Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: eRWadsS6yiYJhA/VF57lEc7d7J2HEZqUf67VUzI4ZPw=
Subject key identifier: 42:65:B5:97:70:5E:0D:2F:DE:2E:11:3D:F5:56:C8:CD:F2:CD:5D:D6
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 0196C6F140B940E98ED429FE9E03E118D50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 00:00:21 +0000
Manifest this update: Tue 13 May 2025 00:00:21 +0000
Manifest next update: Wed 14 May 2025 00:00:21 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: 5NowGweG+B7FqMuEYKG3RDfj/fCZ4kaNPB5pO2BafoI=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:40:b9:40:e9:8e:d4:29:fe:9e:03:e1:18:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: May 13 00:00:21 2025 GMT
Not After : May 14 00:00:21 2025 GMT
Subject: CN=4265b597705e0d2fde2e113df556c8cdf2cd5dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:ac:ae:de:c1:36:99:02:90:a4:63:6a:bf:
d6:e9:a0:8b:47:62:06:c5:ca:c3:5b:59:7f:b0:18:
59:23:13:ae:e4:02:f6:be:da:89:db:2e:e4:e5:87:
d4:f1:65:fd:48:41:03:b4:8f:72:3c:de:dc:3f:10:
9b:bd:da:9f:7d:9f:fe:5d:4c:f4:55:57:df:0d:6b:
f7:ee:b5:6e:29:94:aa:b7:db:1a:c9:c4:14:e3:28:
5a:35:54:d6:72:59:73:d3:97:b4:d4:c3:61:bb:cd:
f1:a5:fb:d7:e4:f2:c0:70:87:26:27:a8:1f:4f:c7:
bc:87:9a:79:52:ad:96:13:b0:99:82:16:3b:d1:b6:
a2:03:05:2a:7a:d2:ba:f2:0a:d1:7d:47:22:ec:88:
fe:d4:41:90:d1:4e:b6:4e:a4:af:6f:8e:fc:3f:93:
8d:5c:c3:89:a4:47:1a:45:6b:68:a7:95:ff:10:8e:
d8:93:a9:5d:b2:af:ee:da:9d:3b:6c:1d:dc:63:92:
e9:c3:ce:1d:71:54:61:d2:ae:5b:1f:5e:65:c1:c6:
c8:14:47:8b:b0:12:b7:32:10:b5:7b:04:bd:68:90:
6b:9e:e7:83:01:08:ae:31:5c:2a:7b:5d:7c:43:be:
a9:d6:18:8a:65:d3:4c:67:05:26:b6:19:a3:76:78:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:B5:97:70:5E:0D:2F:DE:2E:11:3D:F5:56:C8:CD:F2:CD:5D:D6
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d4:83:62:7b:64:29:f8:2c:17:38:72:f6:14:87:87:a6:d7:
96:73:18:bc:00:7c:4c:68:af:7e:6e:6e:6a:fe:46:f0:10:11:
88:77:ea:10:f6:be:39:78:b4:4f:d8:8c:54:2d:cf:c2:94:3c:
48:08:d9:a9:21:e2:38:d0:a5:86:cf:15:e9:2d:76:7d:06:a7:
54:3b:8d:ea:9b:c3:78:99:68:fb:38:6c:20:a9:fa:08:71:e5:
26:06:a0:af:a4:bc:c9:13:ec:3d:b8:4d:86:56:da:b5:70:a1:
05:4a:e4:76:0a:7a:df:8a:e0:2c:ef:91:95:ef:b7:c1:98:d7:
18:1d:ca:71:d2:cb:66:66:a5:57:d8:11:85:78:6e:92:9a:08:
8b:36:ec:84:59:c8:80:bb:19:bc:24:22:41:f9:7e:13:a3:45:
10:1a:d8:8a:a6:f7:8b:b3:13:af:e8:34:89:d9:04:a1:44:8f:
b2:8c:35:83:e7:29:1e:f8:10:cb:f2:7e:8a:3f:d0:09:e7:21:
a0:6c:eb:17:ba:4b:56:9c:73:56:08:01:3f:a1:c2:af:2c:7b:
a3:c5:05:0c:9b:e8:75:18:b6:32:41:8c:e9:2c:84:48:88:af:
ae:9b:ae:8d:27:6e:2d:3b:5e:0d:4c:fa:ae:ac:53:48:a1:c0:
11:3a:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:01:29 2025 by rpki-client