Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: fWpW30oeDj1qAaTFKlgaK4HFCbaaMQbeOGyO0isNT78=
Subject key identifier: 7A:A3:0E:D1:94:67:A3:51:B3:6B:DA:7B:74:B9:2C:ED:F3:7C:72:DC
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 01964E22DEE4BC228C24B1154767CE729D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0481
Signing time: Sat 19 Apr 2025 13:00:30 +0000
Manifest this update: Sat 19 Apr 2025 13:00:30 +0000
Manifest next update: Sun 20 Apr 2025 13:00:30 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: M3nPoUtcgPVWFuhvfk0CYL39/4zjdiNzcEEdyBGm3mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:de:e4:bc:22:8c:24:b1:15:47:67:ce:72:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Apr 19 13:00:30 2025 GMT
Not After : Apr 20 13:00:30 2025 GMT
Subject: CN=7aa30ed19467a351b36bda7b74b92cedf37c72dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:c5:16:35:3b:bc:97:66:9d:82:67:b7:65:
5f:fe:92:44:df:a7:30:af:6c:d2:46:71:30:ea:f8:
66:0a:8f:93:e9:c7:9b:2b:59:94:6d:35:86:76:3d:
f6:c7:50:8d:47:f8:7b:ba:3b:1a:f1:75:09:bd:42:
46:3f:f6:1a:7d:b1:60:7a:bd:db:4e:b3:8f:c8:61:
ad:2e:f1:7f:04:bb:29:60:b6:69:fb:70:99:73:f2:
85:74:6a:fa:d0:22:eb:64:81:72:16:d6:e5:87:ef:
b3:65:47:75:11:bd:63:49:de:ed:e9:c9:49:4f:ed:
b3:96:19:90:06:d5:de:b1:e4:8b:7f:50:7b:fb:cc:
b6:e0:fe:2d:5a:ae:fb:b4:f4:56:ff:1d:77:4d:08:
8b:7c:49:10:76:9f:fb:d3:cf:45:cc:bc:6c:cc:b4:
f5:c4:03:1c:ce:b1:c8:d6:cb:84:ee:63:8f:8c:33:
21:cb:6f:fb:1c:41:eb:e3:f3:6d:bb:22:ae:1d:22:
1a:02:35:1b:2f:f3:f0:a2:0f:ec:0f:1a:58:d7:7f:
83:d8:57:53:ae:22:75:d4:95:d5:f5:78:ca:31:03:
b9:62:33:d8:de:a6:c1:57:cb:03:46:01:b3:af:11:
70:62:dc:36:5e:c9:cd:af:f9:59:d0:13:f5:b6:7a:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:0E:D1:94:67:A3:51:B3:6B:DA:7B:74:B9:2C:ED:F3:7C:72:DC
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:24:a6:d4:f3:61:46:35:28:be:5d:27:e0:00:64:66:c9:ff:
cb:f4:44:be:11:1d:ae:48:d1:7d:7d:61:b0:51:57:39:be:f7:
21:81:9a:cf:50:06:53:49:a9:5c:65:68:3b:90:cb:ea:d4:e1:
e5:bd:71:1e:cb:ae:4e:5d:55:18:82:6c:6e:ce:38:f4:be:4c:
69:58:11:03:8a:98:0f:eb:17:cb:42:f7:5d:a0:db:97:54:89:
13:72:16:e6:7a:a4:74:3c:9b:f5:2e:fd:d5:0f:c7:34:00:24:
31:34:bb:f1:0f:6b:22:8f:67:a5:73:69:4e:6a:a6:cf:2f:02:
0e:70:9b:61:d2:9f:e7:3c:ad:21:ef:38:46:8f:de:d6:17:a6:
30:27:6b:7a:eb:ad:81:14:d2:b1:7a:ef:a7:2f:2b:4f:3c:7f:
ab:cd:41:00:b4:23:db:9f:0b:dc:b3:1a:4f:a2:11:29:13:e7:
6b:e5:2a:bf:c7:23:5c:b2:2a:50:a3:92:dc:a8:3c:df:47:a2:
64:c0:20:55:6c:5f:27:58:a0:d4:65:42:50:a3:6c:e6:e2:70:
08:09:8c:cd:12:13:63:b9:30:fa:b7:28:ff:ad:ec:1d:83:62:
16:bf:1b:bb:4c:82:ce:06:49:35:f0:15:23:9b:d9:f2:ea:83:
84:f3:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:40:59 2025 by rpki-client