Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: HX10B1Qd7amajdwlhKLihhrxXbm98pFZ6L5RHEculDE=
Subject key identifier: 9D:08:4F:C9:0C:1B:43:DD:5F:1C:1F:E6:02:60:3B:A7:5B:93:3D:2A
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 019650ECE46A0D2CC1686827707A158ECCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0D00
Signing time: Sun 20 Apr 2025 02:00:23 +0000
Manifest this update: Sun 20 Apr 2025 02:00:23 +0000
Manifest next update: Mon 21 Apr 2025 02:00:23 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: U9p1tZHKz+uWBCHf7sWKubtzS1D1qoGVz84R2IyOXiA=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ec:e4:6a:0d:2c:c1:68:68:27:70:7a:15:8e:cc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Apr 20 02:00:23 2025 GMT
Not After : Apr 21 02:00:23 2025 GMT
Subject: CN=9d084fc90c1b43dd5f1c1fe602603ba75b933d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:8e:68:ea:7c:df:d1:24:27:fd:65:36:35:
80:33:f2:b0:f2:69:a7:63:dc:f2:b5:7c:de:d8:f6:
91:a3:7a:38:6e:87:71:ca:0c:a7:a4:fc:53:7f:62:
aa:a5:eb:e2:67:bc:77:84:98:fe:13:14:06:81:27:
5f:01:65:50:ca:19:80:55:0d:bc:c6:a5:90:3e:9f:
f8:e8:43:1c:8d:31:46:f8:fa:c2:51:74:56:e1:a4:
90:72:03:49:66:35:8b:7d:1a:9d:b3:77:35:9d:36:
93:a8:f3:37:47:7b:94:18:57:c2:e1:7d:7e:fb:2b:
21:f3:31:dd:79:35:d6:80:71:65:b4:16:6e:0d:3b:
d3:ba:24:7f:80:48:96:dc:12:44:b0:1d:f9:70:c6:
b1:6f:29:15:ab:66:b2:68:dc:a4:7a:05:c0:72:f3:
aa:ce:06:41:b1:56:57:ad:a2:c6:46:7c:2d:9f:30:
93:56:16:0a:ae:2d:71:87:06:5a:39:98:d5:90:75:
1f:5f:93:46:c9:37:5f:79:76:c2:33:d8:2b:f8:71:
cc:5c:9b:de:23:05:ad:a0:de:06:c1:80:23:b4:f7:
6c:f8:6a:43:62:6c:41:a8:62:e1:ad:7f:17:6c:d2:
49:4c:48:3f:f2:c0:6c:a3:d7:e6:e8:00:72:05:31:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:4F:C9:0C:1B:43:DD:5F:1C:1F:E6:02:60:3B:A7:5B:93:3D:2A
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:a4:c5:3c:31:d6:8e:79:5b:e3:b4:99:21:55:b1:c7:df:
e8:bb:80:2a:3b:a7:b7:e6:00:6b:f7:4b:ad:07:9d:97:43:c3:
80:92:26:9b:f5:23:b8:0d:bb:71:b3:98:2e:07:a6:d5:e3:33:
ec:c7:d0:01:12:ef:5e:68:dc:53:2d:ac:68:4a:cf:ad:85:e1:
0b:4b:34:f1:33:45:df:a5:dc:4c:37:df:ea:20:e0:13:ce:e8:
2d:85:5a:cb:c8:d8:e5:09:36:49:01:a6:f0:62:81:6e:d3:e4:
76:5c:91:e3:19:fa:d1:77:e9:d8:29:91:dc:c2:8e:c1:d4:c5:
ab:44:f6:a4:f6:97:65:db:43:41:8a:cc:06:83:7c:30:af:2e:
7c:7f:ca:b9:26:23:81:38:bc:b2:b6:20:98:96:46:40:47:e5:
00:82:4a:b2:ef:96:af:64:36:59:f6:b0:c3:b3:d0:d1:00:2a:
8f:ac:21:ca:d6:f6:a2:f6:c4:c1:a9:cc:6d:38:a6:dc:36:6d:
5c:41:72:50:c2:f6:93:27:0d:55:9c:1d:f6:b7:e2:c1:0e:27:
df:02:94:26:fc:fc:a4:9f:d1:77:c7:b5:7e:d4:66:68:33:1b:
ed:ae:49:46:6e:30:1c:bf:6f:c4:5d:bb:1a:7c:b1:66:37:3d:
9e:fb:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:36 2025 by rpki-client