
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: EtoyRtuS1Pga45dFPcsrMGBx8k7tDb+v9SxrVAqLDtc=
Subject key identifier: 98:60:DA:BE:10:DF:59:97:30:F7:AD:03:DC:B0:62:22:BA:DE:D7:F8
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 0196AE0DE4675B47697688429767643EB537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 1528
Signing time: Thu 08 May 2025 04:01:08 +0000
Manifest this update: Thu 08 May 2025 04:01:08 +0000
Manifest next update: Fri 09 May 2025 04:01:08 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: GU5fKI+jq2halxsPhDiQCm8w7FW+Aar7vsyhQo2omME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:e4:67:5b:47:69:76:88:42:97:67:64:3e:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: May 8 04:01:08 2025 GMT
Not After : May 9 04:01:08 2025 GMT
Subject: CN=9860dabe10df599730f7ad03dcb06222baded7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:bc:10:95:28:4d:00:69:5b:59:79:ab:90:
0c:ad:b4:2a:da:89:03:24:33:b8:74:e5:f4:29:f3:
b7:e4:0c:0c:2a:8e:d1:2e:25:1b:09:79:6b:10:22:
7d:a4:d1:78:b7:93:3d:11:fd:1e:7b:a4:d4:1c:b3:
4a:c9:b5:86:0e:e7:14:4c:10:d1:27:45:3e:a5:be:
49:40:d4:19:ad:ff:f2:bd:77:39:e4:37:3b:80:92:
c7:3b:d7:4a:20:de:bd:7f:b2:b4:0a:1d:2b:76:69:
fc:cc:1b:93:a6:ad:e0:eb:e7:e0:9f:6f:d9:60:aa:
1d:8e:10:d6:bc:19:8d:99:1f:53:18:48:06:4f:14:
e3:3e:21:05:13:7a:3e:12:90:e9:54:78:cc:a1:58:
b1:e5:86:02:49:5d:7c:e3:80:c7:e5:2a:7a:32:9b:
19:01:a6:6f:c3:80:93:a2:47:69:fc:aa:0a:16:b4:
c1:21:a2:98:e2:b4:df:75:f9:48:9d:a2:49:d3:78:
81:9b:60:ee:b8:88:54:88:53:65:cd:6a:e3:2b:1f:
78:88:58:1f:9b:1a:8f:32:6f:e1:3e:cb:0a:79:b5:
22:78:d8:45:08:46:d5:61:03:07:5b:ba:af:06:68:
dd:d0:bf:35:97:d4:43:6f:7f:89:03:ba:f2:58:76:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:DA:BE:10:DF:59:97:30:F7:AD:03:DC:B0:62:22:BA:DE:D7:F8
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e4:c5:d8:a9:93:72:70:3e:85:3a:79:ef:32:79:f0:c6:c7:
ef:2a:42:f7:dc:0f:9c:fd:08:7e:fc:af:1f:ea:b6:3a:bb:42:
42:1c:9d:37:4a:71:82:71:e7:22:ad:b1:39:cf:0d:70:a5:55:
c7:2d:ae:78:ea:9c:3c:fa:2e:e8:bb:ee:2e:22:49:1a:08:2d:
3e:ef:2e:09:6b:4e:32:d8:ea:1b:dd:a1:3e:6c:a0:07:3c:45:
4b:e0:3a:8c:ee:04:c8:16:f7:c9:0e:c5:41:02:37:8d:09:33:
56:d0:d4:34:df:5b:ba:98:d5:1b:0c:82:17:31:7b:6a:ae:9f:
8b:fd:34:d8:de:28:d2:ec:f1:45:cd:ba:e5:f6:06:c2:2e:70:
02:42:60:b2:2e:91:a0:3c:02:48:43:22:98:1d:48:9e:51:b1:
3c:46:f8:6b:10:56:cf:18:45:0c:81:67:53:5f:f3:b9:57:76:
a9:73:88:fb:f2:42:d2:9e:e4:8e:d9:68:a7:34:2d:fb:7d:07:
fc:23:96:f2:bf:4d:3d:5a:28:32:8c:41:e6:52:03:55:df:2b:
56:54:74:87:5e:ae:92:68:56:dd:85:86:d7:85:77:83:a2:7d:
d8:90:12:ce:8b:e7:4e:84:22:4a:ee:56:f8:10:84:f6:ef:b6:
e0:b3:52:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:17:18 2025 by rpki-client