Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: L32oF2iI3cyTcfsIeSy3VmSbm7BSpzmV9Rq1FYeZEbA=
Subject key identifier: E7:E2:BF:47:8D:87:62:78:F8:D4:32:71:24:B8:AA:70:CD:30:C0:62
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 0196BDEEE95B681B7B8DE91E9B220ED08B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 06:01:13 +0000
Manifest this update: Sun 11 May 2025 06:01:13 +0000
Manifest next update: Mon 12 May 2025 06:01:13 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: xtRLJXCFrBDKoFkA/aeCoLatPhIUIwIv5oc+Qq23+XU=)
2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:e9:5b:68:1b:7b:8d:e9:1e:9b:22:0e:d0:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: May 11 06:01:13 2025 GMT
Not After : May 12 06:01:13 2025 GMT
Subject: CN=e7e2bf478d876278f8d4327124b8aa70cd30c062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:9e:7b:a4:fa:6e:3c:6e:5e:26:d3:05:e4:
8f:2c:17:64:2c:00:fd:71:1c:eb:1a:a0:af:c7:d4:
86:d2:a9:81:88:d7:ec:b6:fb:bc:ab:10:de:5a:35:
2b:52:21:fc:fd:ce:ed:55:90:26:6f:7e:65:94:b2:
65:4a:c3:48:32:71:49:1b:d4:7e:33:0a:b3:99:d6:
46:35:7f:1d:50:93:85:6f:0e:fc:8b:ea:a5:da:a5:
2f:05:ab:bd:6f:b9:82:d3:97:c6:63:e2:d6:51:77:
cd:0b:31:c6:66:8e:c7:72:5a:36:3f:6f:45:45:83:
a2:d6:8f:c0:71:e6:37:18:d9:6d:51:a0:f5:ae:4d:
f9:3e:e4:5a:23:8f:2d:b6:23:fb:d2:5c:ca:4b:45:
ea:98:da:f5:50:7b:0b:97:b7:49:1f:4c:21:69:91:
ea:8e:95:28:17:b4:d2:06:2a:40:ee:07:64:18:1a:
2c:c2:10:de:73:98:f0:1b:8d:69:82:33:d4:f3:d9:
5e:df:ec:59:7a:4b:e1:ee:b8:89:4f:14:e1:f1:88:
93:de:8e:da:cd:a6:59:14:d9:56:59:49:e3:95:9b:
88:38:13:95:b1:0a:f9:e1:b8:c2:7b:7e:64:a5:e1:
70:c3:ed:6a:4d:54:b4:6c:a8:39:4e:0d:69:cc:ee:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:BF:47:8D:87:62:78:F8:D4:32:71:24:B8:AA:70:CD:30:C0:62
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9d:00:e4:9c:ad:f5:8a:3f:cb:a0:d5:47:4e:24:dc:96:cc:
bd:f2:38:b8:9c:b8:59:a8:d4:95:1a:fe:93:77:cd:15:42:07:
24:b3:ca:da:b5:19:9a:e5:b6:58:19:7a:36:62:46:b9:4f:5a:
fa:62:c5:e2:24:df:2d:da:36:c5:d9:98:50:23:86:72:a3:f4:
a0:e5:ca:95:07:39:4c:a0:3c:7a:09:04:2f:d7:2c:14:ad:48:
00:10:e2:99:3b:23:70:40:f6:96:ec:98:98:e1:7e:ac:ef:ca:
40:df:30:d4:fe:8f:71:4e:c9:d6:3c:50:28:5a:aa:4c:98:63:
2e:96:5c:79:45:f0:af:d7:dd:ef:09:4e:0e:cf:d5:59:9f:79:
a5:a7:02:95:ff:33:4f:55:cd:ab:ad:29:e4:e0:b0:1b:2d:2b:
7b:01:a8:8b:b4:f5:f2:89:05:6f:27:8a:d6:b1:1e:4e:e0:4e:
a8:b1:85:23:6d:46:52:33:66:13:b9:b3:e7:4b:27:21:39:3f:
85:64:94:a1:73:50:e0:aa:8e:9e:95:6d:f1:90:54:2c:d6:dd:
05:db:63:ae:14:0d:f5:9a:5f:57:68:5d:37:57:ad:3e:7b:96:
7d:2d:43:f4:87:22:1a:e1:1f:b3:43:14:c8:b0:49:07:fd:c6:
aa:9c:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:51:22 2025 by rpki-client