Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: Ho3ct9CHSNArr1leTtP6BVHJPUhMtEC2MDIsVt1Hfys=
Subject key identifier: 57:6C:11:A7:D5:14:D6:BD:17:3C:AB:49:61:15:30:87:07:7F:F9:16
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 0196C984C9D38D2BBA8BF90441B20D2CEFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 12:00:44 +0000
Manifest this update: Tue 13 May 2025 12:00:44 +0000
Manifest next update: Wed 14 May 2025 12:00:44 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: +GjTkwF/V5FIbblLpltjPKb61mtjcQn7RXkCJHtu78M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:c9:d3:8d:2b:ba:8b:f9:04:41:b2:0d:2c:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: May 13 12:00:44 2025 GMT
Not After : May 14 12:00:44 2025 GMT
Subject: CN=576c11a7d514d6bd173cab4961153087077ff916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:7e:09:d4:a0:48:2b:f3:d5:69:f0:78:17:
de:d8:5f:e8:82:b9:22:a0:64:fd:7d:07:e1:be:d4:
1c:17:70:9e:33:ee:50:62:97:d6:ab:af:34:52:cd:
b3:6c:48:cf:be:dc:a8:fc:a6:8e:78:4c:73:3c:41:
b9:76:2d:c8:66:6c:8b:cd:fc:71:b2:47:46:aa:35:
7c:3a:8e:fe:ec:22:fb:31:c8:fd:35:98:4c:38:7c:
d1:ac:3b:e7:12:d6:a6:65:83:59:d6:27:ae:53:74:
32:3f:56:1c:e0:c5:53:f5:a9:5f:80:e6:62:14:65:
6f:4c:96:fa:a0:19:8f:b2:2b:5a:9f:48:5a:d2:8c:
5f:d1:cd:6e:0f:21:2d:6d:72:74:5c:ac:9a:80:fb:
41:97:fa:66:c5:27:60:6c:35:b8:ac:f7:bc:63:6d:
6b:54:be:c2:e6:f8:7c:2e:c1:fc:b9:35:be:36:81:
5e:a3:33:2c:61:84:e3:84:46:11:15:37:71:ac:d6:
67:54:29:27:88:6a:3f:5f:83:3f:bf:6a:25:0f:b2:
95:d2:6f:c7:60:ca:53:27:fc:a2:56:f0:bb:ac:c9:
e7:82:9a:51:ca:9c:f0:6f:04:4c:fb:12:4a:60:e1:
4d:d6:19:dd:58:75:9d:ba:17:76:29:65:02:cf:ff:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:11:A7:D5:14:D6:BD:17:3C:AB:49:61:15:30:87:07:7F:F9:16
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2b:81:47:f5:07:df:3a:02:52:70:5c:62:e1:b9:e4:16:17:
33:99:17:1f:79:9b:cb:6f:ea:d5:34:3c:a2:61:2c:24:f9:bb:
75:af:b5:93:f4:8f:1b:b8:f6:78:51:e2:28:f9:75:e5:64:8b:
c1:86:dd:5f:c0:68:54:4d:8d:41:2a:87:28:c3:32:53:b5:48:
36:2f:c9:5d:3f:6a:bf:5d:a3:b3:51:da:ca:66:18:d0:3e:38:
5c:f0:58:25:cd:87:bd:e0:bf:b7:48:24:22:5d:88:0d:37:26:
6a:7b:33:cb:bf:b8:05:8b:6d:86:01:2c:1a:8d:16:49:06:5e:
dd:ab:de:ac:5b:4a:20:03:d7:50:37:60:b9:cd:ae:f8:05:72:
08:88:85:ce:07:ba:cf:3a:ae:a0:7f:4a:2d:8d:78:95:b2:f9:
8e:af:67:e8:fc:f7:e5:44:3b:4e:6d:7e:54:2e:53:5f:29:3b:
d6:04:a4:e4:65:51:1c:5a:77:c3:de:3a:12:cd:d7:51:56:2a:
cb:8b:12:5f:6b:c4:10:ef:c3:2f:b3:88:28:8b:cc:c6:6b:5f:
5b:ff:32:33:ab:c8:5d:cb:dc:1c:32:c4:08:6f:88:26:39:41:
eb:a4:53:a4:07:14:93:70:84:09:11:3a:56:db:f8:92:04:a5:
7d:64:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:29:16 2025 by rpki-client