Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: CmnWaYZOv6zltPfUbMZIx1Sr50zhNGUcuzcZG4K2jG8=
Subject key identifier: 1B:0C:47:4A:D1:A5:20:D7:4C:C6:AA:D6:BA:E6:DD:5A:BA:58:DF:40
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 0196B8C7EE012FEE172F53A480124CBFCB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 06:00:32 +0000
Manifest this update: Sat 10 May 2025 06:00:32 +0000
Manifest next update: Sun 11 May 2025 06:00:32 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: ME1+1R+15lPNCqLW50Hp86a88euTV194JA6pKRl2DCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:ee:01:2f:ee:17:2f:53:a4:80:12:4c:bf:cb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: May 10 06:00:32 2025 GMT
Not After : May 11 06:00:32 2025 GMT
Subject: CN=1b0c474ad1a520d74cc6aad6bae6dd5aba58df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:de:c3:4d:e1:ff:d6:4b:b9:59:ac:46:3e:
b4:7c:cb:fa:13:ea:97:f7:52:4d:64:4e:dc:c5:45:
e0:cf:d3:18:60:61:c2:f4:fb:b6:db:97:a9:db:45:
89:6f:13:34:42:a9:34:82:8b:2d:f7:21:38:c1:a8:
5e:67:9f:83:75:3f:af:1b:ac:e8:8b:cb:25:b4:14:
9c:e3:07:b9:43:53:a8:e8:83:0c:de:36:9b:ce:a4:
64:2f:5a:6d:35:5e:da:2d:98:08:2b:ff:16:d8:73:
02:5f:07:1c:49:9d:c1:dd:8f:85:e2:35:b6:43:86:
68:6c:32:fd:a1:08:0f:ab:8a:f3:ec:c1:7b:a7:c7:
53:1b:66:1a:eb:9a:16:78:8b:0a:bd:81:ce:8c:73:
8c:34:d2:42:9b:f3:46:13:6e:71:1d:89:99:fc:4b:
23:ae:c8:26:ce:33:58:31:f3:cb:03:29:f9:c1:04:
fb:13:57:a2:36:e2:e7:25:ee:59:29:6e:5e:e3:98:
5e:03:11:bf:d0:7b:aa:ea:9a:58:a5:ab:fd:63:9d:
ff:63:1d:d2:5d:e4:2d:86:fb:da:04:9c:e5:3e:6d:
12:76:28:58:cf:e5:f0:b1:a5:bd:d3:8d:16:24:7e:
2e:e9:3b:be:d4:77:b4:8b:2d:c7:11:22:fe:57:63:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0C:47:4A:D1:A5:20:D7:4C:C6:AA:D6:BA:E6:DD:5A:BA:58:DF:40
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a0:29:3f:15:51:19:36:7e:0d:f1:1a:2f:ce:e1:e8:ad:f4:
ef:2e:18:74:73:9e:2f:59:4c:86:1b:de:a4:10:30:5d:f9:66:
a2:8c:f3:2e:a8:e7:db:5a:15:ed:2f:d5:2b:80:2b:c8:d9:d4:
ae:d6:25:cf:38:8f:19:04:1c:a6:8f:6f:18:e9:26:19:f9:5b:
b5:c6:eb:0c:b4:1e:15:91:c2:bd:52:57:b7:fe:1a:14:2d:0d:
06:cf:d0:97:54:d9:17:37:5b:7d:80:8c:b8:4f:38:d5:d4:de:
36:2a:36:99:33:63:88:3c:08:ea:69:46:c0:52:42:4a:2f:7c:
1c:7d:7a:c2:4f:b7:6a:6d:83:a4:59:b2:ac:5c:56:9a:fa:0a:
67:cd:ee:a9:b0:c2:bb:2b:4a:e4:d3:9d:df:df:32:1a:cb:fc:
08:9a:70:2e:2a:55:55:63:b0:31:e1:f2:76:ab:ba:65:23:25:
1a:ae:69:1e:c1:1b:18:72:20:12:64:21:07:f4:40:2b:ba:80:
57:45:35:e0:8a:54:88:62:bb:7d:7b:66:8a:bc:05:b6:a7:d6:
6c:e0:38:75:54:0b:b4:21:b2:42:31:33:5c:23:5d:49:31:00:
3e:91:a5:bf:fa:77:34:de:62:10:3e:f0:12:41:d5:51:90:51:
c1:89:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:29:40 2025 by rpki-client