Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: vgZJ9aqJp+dtCXLpiFeggH6UR40iC946VW88z3tWHsI=
Subject key identifier: E1:94:FF:11:82:25:87:D2:C1:14:A7:99:41:4D:E5:6D:B7:D9:6C:C4
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 0196BF6F3BC9BDE12F57EB0B19811E3DFF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 13:01:00 +0000
Manifest this update: Sun 11 May 2025 13:01:00 +0000
Manifest next update: Mon 12 May 2025 13:01:00 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: 5NQkN+A/yqbyK0i2b/5X3prtp9IsBLjP+fh65sDoenY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:3b:c9:bd:e1:2f:57:eb:0b:19:81:1e:3d:ff:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: May 11 13:01:00 2025 GMT
Not After : May 12 13:01:00 2025 GMT
Subject: CN=e194ff11822587d2c114a799414de56db7d96cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:49:55:5e:54:75:a0:15:e1:d5:37:f7:99:
12:dd:c6:1c:4a:6b:2e:1a:05:c3:c5:88:14:7d:2f:
da:62:1c:f8:24:06:ed:a1:a2:4c:76:55:fb:ba:0b:
ca:7f:b2:fa:9e:bb:9d:e3:d9:46:b3:68:06:0c:6c:
50:d3:02:32:c2:00:81:8d:b9:4e:72:43:6a:b6:f7:
51:3f:6c:5c:18:f8:3e:f8:63:4a:ef:5d:d1:69:06:
d3:73:87:80:6c:4c:3d:50:a4:32:21:04:93:d0:25:
ec:d8:3b:07:85:f3:6e:48:bf:ac:2b:ca:80:b3:6d:
0e:6f:64:a7:60:6e:8b:e9:0d:06:fb:24:11:ee:f0:
b4:28:6d:5a:cb:c7:16:d5:79:b4:79:b7:d1:cc:d3:
fb:55:83:a5:d4:38:d0:a7:86:64:52:73:d8:64:b6:
44:96:06:1a:23:d1:40:22:35:3f:48:b6:a9:b7:d0:
51:74:f9:4b:3b:fc:e7:84:c3:4a:61:f7:d6:ed:e0:
c4:07:c1:07:d6:05:04:51:ca:3a:ff:30:48:8e:d7:
85:36:e9:8d:f2:93:af:ea:59:95:b8:32:f6:8c:58:
1f:ae:26:62:7b:2d:34:7a:ae:20:35:95:66:9a:49:
e3:9b:53:ea:98:78:6c:26:3b:b8:e4:74:bb:7a:d4:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:FF:11:82:25:87:D2:C1:14:A7:99:41:4D:E5:6D:B7:D9:6C:C4
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a4:5f:34:11:7b:b4:0d:51:8d:4d:7b:ae:53:d6:a2:4c:31:
0a:b4:26:ae:d4:5d:ab:c0:df:63:3a:21:ce:53:80:36:55:1a:
a9:e1:3c:d6:aa:89:71:86:ae:cd:63:10:24:f0:b7:03:51:49:
9a:d3:9a:f1:c8:b6:f5:cf:ba:95:55:5f:03:1e:c9:bf:b3:db:
bc:c8:1b:0f:9e:ee:b3:d8:ca:00:59:b7:3d:60:b0:cb:89:0f:
22:58:f1:ea:10:be:f8:9b:30:e7:a1:a7:07:94:f2:72:08:27:
37:6e:e8:1f:40:bc:13:5a:38:80:66:24:6a:47:54:f6:ac:97:
89:0c:cd:53:43:4a:e6:93:2c:2d:19:8f:01:4f:6f:b4:2b:c0:
80:47:33:6b:79:78:f1:e3:a8:38:a0:68:2a:d5:4c:69:69:8c:
36:82:72:56:6b:79:07:bb:35:d7:30:20:be:b4:27:e5:b1:93:
f9:e0:cc:fd:53:c9:92:8c:9b:24:14:26:cd:50:a9:56:07:05:
7e:16:09:17:66:84:65:68:ec:29:23:c7:ca:4b:1f:88:97:48:
82:c5:e9:11:b4:b6:47:66:81:31:bd:4f:85:57:bf:49:02:1b:
b5:9d:46:60:41:d3:a4:f9:01:b3:ab:1d:ae:9a:08:2e:68:94:
de:97:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:21:58 2025 by rpki-client