Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: zjBZH0uMaoC6iUav/SEARRJyrGqUVg712RxFkNsbcbs=
Subject key identifier: 53:82:2D:55:41:42:66:EB:DE:06:11:E7:EC:D1:B2:BF:F7:32:F1:6D
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019650B62FF2F0A3DA3382CFF90E63A935D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 01:00:39 +0000
Manifest this update: Sun 20 Apr 2025 01:00:39 +0000
Manifest next update: Mon 21 Apr 2025 01:00:39 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: 29jrEaJDSrvzlfxfnCOPcKiiEoZ5BWLsjlLfZufwTaY=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:2f:f2:f0:a3:da:33:82:cf:f9:0e:63:a9:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Apr 20 01:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=53822d55414266ebde0611e7ecd1b2bff732f16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:b1:c8:74:1b:83:5e:b3:1a:4c:f2:cd:02:
4b:19:79:3d:fc:d4:0f:3c:86:f8:cb:5d:f3:fc:cd:
61:1d:45:4d:0c:9d:e4:d2:f9:e4:52:f8:15:5a:0a:
7f:3c:1f:d9:3b:1c:30:e7:82:2d:cb:6f:b3:e0:17:
3d:03:7c:60:39:06:a0:24:b1:1d:65:13:4c:c7:a8:
81:8d:28:3e:11:54:f3:1b:f2:34:f2:64:2b:b9:b9:
89:a0:e9:85:cb:18:41:fc:c8:14:45:2d:73:20:34:
5d:4d:2c:f5:39:89:21:ab:2b:e0:4c:05:16:36:80:
62:2d:a1:0c:43:c1:5a:cf:0c:8e:89:a0:f2:7c:19:
0d:79:d4:dd:48:6f:fa:a6:e6:12:e0:12:a1:64:4e:
3f:d5:01:03:0f:41:26:f4:95:0c:4e:dd:9c:6b:23:
07:c8:c6:73:a4:a6:40:64:c1:1f:87:3e:e7:a2:9a:
4b:fb:a1:bc:bf:b1:e9:f7:b8:bc:18:bd:10:68:19:
ed:b7:12:5d:17:2d:81:c5:f6:b2:e4:14:16:98:ed:
ec:af:2d:fa:d3:2f:a4:2a:19:bf:98:42:cc:ad:ac:
30:f6:0b:b7:08:38:f2:dd:4f:a0:54:4b:cd:f9:78:
7b:e8:d8:ee:25:08:a0:02:8a:51:1c:b2:27:11:85:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:82:2D:55:41:42:66:EB:DE:06:11:E7:EC:D1:B2:BF:F7:32:F1:6D
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:42:78:5f:37:7b:90:c4:04:9c:b2:34:4a:a8:7b:80:94:
97:65:56:1b:23:25:8a:c9:6a:b9:e4:a2:84:5f:b7:36:e9:bd:
04:62:9e:0a:ab:d6:a8:85:1e:0d:52:9d:d2:0f:b5:47:6c:ba:
48:a1:a4:b6:47:53:a9:1d:87:6f:08:ca:d3:98:7c:d7:f3:76:
c0:b8:6f:3c:a5:2a:fd:6c:27:0b:a1:50:82:95:bb:a6:36:1d:
3a:e9:83:f7:ca:8b:86:da:7b:8f:d3:4d:48:f9:66:18:e9:1b:
87:a0:8f:38:5d:18:2a:05:62:8e:87:2d:55:08:b8:aa:bf:95:
4a:9e:5e:52:59:c6:55:ae:7e:5a:48:8a:4e:36:b0:51:f2:45:
c3:1e:38:3e:68:98:d5:76:21:fc:3b:69:41:05:15:9d:e4:ad:
41:af:2d:bc:a6:67:a6:aa:0d:cc:9a:1c:a0:eb:1d:bb:fc:fd:
be:41:92:3d:67:3a:73:34:7e:33:99:69:21:ee:67:71:8a:ed:
4f:05:e0:5b:ad:58:9f:7f:30:52:38:bf:29:f5:c1:3e:1e:52:
b3:fb:2e:ff:60:01:9d:96:be:eb:e8:65:19:42:fe:b8:2d:30:
ba:d7:bc:c6:59:2e:e7:27:cf:46:c7:d8:ec:85:6a:24:2a:23:
b5:19:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:06:09 2025 by rpki-client