Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: ZsB7rZt1Xort40sXivG8e2muCfnaIvsMF3mMbED5QGA=
Subject key identifier: B4:A7:16:B2:95:53:68:44:3E:DF:1A:75:9C:20:A9:14:CF:B9:81:B7
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0196BD125463A585EDC3EA24D99ED21D1196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 02:00:17 +0000
Manifest this update: Sun 11 May 2025 02:00:17 +0000
Manifest next update: Mon 12 May 2025 02:00:17 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: eU/rtkceY/OoD1gfvL8TzeD/WOWwQiN6LVUwTeU8eEk=)
2: _kWvdqNfB5Qi_pth9OeMu1E5uoI.roa (hash: NWHqYOJDwR6XeYKKHls7B7q+f2asHmCl+FEc/+iucHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:54:63:a5:85:ed:c3:ea:24:d9:9e:d2:1d:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: May 11 02:00:17 2025 GMT
Not After : May 12 02:00:17 2025 GMT
Subject: CN=b4a716b2955368443edf1a759c20a914cfb981b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:dc:60:a8:1f:5b:53:2b:5b:ff:4a:63:da:
a6:ab:bd:d8:70:42:7c:ec:78:ea:37:43:d1:b3:6a:
bc:e5:5e:69:60:5c:bd:a0:e4:b1:62:9a:44:45:20:
e5:cd:49:6e:e9:2c:08:0c:49:1d:a5:d5:be:73:3b:
b3:89:64:31:5f:65:1d:cb:ef:6e:74:7e:47:30:92:
d4:6c:86:03:7f:86:c2:78:9f:08:31:4d:74:98:0a:
aa:11:e3:d9:c7:cb:ec:67:32:ac:28:0a:b4:19:31:
8e:d3:c1:1d:52:66:4d:c8:59:fa:ad:0a:5d:09:40:
cb:b8:70:c6:0a:8e:e0:62:39:04:05:47:64:27:d3:
c4:68:2f:2b:02:b2:67:6b:c3:b3:a9:fe:be:ce:b3:
ae:72:ae:14:b6:39:97:2e:8b:53:06:1d:1a:68:ba:
57:0d:42:06:e4:a7:90:88:32:42:08:e9:6c:58:9f:
ce:99:6c:2a:cb:aa:3e:33:d9:1d:29:a1:f2:64:c5:
c4:25:9c:8a:4b:55:d7:77:9c:67:3f:83:7a:4e:d2:
92:43:2e:5f:66:d4:1b:80:8a:14:28:c2:08:f9:f8:
a0:5c:18:74:10:e0:30:c3:59:ae:38:c3:9c:de:56:
71:a3:83:b8:29:19:6a:92:38:09:26:ce:26:00:32:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A7:16:B2:95:53:68:44:3E:DF:1A:75:9C:20:A9:14:CF:B9:81:B7
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:70:34:a5:11:c9:11:51:a5:9d:d9:a0:ef:ca:fe:d6:fb:89:
f9:60:5e:14:b4:cd:5a:fa:1a:3b:61:b4:5a:9f:c6:5a:a8:9a:
8e:61:80:f1:03:82:c7:77:ad:07:98:82:8d:9b:0f:d7:05:3a:
69:80:0e:41:ad:91:27:12:18:ff:bc:60:02:42:2f:af:fd:8d:
0b:60:85:fa:03:ab:4a:3b:f7:e5:90:12:29:2d:23:a5:78:b0:
2c:f4:77:da:6c:1c:d3:d9:fd:b1:60:cc:fe:e1:b6:4c:09:de:
75:66:ee:2d:74:11:63:9b:32:97:b5:05:97:03:1d:48:3f:d0:
10:50:34:49:f8:84:8f:d0:03:20:f0:9a:31:6f:3d:10:f2:ed:
b9:0f:6f:61:7b:b3:45:ca:cc:da:5a:53:f1:ef:56:ff:a4:d2:
57:04:1b:7b:2a:ab:30:2f:21:60:81:5a:0f:f8:d1:5f:51:9b:
07:d4:1a:dd:21:b1:0d:c5:85:ea:c7:e4:d0:a4:a9:47:1c:29:
ea:eb:e8:6f:87:57:36:f5:ca:fd:56:2b:7f:5a:43:d0:fb:22:
78:39:18:16:cf:89:a9:e5:84:a5:bb:65:54:6c:74:01:c1:b5:
96:2c:9b:57:54:19:0d:b0:4c:39:f8:ee:6d:42:4f:a2:16:ca:
89:2c:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:01:32 2025 by rpki-client