Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: rHgCAOxVUiHoEorJYzN3ETyCaEAqp+s4ENazX68+RSw=
Subject key identifier: 16:5B:67:D5:B1:50:9E:F8:08:DC:5C:CF:8C:42:C2:FF:E1:CC:26:E2
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 0196A276F7F04EE4F2D75153CD852A27AAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 14B7
Signing time: Mon 05 May 2025 22:00:27 +0000
Manifest this update: Mon 05 May 2025 22:00:27 +0000
Manifest next update: Tue 06 May 2025 22:00:27 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: GETIpEHjcrWRfhHEQGkUXHU02YNT6Q3NKjK/d5vBblI=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:f7:f0:4e:e4:f2:d7:51:53:cd:85:2a:27:aa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: May 5 22:00:27 2025 GMT
Not After : May 6 22:00:27 2025 GMT
Subject: CN=165b67d5b1509ef808dc5ccf8c42c2ffe1cc26e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:62:3f:2e:bd:7f:5f:14:92:ef:8f:f1:7f:
14:42:c4:fa:e5:21:8f:10:b8:b6:b3:cc:10:19:fd:
f6:df:fc:17:b0:06:a7:67:bd:67:2f:09:d5:e5:67:
98:e3:2c:b0:d2:7f:31:55:fb:aa:5e:95:f2:9d:78:
9e:49:1c:64:d0:58:3b:b9:eb:c5:75:62:97:9c:2b:
18:e0:1e:c8:1e:48:62:15:4a:18:1e:4c:68:25:19:
f6:96:1e:46:de:33:e3:87:d1:81:ad:be:99:a4:8c:
7b:8e:0a:26:3f:80:79:7d:9c:bc:c1:c9:63:e4:9b:
8f:ae:2d:16:90:1c:c4:35:61:6d:cb:94:aa:6e:7e:
81:75:08:8b:de:20:35:cb:86:11:f3:b5:c3:c1:ca:
37:8a:10:98:74:e4:2a:5f:12:df:7b:5c:e6:af:f7:
29:96:c1:93:75:a8:16:bb:a8:4d:b0:87:3b:43:95:
54:db:f8:db:b3:1a:a2:88:f1:b0:fa:fe:1d:c1:79:
30:0b:87:ad:9c:7c:5c:61:17:36:47:08:44:75:d8:
a2:50:db:93:48:83:01:04:fc:86:02:8e:6b:54:29:
04:c0:56:2d:ab:b5:db:3f:15:08:94:c8:7a:da:73:
47:28:89:ba:64:a8:b9:03:fa:f3:d0:d8:c4:64:a8:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5B:67:D5:B1:50:9E:F8:08:DC:5C:CF:8C:42:C2:FF:E1:CC:26:E2
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:71:eb:bd:d4:18:26:55:71:a4:36:82:52:7a:9e:d1:30:6c:
5e:81:6c:1c:ce:b1:32:f9:2b:f5:fa:85:7a:fe:c9:92:bd:a4:
13:34:3d:16:a0:11:8e:2c:dc:5d:d0:67:4d:8d:49:5e:0c:da:
d4:98:b0:04:13:66:8f:8d:6b:4b:ae:c8:d3:bd:26:94:07:db:
4f:f7:04:da:30:88:ea:70:bd:39:29:72:58:86:21:d2:63:3a:
23:c5:00:54:9d:c9:28:e5:67:37:2f:ac:40:35:c5:ef:4f:96:
6e:f5:67:a8:ef:ac:d3:1e:14:b1:d1:0e:19:8f:b9:1c:8e:38:
7c:c8:47:14:38:e2:70:61:75:0d:d7:19:c6:d2:d1:bc:12:ed:
25:a3:0e:f3:9a:78:9e:d8:0d:db:28:c7:fd:61:df:14:0b:d1:
48:f0:88:16:ae:5e:fc:2c:f6:f5:47:fc:0c:73:a7:fb:71:9a:
97:1b:40:d2:13:92:8a:96:22:1a:43:7d:48:80:4b:f3:ab:f7:
78:a3:32:7d:59:88:46:e9:4c:96:c9:cf:82:b0:e4:e1:c0:c4:
9a:47:54:2d:74:13:f7:53:e0:30:bd:19:d3:c6:23:80:89:c6:
f2:2f:a4:f6:8b:5a:1e:55:30:d3:9e:15:4c:e2:cc:dc:7a:eb:
67:3d:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:26:22 2025 by rpki-client