Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: GTSVpGd0nEr8raV2kIBdJXryeb9JyWg9G35vzaTFxbI=
Subject key identifier: 0F:2B:98:7D:6A:6A:18:A2:61:09:A1:BF:B3:AC:82:04:A2:73:B4:C0
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 0196108E9D2ABC88D89313C893384E4B88FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 146D
Signing time: Mon 07 Apr 2025 14:01:43 +0000
Manifest this update: Mon 07 Apr 2025 14:01:43 +0000
Manifest next update: Tue 08 Apr 2025 14:01:43 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: prXfaKE8MLlQu1xVuYH2c9XzJTgSRSnrsq3MndiKx5k=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:9d:2a:bc:88:d8:93:13:c8:93:38:4e:4b:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Apr 7 14:01:43 2025 GMT
Not After : Apr 8 14:01:43 2025 GMT
Subject: CN=0f2b987d6a6a18a26109a1bfb3ac8204a273b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:38:19:47:68:46:59:a6:8c:1a:f0:9a:cb:
b6:4b:99:5f:ee:aa:50:ea:f8:ad:f5:50:63:08:90:
1b:18:5f:2f:50:12:cb:5e:00:8b:b5:72:dc:bc:2b:
f3:98:b2:66:3f:c2:54:bd:cf:6d:4c:0d:a2:32:32:
7e:65:98:41:80:de:75:71:63:7a:4e:73:76:53:b3:
a3:da:85:57:03:01:64:66:d5:31:ad:19:e3:4d:be:
29:ab:b9:3b:cc:d2:0a:7e:65:c6:8f:df:d0:76:25:
59:b6:62:c8:bf:8d:5f:35:3e:7d:f3:32:1b:76:b7:
89:c1:f2:38:66:04:dd:9c:e0:89:5d:ed:be:af:22:
4b:4f:34:51:02:47:80:1a:14:19:23:71:14:22:8f:
af:87:fb:fa:b7:8c:67:2c:1d:fb:f2:c7:3d:36:5d:
5d:4e:e5:51:84:b9:bd:ec:96:0b:cd:3c:a0:1c:9a:
ca:81:aa:a6:cf:4e:a3:e9:8b:19:de:50:d6:68:1f:
6f:b0:09:53:88:34:bc:97:ae:35:ff:55:6b:5f:f4:
87:e4:e3:da:97:6c:93:f6:e8:32:5a:3c:24:32:b2:
b6:9f:47:4d:0e:c5:a0:60:c5:96:54:a0:92:54:9a:
48:7a:27:d4:05:c6:60:2e:3e:46:74:f7:4f:58:32:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:98:7D:6A:6A:18:A2:61:09:A1:BF:B3:AC:82:04:A2:73:B4:C0
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d8:c2:34:a2:fd:c4:e7:83:ce:61:b4:6a:c8:8c:30:c1:fa:
52:21:fd:69:2a:21:60:04:b4:0e:e3:8e:28:2e:80:e4:e0:86:
f7:47:12:50:3d:c5:f0:21:52:6e:8a:a0:e0:64:dc:11:c3:2b:
ea:77:45:d1:42:74:74:3d:17:05:de:f4:13:2e:2c:0a:ec:fa:
b9:a1:55:8f:fb:c4:e0:b6:f6:36:8f:d0:ef:0f:bb:6d:d6:c8:
9d:44:1f:3c:32:f6:20:f1:a5:73:da:ac:5a:35:73:1e:79:70:
73:1b:7f:8c:e8:e7:f7:04:f8:71:ec:5b:e0:cd:d5:ab:b5:39:
94:64:23:df:d0:ae:20:0a:02:fa:1f:97:c2:3c:05:7c:35:72:
61:a7:fd:25:cf:70:21:5a:b4:8e:27:15:6c:f3:ff:10:03:c6:
02:6f:5a:b0:6e:cc:1b:10:02:69:a2:48:95:d6:d7:97:ef:2b:
80:04:b2:50:b0:74:aa:2a:e2:6b:10:ae:30:86:0d:46:22:c1:
e6:16:f8:ec:b0:b4:db:d7:19:be:57:64:69:8e:83:31:ac:7c:
42:83:24:21:81:dd:19:bf:04:ec:cf:a9:da:3c:46:45:e9:1d:
0a:51:35:7b:95:42:4b:c8:ff:77:82:73:77:4b:5e:b2:4b:89:
29:4e:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:04:13 2025 by rpki-client