Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: ZLPYnvD6R6Sq1/A66BOqlQkty/nnES/ss59H/v6S5QE=
Subject key identifier: 82:00:E6:35:53:5C:96:22:09:CD:4C:27:EA:B8:EA:E3:39:3D:28:B4
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 0196BE25B61FE24F7CC8A4DF1F18BB25DF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0BC4
Signing time: Sun 11 May 2025 07:01:04 +0000
Manifest this update: Sun 11 May 2025 07:01:04 +0000
Manifest next update: Mon 12 May 2025 07:01:04 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: 1uQSGbMvaoUL85IIeXiXygLEw/Cc9P72on2zwn84500=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:b6:1f:e2:4f:7c:c8:a4:df:1f:18:bb:25:df:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: May 11 07:01:04 2025 GMT
Not After : May 12 07:01:04 2025 GMT
Subject: CN=8200e635535c962209cd4c27eab8eae3393d28b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:8b:34:8f:32:68:af:ce:a0:0a:45:1e:38:
95:25:5e:4b:c6:c3:7f:40:9e:f4:23:ea:87:e0:45:
42:91:2b:52:2d:8e:6e:c9:4e:f1:49:ab:3f:78:1e:
b0:18:52:6c:ec:65:3a:05:38:20:22:84:b3:13:b3:
12:84:6b:4d:a3:2f:86:c6:5d:ff:4e:a6:9b:85:b9:
e7:00:ff:a7:93:ef:d9:34:d1:e2:d5:49:1a:9f:94:
e3:cd:58:92:f8:5e:09:09:66:ea:f5:8a:2a:03:70:
90:20:44:55:7c:5c:72:dd:44:84:15:bc:00:46:b2:
33:cd:de:0c:fe:39:03:7e:c0:39:07:3f:41:b9:f0:
c3:1c:9c:02:84:94:e0:2f:50:a0:79:04:11:10:b9:
4f:3a:d7:d8:f7:c4:81:d0:a1:9a:c6:46:46:b8:8a:
71:0b:e1:c3:03:70:e5:8f:9d:0b:fa:ec:68:2a:f8:
be:48:92:27:4a:2c:0e:d1:2e:8e:fa:bd:3a:6e:d2:
11:14:3c:b0:1d:a4:48:c9:30:03:e3:96:ae:7c:dd:
61:09:26:8d:b0:73:27:c3:8c:a6:07:ba:aa:fd:4d:
0d:1d:33:38:d2:bc:85:8d:54:33:78:37:d0:64:a8:
f7:1f:36:52:2d:8e:98:cc:2c:e1:f0:64:ae:55:93:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:E6:35:53:5C:96:22:09:CD:4C:27:EA:B8:EA:E3:39:3D:28:B4
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:1a:ad:ba:91:af:2f:bd:e6:1d:8d:7d:5c:56:7d:1d:80:
e1:44:de:ca:5a:49:80:20:71:d4:17:07:8b:90:5b:1c:34:27:
1f:fe:17:3d:0d:be:9d:a7:4e:36:41:d1:2f:cd:cf:f2:46:76:
ca:47:50:ee:b9:2c:c9:c2:5f:14:e0:90:59:87:51:4b:32:38:
d4:20:cd:e7:d2:35:f4:b6:d3:f1:3b:a1:d0:4e:74:ba:08:8f:
c2:3c:51:0a:ad:af:a2:7d:c9:ec:0b:cd:70:a5:ff:14:e4:db:
dc:44:0c:80:37:49:d4:c5:10:d5:c9:23:17:86:92:aa:f5:4a:
0e:7a:d7:2d:f1:04:22:dd:48:60:79:2e:40:0b:28:be:85:80:
b7:82:c2:ac:21:81:f5:73:2f:d8:da:14:53:7a:e0:ee:95:cf:
46:cb:af:cb:bf:3a:41:9d:bd:6f:38:d4:df:d3:79:bb:5b:7f:
c9:70:47:8b:27:86:1d:11:2f:d0:ea:26:f9:46:fb:38:11:fb:
ae:0d:ed:20:d4:b7:44:2f:9a:27:e7:da:87:99:49:a7:2b:7e:
e8:f7:02:49:2c:1c:ba:3a:54:fb:25:25:1d:e0:de:f1:e3:f4:
87:e5:a8:2e:03:f5:81:48:d5:c5:50:65:4d:f5:33:f4:ba:62:
b8:cb:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:38:52 2025 by rpki-client