Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: 0o0tXTqLSIUX7Hiq2NqrOly6rQsvFUVDFubmCz8EsRI=
Subject key identifier: D9:E1:A6:28:34:B2:45:B7:4C:37:BD:59:5B:41:5C:03:2D:54:4F:35
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 0196556EA91120FC272D3E8983386EAD245F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 23:00:37 +0000
Manifest this update: Sun 20 Apr 2025 23:00:37 +0000
Manifest next update: Mon 21 Apr 2025 23:00:37 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: OPjnD4LzjuG31Yx6wtBjDz7BzE2+yozwOo4dXWJGBq4=)
2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:a9:11:20:fc:27:2d:3e:89:83:38:6e:ad:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Apr 20 23:00:37 2025 GMT
Not After : Apr 21 23:00:37 2025 GMT
Subject: CN=d9e1a62834b245b74c37bd595b415c032d544f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:1e:1c:16:38:cf:69:b3:2e:74:69:19:41:
9b:83:69:ed:e5:33:c2:aa:e8:7a:c0:29:b0:97:33:
18:16:c6:b6:3b:1b:64:d1:24:d7:f1:10:5a:d5:d6:
ca:1a:e6:7e:35:a0:70:df:cc:4f:c2:b0:84:e9:cd:
55:e0:d9:34:a9:f0:5c:fa:0d:d8:8b:24:9c:c7:05:
a2:fa:de:ad:b1:c4:bb:e8:95:04:26:83:5a:86:2a:
58:5e:d7:b0:6b:2a:9a:1a:f0:46:23:ea:49:ba:bd:
57:ac:50:2e:65:9a:9c:7b:aa:1e:fe:df:d2:41:18:
70:fa:8b:11:f4:40:c7:10:11:dd:62:87:db:f1:64:
e1:05:1b:c7:a8:b2:d8:27:99:07:8e:8b:21:f6:74:
61:5d:61:2a:96:bc:0e:21:41:c9:cc:32:2f:5c:bf:
65:d8:35:82:4c:49:de:a3:ae:ad:18:0c:68:60:ca:
ae:3a:c8:4a:0a:d9:bb:7c:0e:a8:9c:6f:b0:46:25:
26:73:b1:3e:1e:8f:55:26:04:3d:f4:1a:8c:02:5b:
bf:98:72:9a:bb:1f:1d:c3:f6:44:db:d5:41:a8:be:
2f:0e:33:0d:be:c6:b1:18:b7:5a:9a:2f:fc:d7:ff:
a0:69:70:61:e6:70:8d:01:1d:f5:c8:39:0b:91:d9:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:A6:28:34:B2:45:B7:4C:37:BD:59:5B:41:5C:03:2D:54:4F:35
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ca:2b:04:4f:9f:82:10:bf:87:b5:90:3f:2d:4b:dc:98:a9:
72:95:6b:57:80:78:9d:f3:d7:9a:81:11:ec:8f:0b:5a:8e:5d:
88:90:75:3d:06:9d:33:cb:63:4b:d1:2d:d5:1c:6c:36:34:68:
85:a9:ec:bd:92:5c:eb:85:21:44:bd:70:08:87:99:08:f3:5b:
90:70:c4:16:f9:05:e6:84:54:2f:56:c8:bd:7c:ad:ab:53:3f:
a4:61:53:48:cc:fc:b6:ca:23:73:a0:1a:0e:c4:4b:8a:fb:4e:
03:fb:ba:eb:cd:c5:ae:36:ea:18:9e:e6:b1:8a:44:5c:bc:f6:
c0:8c:02:60:4c:94:b9:61:c6:5e:10:8d:f4:1b:ed:20:aa:93:
b4:50:8d:da:a3:7a:44:8a:e6:13:98:b2:af:2b:30:dd:19:3e:
b5:6f:51:4a:b5:5c:38:65:29:72:93:b1:30:48:ef:19:20:bb:
5c:ef:9c:9a:d5:31:6b:12:aa:54:df:51:4f:97:80:9a:c4:ce:
6e:75:5a:97:87:4c:2d:0c:73:0e:bf:cb:f5:b3:b8:1f:19:76:
a8:a2:7a:78:5e:f3:6c:f8:f4:df:e1:16:b2:fb:a3:5b:ea:4c:
a4:0d:9e:80:89:09:06:13:d4:27:b2:bb:87:ba:07:1d:fc:af:
2f:ef:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:38 2025 by rpki-client