Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: BFU7IRCZEr3Yn+e6BIfhLwYTOU3GC9SaS2z4xoBL9Cc=
Subject key identifier: 4F:1D:F0:DA:AB:53:98:57:7D:A7:B2:41:AB:13:1F:39:0A:4F:24:B9
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 0196C427C666BF6BE81E1D572D4E50658BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 11:01:03 +0000
Manifest this update: Mon 12 May 2025 11:01:03 +0000
Manifest next update: Tue 13 May 2025 11:01:03 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: McUC21FEQr4B6vxPlrMDF9KdWEi+wvKXmG0musUcOW8=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:c6:66:bf:6b:e8:1e:1d:57:2d:4e:50:65:8b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: May 12 11:01:03 2025 GMT
Not After : May 13 11:01:03 2025 GMT
Subject: CN=4f1df0daab5398577da7b241ab131f390a4f24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:e6:3c:1a:b3:f8:78:e9:02:be:69:fe:76:
1b:6d:28:09:92:0b:d9:e9:c9:de:f5:78:84:ae:eb:
7f:61:cd:10:68:2e:78:2c:0d:1f:2c:af:4e:f9:a6:
79:b2:ee:2f:d8:3e:f6:37:b2:10:5d:6d:d4:cb:05:
33:f7:2a:a9:3f:87:bb:d7:d6:a4:c3:c9:ef:07:f2:
70:4f:ac:a7:d9:37:f9:17:82:35:cc:79:2c:4f:1b:
14:82:fe:28:0e:79:7d:4b:e4:8d:9a:de:f4:33:2b:
fa:0a:75:9e:45:40:ee:f7:89:47:ed:30:28:5d:d5:
1d:d6:52:0a:e7:5d:ad:fb:d4:f9:12:4d:5c:06:b5:
0f:92:0b:21:2d:5b:aa:9b:f1:48:78:9b:f5:4a:c1:
56:86:73:45:96:86:ea:dc:fe:d3:56:f9:77:fc:0e:
b0:63:ef:7a:f3:43:44:65:4f:26:7e:95:05:e7:6b:
d1:d3:51:88:ba:3a:76:fd:f3:27:01:45:75:2b:04:
f6:bd:62:f7:32:99:7f:58:f0:48:01:df:54:a0:fa:
86:49:5e:4c:ca:2b:e3:32:48:2b:d3:b9:cb:0b:2a:
67:ed:40:b3:ea:f3:49:6e:0a:e2:16:82:e1:2e:86:
3d:a0:74:ee:92:db:71:6f:ae:cf:46:4a:fd:97:85:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:F0:DA:AB:53:98:57:7D:A7:B2:41:AB:13:1F:39:0A:4F:24:B9
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5f:18:9b:d5:ff:4a:19:f9:dd:e3:bc:f1:d8:3f:cd:68:06:
c9:39:f3:8e:b2:95:25:bc:4e:b7:75:9a:d9:31:65:1d:99:b0:
ff:6b:39:e1:6f:c1:b1:e6:1d:cb:a9:bf:ee:db:4b:2c:73:44:
22:21:87:82:86:e7:fc:04:52:bf:30:97:78:bc:70:3c:93:7d:
5f:73:e1:da:42:93:18:8e:3a:0a:d1:f2:22:fe:a1:62:b6:a5:
aa:87:cf:7c:11:7d:b4:6b:27:9e:ea:0f:ea:4d:da:e3:92:16:
9b:c2:3a:b0:7a:b4:49:de:03:9e:b0:6b:0b:64:ce:fa:04:c2:
65:a2:b3:e1:3b:f9:8a:3c:9f:e8:1b:de:10:89:34:4e:8c:c6:
16:0b:22:09:43:c8:b0:17:db:c1:06:0e:fe:30:be:30:33:e2:
ec:16:f5:3a:bb:55:19:a7:0c:f2:ac:ef:25:e4:c8:03:ea:2f:
5a:43:e1:7e:d7:bc:29:b6:a0:d2:84:f2:33:78:93:b1:38:1a:
24:a6:a6:d1:f3:84:c1:68:c9:d9:9c:cb:33:99:df:d4:9c:7a:
e9:70:bc:90:a3:4f:0e:d1:5d:b3:f8:83:b7:2a:ac:1b:58:ad:
76:c0:ca:7c:96:72:41:43:c4:13:00:33:6b:f1:a1:9d:24:95:
9a:9a:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:20:31 2025 by rpki-client