Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: W1dAYojO58zhQp0xmcnb08l8v5n18Iyk543zXf3DhY8=
Subject key identifier: 3D:38:27:5E:37:96:5F:30:A4:2A:5F:78:21:7E:B2:13:E8:2E:3D:24
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 0196C4954FDE7D54A7F72C607EC6A248572E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 13:00:41 +0000
Manifest this update: Mon 12 May 2025 13:00:41 +0000
Manifest next update: Tue 13 May 2025 13:00:41 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: Q71UtATVxc7Bds0p+lpsocA4ROWQHvUvSN3sLjbd810=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:4f:de:7d:54:a7:f7:2c:60:7e:c6:a2:48:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: May 12 13:00:41 2025 GMT
Not After : May 13 13:00:41 2025 GMT
Subject: CN=3d38275e37965f30a42a5f78217eb213e82e3d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:59:18:4e:e2:16:69:c7:41:d6:12:c0:16:
bd:07:f8:8f:ae:31:6c:fb:eb:b4:73:4f:f7:0a:8f:
05:f4:f9:35:b3:4c:12:13:64:3b:9a:f4:0c:1b:5c:
f6:42:79:ad:8e:fe:bb:1e:f5:f5:96:ae:69:1b:09:
db:db:42:a2:46:d1:61:af:fd:b0:ff:a9:b9:bd:72:
e1:9c:03:33:b0:b5:fb:e1:c0:06:84:b6:44:1b:52:
1d:b6:15:f4:e4:a2:02:a6:63:24:14:63:00:88:29:
a9:3d:4c:61:2b:4b:d3:af:98:50:90:bb:25:58:b9:
45:2a:2c:a9:3a:e7:3c:8c:b2:79:64:ad:b3:8c:d4:
5e:4d:23:fe:ae:57:43:18:05:31:46:41:66:e3:22:
c0:5a:5a:13:43:f9:83:65:57:25:df:6a:b9:21:bf:
cc:1d:43:bc:18:d2:04:ba:fb:6c:80:1b:8b:aa:96:
3b:95:e1:65:66:ed:26:4e:3a:01:68:14:f1:d2:86:
a0:ec:a7:2d:78:c5:f9:dc:29:72:fa:90:1d:d5:b3:
4d:b7:6d:04:25:81:e9:34:ce:c5:5f:27:c1:e2:29:
42:46:69:03:24:10:06:06:9e:d0:1d:0f:ae:b5:90:
7a:e2:f0:b4:90:09:b8:51:a3:3a:8e:de:23:c0:3f:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:38:27:5E:37:96:5F:30:A4:2A:5F:78:21:7E:B2:13:E8:2E:3D:24
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:4b:7c:a2:0c:ac:5d:7e:2b:65:e8:4d:c4:9b:b3:d1:12:e6:
60:f8:47:06:2a:5d:cb:3c:e4:37:ac:8d:c7:9a:cc:2c:54:b1:
03:c8:db:1f:09:c5:21:3f:bd:29:5c:c2:48:b5:8d:b9:1a:9a:
d1:53:36:01:1b:c2:6a:88:fb:4c:22:9d:bd:36:dc:fe:5b:37:
5d:d8:03:ad:f1:b6:b0:72:cc:85:57:ea:f1:ec:fc:d4:08:63:
54:83:87:0c:f7:15:1e:19:43:43:0f:89:da:ff:0a:e4:51:0a:
93:34:16:34:5f:4f:42:bb:1e:71:e3:e7:7a:34:e0:54:f0:cb:
e3:a3:83:e8:38:ff:53:a9:08:ac:5a:be:f3:1e:8c:ea:2e:46:
b7:0e:28:93:c8:74:ec:01:f2:e7:dd:87:71:11:ed:61:3f:9c:
01:5c:7e:af:1c:53:39:d8:01:0d:7a:9d:4c:20:d5:1a:a1:45:
b7:33:b6:a9:f6:76:db:a0:16:2b:c1:a5:d8:6f:1e:fc:36:b5:
88:6d:f1:9b:a6:3b:b7:bb:13:57:8b:49:5a:70:4b:cb:4e:a0:
01:cb:61:13:81:2e:15:e0:61:44:6b:bb:52:9c:6d:fe:9d:85:
ac:14:1d:cf:7f:98:18:05:c6:8e:89:b4:bb:c4:ee:f4:a2:58:
c8:36:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:04:19 2025 by rpki-client