Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: Xj0GNNMbF2mHoriWEIpJ/431Tn7DmueeIjkq3XyxBHs=
Subject key identifier: F6:1C:7D:E4:2C:22:7E:BC:6B:8D:C6:C3:96:47:A2:40:23:82:EB:99
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 0196BDEEDD152C098347F5695F39109271CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1548
Signing time: Sun 11 May 2025 06:01:10 +0000
Manifest this update: Sun 11 May 2025 06:01:10 +0000
Manifest next update: Mon 12 May 2025 06:01:10 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: Eh+ZW0MqZPJ8H9tUYQd+jsW/IS6WgIo+cS8DdsbH5ro=)
2: JoOIhSAqKdpIXX40gcKLusWeNyE.roa (hash: XGkJT13q1QJrNBJYi9R9LyTuLa34GhQ10YEFypzjsJU=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:dd:15:2c:09:83:47:f5:69:5f:39:10:92:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: May 11 06:01:10 2025 GMT
Not After : May 12 06:01:10 2025 GMT
Subject: CN=f61c7de42c227ebc6b8dc6c39647a2402382eb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:99:ea:2d:1e:de:8c:30:1b:2e:b8:85:8f:
38:61:9f:c7:8a:8f:81:ca:06:23:50:ec:ce:6c:e3:
60:17:5f:4a:70:f8:57:f0:e0:26:bf:3d:be:54:b0:
9a:ac:34:2b:48:94:e4:3d:5e:74:e1:38:89:5c:f2:
23:7e:5b:b8:4b:c2:ef:a7:f9:1b:13:3e:8c:db:bb:
36:18:72:b8:75:1a:d4:ed:e6:7a:89:64:ac:23:3a:
9b:e7:08:16:8f:6a:6b:b9:5a:3a:6b:df:8f:f9:c3:
22:95:d9:83:47:c7:c8:35:98:fa:db:a7:db:38:6a:
a5:d6:1a:f6:70:d1:66:08:61:0d:6b:9c:28:e8:7a:
8a:04:c7:4e:96:0e:5c:5a:40:2b:58:59:51:65:aa:
18:65:9a:19:0c:47:d8:0e:8c:90:79:e6:68:f0:74:
0d:d6:be:a5:b3:84:76:5a:2d:57:69:a6:24:2e:21:
ec:47:9f:37:d0:68:47:8f:90:91:9f:79:cc:1c:ac:
2f:74:bc:a1:77:47:3e:ca:91:69:c5:04:d4:03:df:
1b:ea:e3:64:c2:cf:a4:12:36:70:40:a1:91:c8:5b:
bd:60:36:e1:c7:7a:45:8c:11:5f:38:88:75:73:1e:
9f:f8:53:3e:94:5e:43:2e:88:17:b5:46:75:1a:ac:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:7D:E4:2C:22:7E:BC:6B:8D:C6:C3:96:47:A2:40:23:82:EB:99
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:de:f7:c5:ea:a7:aa:f0:0c:3c:d8:95:ad:39:46:8d:be:58:
30:51:b8:43:75:10:79:89:f2:4c:a2:99:31:8c:6e:19:2f:10:
b0:d1:aa:b7:ff:7b:3b:e7:97:11:b6:ca:41:f4:b6:fe:b8:d0:
a2:c7:43:ae:5e:67:ce:03:77:30:f8:be:0a:de:c9:05:62:65:
b4:ee:56:7c:ed:73:7e:55:92:50:7a:3e:94:d3:a7:a2:d8:9d:
3e:43:f6:2f:5e:4b:18:ef:b1:3b:28:9b:7e:34:36:ea:fe:3e:
9b:81:45:0e:d0:1b:b5:63:79:87:04:97:14:df:c9:42:68:f3:
21:c6:7a:90:47:56:be:3d:58:1a:ef:04:d4:be:30:33:7e:a8:
4b:8e:30:75:76:70:ac:d9:7a:67:57:10:88:19:2a:49:28:97:
b9:c6:ee:09:df:ed:81:af:ef:08:62:3a:e1:37:e2:ca:1d:d7:
58:4a:9a:71:2d:17:0a:3a:8f:69:80:7a:98:25:85:74:e3:60:
e0:df:c2:ea:ea:7d:bc:51:cf:05:47:2e:a3:95:70:21:54:22:
b2:53:92:19:12:9e:b4:5f:6b:98:ba:60:84:71:37:4b:38:6c:
2a:f6:ad:7a:8f:38:5c:a6:2f:8d:7f:8b:34:49:09:4b:e7:fe:
85:e3:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:50:25 2025 by rpki-client