:82:C9:F5:2A:DC:94:60
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:5c:eb:1b:f2:67:b0:4e:f7:d6:66:6c:d7:59:32:65:ad:7f:
ab:41:f0:b5:4a:76:30:4d:c4:9d:9e:16:8a:66:62:cb:85:c0:
d5:d5:63:79:52:6a:8f:54:99:98:3a:b8:56:be:69:99:f3:45:
c9:2d:c5:20:78:e0:22:87:02:f2:ac:8a:48:48:83:5e:0a:1d:
2b:fb:40:70:df:83:e0:41:1a:60:15:b4:6b:d0:b8:57:37:80:
c5:99:8e:54:d6:d8:96:cb:87:19:9e:fd:a8:94:6c:ca:7f:5d:
77:07:9d:b3:1d:d7:66:fd:15:1a:d1:93:3e:8d:9e:1a:42:8c:
29:61:9b:02:5c:b9:2e:da:c3:33:b7:3d:e3:ca:da:5e:57:bf:
9a:b7:f2:86:f7:6f:c1:9d:65:64:1a:e0:e0:3d:1f:74:3b:38:
94:bb:30:c8:13:2d:e1:13:2b:c8:ae:85:d7:ac:c2:73:8b:d5:
34:ad:a6:e4:1c:a9:27:4c:71:af:23:a3:23:f0:a0:09:80:6a:
88:d3:cb:01:da:e7:11:19:88:bc:99:85:4b:c5:61:0d:3a:c0:
5e:a0:48:ae:ea:b9:8c:ab:aa:f2:9d:d8:3e:4e:3a:10:a6:95:
0c:d7:79:05:39:9b:c0:e4:d1:be:86:5a:7d:70:95:06:08:e7:
91:2e:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:36 2025 by rpki-client