Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: MS97uLJXaDGtP/m4bIqq7FYwwG9GM5bhfsMoQeZTf2E=
Subject key identifier: D9:D9:CE:F7:4F:0A:66:04:C8:CC:29:B7:48:A6:E8:54:65:A3:08:4B
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 0196C34B4F5EC3A2A2F4B7D07EC611F7F30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 07:00:14 +0000
Manifest this update: Mon 12 May 2025 07:00:14 +0000
Manifest next update: Tue 13 May 2025 07:00:14 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: lIeXweKVRIvV6BiC8SnwYT0BtTqygGRPQidqI9ivc9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:4f:5e:c3:a2:a2:f4:b7:d0:7e:c6:11:f7:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: May 12 07:00:14 2025 GMT
Not After : May 13 07:00:14 2025 GMT
Subject: CN=d9d9cef74f0a6604c8cc29b748a6e85465a3084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:4a:42:fa:ad:9e:71:69:ea:d9:da:d7:dd:
6f:3d:0a:45:2e:f9:21:f8:59:f7:33:0c:6c:ff:6c:
f7:bc:9c:fb:21:74:1c:ee:09:aa:97:89:62:43:9a:
d2:b9:3f:49:e5:8b:53:0e:3b:28:2b:11:86:a7:79:
a1:3d:46:22:60:5b:0d:27:3d:04:55:b4:81:a9:9b:
a3:84:2d:42:30:45:2a:ae:14:96:b9:e3:59:66:e8:
cc:e0:ce:4b:a7:0e:2c:a9:1d:6d:fe:b6:79:b7:81:
62:60:75:5c:4b:29:98:81:84:12:20:97:da:12:fc:
f6:06:8c:79:ae:93:25:55:9f:fb:38:25:d6:53:84:
1a:eb:4b:e6:6e:33:79:d1:25:58:2f:dc:e9:d5:25:
54:50:a2:f6:52:f2:da:4f:5b:b5:d5:36:3d:6b:5e:
2f:49:8f:d0:08:ac:f5:0c:89:87:3e:c9:ec:02:e2:
68:72:2d:8f:2f:dd:7b:11:d5:09:18:5e:bd:80:ac:
4d:a4:16:a7:40:41:f3:27:f2:21:fb:0d:fe:01:96:
88:5a:57:f9:6d:f7:d6:89:f6:7f:01:7a:ac:05:30:
9c:63:71:87:bb:74:0f:4a:d0:71:59:74:1c:ef:16:
87:5e:1a:4c:0d:b6:83:15:d0:32:f9:6d:3b:16:63:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:CE:F7:4F:0A:66:04:C8:CC:29:B7:48:A6:E8:54:65:A3:08:4B
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e6:06:b1:d8:19:49:ec:92:c4:28:39:5c:49:75:14:65:5e:
73:82:0a:d0:ef:aa:40:fb:00:bb:93:ef:ee:e6:e0:6e:c4:ae:
b5:46:8c:cf:e6:8e:7f:c9:ae:44:69:b2:75:58:98:9a:27:e6:
b1:f6:e3:24:7d:de:86:3f:46:60:09:2d:9a:2a:da:17:eb:c1:
20:47:39:0a:90:04:57:f9:73:a4:b5:2f:fe:aa:10:eb:c2:03:
97:18:a0:25:28:f2:ed:5d:dd:80:c8:95:36:94:bc:38:de:3b:
43:89:47:aa:f1:b7:d5:eb:df:62:08:fb:11:6d:4a:fe:e0:ab:
c1:2a:64:9a:ab:d0:16:66:cd:ee:e7:0f:a9:53:46:4e:1f:9e:
a2:dc:75:17:49:37:95:da:3d:88:e5:b9:07:06:18:00:14:ac:
da:ce:c5:44:31:79:21:43:9a:db:cc:87:37:59:98:eb:e3:a0:
3b:52:58:24:8e:17:b2:96:e0:1f:95:4c:38:a5:a2:fc:1f:49:
ee:e1:08:a5:4c:1d:b8:92:63:7c:8b:85:4b:61:25:4c:08:b1:
3e:90:4e:19:60:20:24:e4:dc:0c:96:73:ea:80:e6:f4:16:3a:
9d:3f:94:b8:93:39:f3:0d:b0:71:26:5c:44:2b:00:00:d5:fd:
7b:e1:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:40:22 2025 by rpki-client