Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: ll7kCIVmzeUGPnT5p+PxVIneUnPpMvLwsHxxxAgxnFc=
Subject key identifier: 07:BE:59:EA:F0:05:4D:05:13:05:FA:72:85:1E:82:5F:10:46:AA:09
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 0196591478CDE1E8BEF4060083CFB63DC8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 1119
Signing time: Mon 21 Apr 2025 16:00:35 +0000
Manifest this update: Mon 21 Apr 2025 16:00:35 +0000
Manifest next update: Tue 22 Apr 2025 16:00:35 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: iT2/fC01DM+1blUz6Aij7nhEANdhZrs0i5YVxHOYCA0=)
2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:78:cd:e1:e8:be:f4:06:00:83:cf:b6:3d:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Apr 21 16:00:35 2025 GMT
Not After : Apr 22 16:00:35 2025 GMT
Subject: CN=07be59eaf0054d051305fa72851e825f1046aa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:80:33:13:c7:a8:e1:b0:ea:96:dc:59:57:
13:66:4d:89:c2:4a:40:05:35:56:67:39:cc:9e:0e:
01:9a:e4:e7:62:5a:19:8f:83:b2:e9:3c:c9:46:b6:
68:26:85:8f:08:ea:16:c2:52:16:58:ae:9f:34:f1:
02:cf:2f:99:9d:ae:43:a8:e5:57:1f:e4:00:59:e6:
07:d8:85:b0:57:0a:e2:e6:42:e6:ca:50:39:1c:f3:
c1:1a:29:54:f9:fb:63:8f:bf:f3:27:cd:7c:a9:c7:
46:5f:b1:be:4d:7f:8b:bc:93:99:ec:29:05:72:8c:
80:97:54:09:55:11:6c:6b:58:1c:0e:e5:31:d6:de:
08:5a:17:fd:7d:4b:1a:6c:35:5f:44:4c:49:c8:3b:
28:05:d2:88:29:07:19:b0:5d:b3:4f:06:35:f5:a7:
5d:27:0b:fe:ae:3d:21:a6:ec:30:03:74:cc:5f:5a:
e0:02:13:c0:37:28:6f:28:e3:93:6b:7c:75:8d:71:
b7:f7:89:16:65:20:36:43:9c:1b:e3:91:13:a1:db:
6c:d2:57:84:78:5b:6b:01:8d:22:46:6a:7f:ac:f1:
87:f4:27:d0:24:7f:3f:88:12:22:30:ed:fc:29:b8:
e8:d3:6c:a0:95:18:32:0e:a2:ba:b8:e9:20:87:ad:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BE:59:EA:F0:05:4D:05:13:05:FA:72:85:1E:82:5F:10:46:AA:09
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:02:92:7a:81:b1:d4:d1:a7:0a:56:97:e3:74:7d:b6:fa:88:
bc:4e:e2:d7:b5:fa:34:67:f1:90:df:dc:15:44:a7:61:c1:d7:
4e:af:fc:fd:cd:91:30:71:a6:c4:7a:5c:65:b7:10:df:1d:a5:
37:9a:03:3f:c8:dc:1f:2d:8d:b8:6f:9d:19:da:1d:37:6d:6a:
07:66:3a:ff:3b:61:89:ca:ab:8f:f7:bb:7a:81:49:6f:62:a8:
61:09:1d:24:1f:1d:19:b5:3c:bc:42:73:32:15:d4:39:b3:5f:
05:58:de:82:b6:9f:1c:6e:bc:7d:42:4d:94:a1:14:a8:45:5c:
2b:3d:70:23:91:90:b7:67:73:c9:de:1d:da:f0:88:c3:36:e9:
52:db:0a:21:47:c7:81:bc:08:97:0d:35:13:ba:83:ab:8c:ff:
f7:df:d4:a9:c8:e6:03:50:93:b8:4b:2d:71:5f:ce:11:16:b4:
67:85:33:cb:d1:0a:01:6e:fd:c5:63:3a:5f:81:5a:2d:3c:76:
40:83:2e:99:27:e4:8a:9f:d5:8b:66:b7:f1:4f:72:08:b2:e1:
54:89:39:61:01:14:85:25:8a:2f:3c:92:6a:f5:2c:7c:74:91:
66:d0:c9:4c:3b:b5:71:cb:55:20:2f:6e:5a:fa:29:0d:28:fe:
e9:24:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:22 2025 by rpki-client