Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: MPkLVRNFhdMGaqfYo/4+qN3s5fb38IdlEfMlvbBwUaQ=
Subject key identifier: 5B:EB:41:90:CA:7C:E3:4D:99:F5:BF:D5:CC:CE:C9:2F:9B:0A:57:15
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 0196CCF3B5456481668B65EEAEF16F736B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 11DB
Signing time: Wed 14 May 2025 04:00:45 +0000
Manifest this update: Wed 14 May 2025 04:00:45 +0000
Manifest next update: Thu 15 May 2025 04:00:45 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: s/V3zcHL0pESXPJw4VrE6MFviUfCLz84HfKTOH9eYW8=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:b5:45:64:81:66:8b:65:ee:ae:f1:6f:73:6b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: May 14 04:00:45 2025 GMT
Not After : May 15 04:00:45 2025 GMT
Subject: CN=5beb4190ca7ce34d99f5bfd5cccec92f9b0a5715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:e9:bc:88:a3:af:a9:9d:af:bd:ca:94:21:
2f:dd:84:2a:af:c3:59:0d:1b:01:31:95:ec:c4:fb:
94:62:90:a5:78:48:a9:7a:0e:e7:c8:06:15:d2:53:
06:58:34:53:f6:e1:86:39:fe:a2:10:8f:e8:1c:28:
16:37:00:23:df:ba:77:ed:7d:26:fc:d4:bf:c4:82:
fc:ce:48:39:0b:94:41:77:a9:8a:12:26:64:65:e8:
84:76:b8:e2:72:24:bb:94:45:a2:8f:dd:66:de:f9:
7a:bd:8a:45:79:35:1d:1a:c2:25:59:62:65:b8:08:
be:38:d5:f5:c3:47:bf:47:94:71:5b:83:2e:63:98:
57:22:63:83:47:54:9b:19:ef:11:7c:4b:05:fa:cd:
4d:04:2a:3c:34:39:b6:3d:1f:53:12:8b:7c:65:45:
05:ba:8e:46:07:d9:d6:0a:73:7f:51:97:e1:3f:60:
b6:e1:e0:e6:aa:f0:44:d7:47:0f:0f:df:b4:30:40:
70:96:1f:56:92:04:0e:7a:ed:2e:74:64:bc:1d:94:
f6:93:25:3c:6f:42:11:c3:ee:6e:23:60:3f:6e:43:
cc:e1:c5:e5:03:14:65:c9:56:d7:44:85:bc:65:c7:
7d:bb:38:43:05:de:dd:b7:6c:77:d2:5f:f8:e7:bd:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:41:90:CA:7C:E3:4D:99:F5:BF:D5:CC:CE:C9:2F:9B:0A:57:15
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:18:c1:5d:e1:17:35:bb:07:75:90:8f:25:1a:7f:3c:1d:c9:
c5:e7:be:1f:25:cb:98:a7:94:42:1b:9c:f5:4b:78:4c:2b:f7:
b0:a2:0c:a4:3c:ee:ba:21:22:96:7c:0b:b4:bf:a3:90:33:f0:
b8:b5:b2:15:d8:cb:4d:80:37:43:3c:19:3b:af:be:0a:36:4a:
d3:f0:e6:ce:91:c5:c6:a1:b4:16:f3:45:c9:72:75:3a:fb:0d:
c1:aa:ef:d0:e5:43:78:fc:1e:42:e2:7c:a9:f1:b7:32:73:25:
93:fc:26:ab:39:25:40:9f:65:d0:b3:d7:fc:6c:8c:21:b1:ee:
e2:02:df:1b:c7:fe:bc:54:35:a6:89:d8:a8:0a:5a:ad:3f:ae:
33:c2:6a:69:8d:9e:c9:71:f0:fb:e7:7b:ee:d3:1d:85:f4:41:
1e:da:dd:48:85:82:2b:e0:9b:aa:c9:0b:19:60:f4:89:d7:ab:
d5:f1:1d:27:7e:cb:5c:21:94:00:6c:0f:e3:57:36:05:cc:5b:
52:2f:de:ac:9d:55:ea:d4:a7:ae:c4:c6:89:1a:86:1f:be:82:
6d:bc:b0:94:51:67:8e:a8:95:00:85:d2:0c:65:43:a4:d6:9c:
77:94:d8:ef:82:0d:47:c4:47:9d:82:a5:bc:47:66:7d:61:e9:
06:b3:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:39:57 2025 by rpki-client