Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: yjXGGCSPVlADz8eNx1H77Y3m0t0fve57OtTs6tb5U7E=
Subject key identifier: 43:CB:6E:16:5D:84:04:F1:3D:BC:FF:1B:93:5E:BB:76:91:EC:6B:07
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 0196BFDD08BE6B92A6068043ECDD27F4D69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 15:00:55 +0000
Manifest this update: Sun 11 May 2025 15:00:55 +0000
Manifest next update: Mon 12 May 2025 15:00:55 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: DCnyKDLSiLmQBN7IYQr1Ia4MfwjnN5gPtvzEYP0qdFg=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:08:be:6b:92:a6:06:80:43:ec:dd:27:f4:d6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: May 11 15:00:55 2025 GMT
Not After : May 12 15:00:55 2025 GMT
Subject: CN=43cb6e165d8404f13dbcff1b935ebb7691ec6b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:b6:be:ce:84:1b:fa:24:8b:7a:4b:58:8f:
53:16:c5:5f:79:d8:73:71:6f:10:c2:1f:5c:dc:d6:
e2:f9:e3:41:8d:48:dc:84:24:a4:9a:cf:ae:fa:76:
8d:e3:16:6f:c0:1d:4b:7c:9c:65:90:1e:1b:df:fe:
54:10:d6:8d:b8:c2:e2:d8:fa:fa:ab:38:dd:1a:b9:
53:e3:ed:36:bb:68:d2:f3:3a:7b:b1:d0:fd:e8:29:
de:76:60:15:cc:ff:84:68:a1:cb:b2:4f:dd:27:0a:
e9:fe:7c:45:b4:b2:2f:1d:cc:d5:90:a3:3a:2b:12:
6d:2f:8a:1f:7b:9f:ac:be:d3:bf:c5:b5:3d:38:4c:
6c:ed:84:a6:f2:2f:87:08:11:9f:be:1e:98:1d:d0:
f2:7c:ca:d6:43:e0:6e:1b:4c:4b:b8:5d:d3:7b:cb:
84:e7:82:c8:3b:0f:3b:69:7e:24:25:a8:1a:99:3d:
8e:b5:0f:96:cf:77:8a:ac:8b:59:3a:10:3f:b9:66:
e5:cb:6a:5b:01:e5:42:7c:46:65:34:c5:1f:db:7f:
c2:6f:df:bb:8e:7b:32:4c:4a:ea:71:2e:fb:98:76:
d1:ff:6d:77:14:5e:b7:16:1a:6f:7f:01:46:b8:73:
2e:6a:a7:51:a7:2a:dc:5e:e7:84:20:30:81:5e:aa:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:6E:16:5D:84:04:F1:3D:BC:FF:1B:93:5E:BB:76:91:EC:6B:07
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:63:7f:44:49:7a:71:0e:c2:3b:97:6f:78:9e:f7:c7:85:32:
aa:c8:e0:a7:34:f1:70:f0:42:a9:4b:83:4f:70:2a:4e:8f:82:
8f:a7:d3:35:62:a1:a7:9e:dc:b3:a5:8d:77:c8:ee:2e:10:93:
04:1d:1f:4e:3d:5b:e7:e9:75:e6:d8:46:eb:59:1d:ce:4f:44:
03:b2:88:81:7e:eb:8e:73:79:3d:e4:46:0e:89:9e:e5:55:bb:
d5:1e:e9:c8:99:98:93:de:84:e4:a2:99:50:7f:6a:84:db:ad:
af:9c:6c:fb:d3:3f:b4:ce:ac:66:06:fe:87:73:2d:0a:77:9f:
b8:b2:a1:e2:9f:7b:78:95:08:96:50:59:22:71:db:2f:76:bd:
bf:ae:d8:05:26:38:cf:8d:17:7b:29:bb:9a:30:57:46:c9:4a:
a5:f6:92:7d:3b:c3:d0:bb:6a:11:21:d6:e4:6f:ea:fb:b8:1f:
b0:fb:c9:f0:b3:26:07:6f:0a:2a:f6:8b:d1:40:7d:83:3c:83:
e5:85:15:b8:9d:85:b5:a5:71:de:2f:68:0f:85:34:c0:62:de:
09:11:62:9c:71:97:ee:e1:1a:3a:20:4c:fd:9f:a3:e5:e7:ec:
03:25:de:85:b3:84:3d:2b:5d:31:8e:60:8c:5b:da:45:7d:06:
fb:43:df:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:19:16 2025 by rpki-client