Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: 7AYFJ2KbMmIRfSSCjGg5c5hnFYhU2QgpdXGP216h+Ow=
Subject key identifier: 21:24:52:2B:45:38:31:83:01:19:82:2E:DB:6B:90:F3:EA:06:79:A7
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 0196B8916BB6A296208DD57FBB577649EB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 52
Signing time: Sat 10 May 2025 05:01:00 +0000
Manifest this update: Sat 10 May 2025 05:01:00 +0000
Manifest next update: Sun 11 May 2025 05:01:00 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: FeWXZm1SbUruKqXvocjznoVi1crh8FrIIPxo0sWun4w=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: NYmwF4mBpF0BkmMcJbcBfbb7mNw.roa (hash: 4P8DST75fp7YFw+joLinoBciFGEOW9RYd1ghEZUg2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:6b:b6:a2:96:20:8d:d5:7f:bb:57:76:49:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: May 10 05:01:00 2025 GMT
Not After : May 11 05:01:00 2025 GMT
Subject: CN=2124522b453831830119822edb6b90f3ea0679a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:04:0a:9d:c5:a1:ea:d9:f1:0f:5c:d6:5b:
e6:3d:6e:f3:48:60:86:94:a9:a1:5a:71:8f:03:88:
f5:60:35:5e:3a:de:78:3d:d7:cd:cc:85:e5:d6:6d:
58:53:62:67:de:78:4d:43:21:0b:69:62:9d:bf:79:
fc:5b:3d:98:a0:85:48:d3:79:d0:61:c2:2f:75:31:
63:9a:a5:94:1d:79:e4:1a:1d:53:d3:31:ec:79:34:
0f:ad:48:41:61:ee:2b:86:13:6b:12:de:5a:88:dd:
4d:bc:f3:4a:20:d9:3b:bb:c7:a2:4c:e7:74:8b:dd:
fb:e9:50:01:3e:be:a6:ad:5f:57:9d:f9:17:5b:01:
d3:e3:b2:44:d2:d2:da:ac:69:8c:7b:3c:65:f3:3a:
45:d2:75:ad:9c:50:b1:de:b0:8f:07:2c:43:db:4b:
51:9c:0e:1a:16:65:83:d3:ab:7d:15:50:b0:b1:f4:
71:68:be:89:09:e8:66:5e:37:97:9a:08:53:b9:59:
71:f0:be:c5:5c:f0:8c:24:e5:09:d0:bb:59:b4:30:
48:b0:68:c7:02:cc:cd:61:7d:8a:8f:86:d5:aa:73:
9d:61:7e:06:68:d8:1e:ee:ac:e6:44:38:a7:02:d4:
f8:5e:51:4c:ce:b8:5d:fc:c9:1d:b4:39:50:30:be:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:52:2B:45:38:31:83:01:19:82:2E:DB:6B:90:F3:EA:06:79:A7
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:2b:f2:8c:45:e8:cc:46:5c:e8:c4:33:45:fd:1c:49:bf:
32:82:ac:7e:5a:8b:cc:36:f7:fe:f1:19:3f:c2:de:76:19:c7:
cc:ae:a1:83:9c:97:9b:4c:a6:5e:fa:52:d4:c0:1d:08:f1:7c:
9e:d5:2f:29:90:f3:4a:c0:64:46:ed:c3:00:3f:e7:08:13:d2:
1a:e0:ab:51:4d:aa:35:fb:3e:6a:00:c4:5c:aa:b0:5d:12:de:
fc:bc:15:0a:c4:95:7c:92:f7:3d:fb:a5:d8:65:cb:01:d3:18:
ab:35:20:79:75:07:f5:30:bb:00:20:6f:3b:50:b8:d8:dc:da:
d6:71:3d:20:25:81:3d:08:41:47:22:cf:7e:31:59:88:57:76:
b9:9d:96:d7:7b:e1:f4:bf:8f:af:31:37:bf:20:50:d5:cf:2a:
b2:db:e6:85:23:fd:8e:24:36:1b:41:59:04:5f:5f:f6:c4:19:
86:6a:e4:d3:a4:f4:58:54:c6:a5:32:6c:23:27:af:04:ad:af:
a8:83:d2:fa:93:66:d5:f9:6d:1b:cd:c4:d8:ec:92:07:d8:82:
f7:06:b6:0f:56:91:c6:b2:85:1a:3f:ec:4f:95:9b:2e:07:46:
8f:2c:98:d8:82:36:ae:c9:1e:b0:a1:2d:17:23:6c:34:31:62:
11:a0:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:48:56 2025 by rpki-client