Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: CXd7BJ0g/jRSuTzbIWXP1lSlEuENpcTrzVeS0iX3OFs=
Subject key identifier: 16:E5:65:EE:60:EC:B4:1B:AF:B7:CE:EF:E3:A5:F0:F2:19:C1:ED:42
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 019654933FDD2D3571936C923A2100220FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 136F
Signing time: Sun 20 Apr 2025 19:00:58 +0000
Manifest this update: Sun 20 Apr 2025 19:00:58 +0000
Manifest next update: Mon 21 Apr 2025 19:00:58 +0000
Files and hashes: 1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: CotHF951GMobRbdcyBhrLNHsc+QAucS+JaJwLEx6bPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:3f:dd:2d:35:71:93:6c:92:3a:21:00:22:0f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Apr 20 19:00:58 2025 GMT
Not After : Apr 21 19:00:58 2025 GMT
Subject: CN=16e565ee60ecb41bafb7ceefe3a5f0f219c1ed42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:d0:a0:c4:b0:41:79:60:3c:56:4e:c7:5c:
44:b4:73:4f:55:e0:24:90:01:bb:6c:ef:58:47:a2:
0b:d9:ef:d4:76:7c:0b:f3:a6:21:b9:2e:92:1a:d8:
77:91:a4:68:b7:83:c8:de:48:aa:46:46:50:e3:c3:
60:71:0b:0c:1e:52:73:bd:04:85:e3:c0:01:ea:5f:
51:cf:68:8f:f7:ed:a0:24:08:0d:02:4f:2e:f9:47:
7e:db:67:57:8e:17:ec:ad:14:0b:b6:d8:cd:ef:42:
6e:e2:5c:f2:cf:58:ee:e7:a2:5e:b6:23:7c:a2:c4:
86:56:18:53:fb:31:c2:d7:56:7c:b1:c7:04:a6:3d:
c7:7d:d0:c3:cf:1b:92:d4:df:6f:ea:70:9f:eb:95:
28:26:62:cd:9f:fb:a7:cd:04:30:9d:25:9c:bb:84:
37:51:31:86:bc:40:53:5e:b3:57:94:ef:97:46:67:
0a:fc:40:8f:9d:0f:93:93:41:35:3e:73:d3:e0:36:
5e:13:56:27:0a:ea:da:bc:df:24:dd:8e:7a:9d:71:
d9:94:e8:d7:44:8f:53:da:91:af:1d:80:2a:89:9a:
d0:dd:8a:18:42:b6:e0:58:ab:3c:03:e7:c9:28:e7:
ca:02:e5:3f:e9:40:b3:a5:c0:05:9b:1a:29:cf:ce:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:65:EE:60:EC:B4:1B:AF:B7:CE:EF:E3:A5:F0:F2:19:C1:ED:42
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:70:44:a3:3a:1a:7a:8c:e4:5f:c9:96:97:14:10:0a:e2:4f:
c9:20:11:84:ea:20:ad:25:61:7b:b3:d1:e2:80:7e:ad:3e:a7:
4d:df:79:88:67:14:8f:da:b2:a3:42:39:e1:6a:f3:aa:0b:bf:
a0:d2:e1:ec:89:51:9a:06:66:d0:50:3c:4b:ed:cc:0e:03:40:
a1:f7:02:0e:91:55:c3:e3:7d:92:6f:54:fa:96:06:22:08:38:
8a:46:9a:3f:e6:13:7d:5e:6e:df:eb:d0:1e:f4:41:c6:49:7d:
c4:d0:ef:c7:07:5c:69:5d:be:8a:7a:00:ce:49:64:e8:70:dd:
e9:a3:2a:41:41:1b:33:ca:b5:ae:79:06:5d:58:d4:6a:8a:92:
bb:51:1b:15:b9:5b:f9:63:0f:30:97:20:a2:ee:c3:3d:e7:ec:
63:49:51:7c:21:27:03:12:b7:2f:b7:57:70:62:cb:df:99:a5:
0b:cf:3d:f0:08:55:7d:c3:5e:08:00:91:1f:3d:e9:69:d2:a4:
60:5a:11:12:f3:23:76:e6:a5:1d:f8:93:49:33:5b:b6:a5:19:
39:6d:15:c4:16:bd:12:f0:63:5f:a7:4f:0b:74:7d:f8:54:31:
a4:74:3b:69:2a:ae:79:7c:c5:ca:c8:85:51:66:17:8b:07:ec:
a9:74:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:06 2025 by rpki-client