Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: yiH+hGUWa2dSSf5JBCUQYyuO9YcpuV4/YD4GnJ4U/pQ=
Subject key identifier: A1:EE:8C:57:F1:D9:AD:D8:5F:AA:81:A2:40:27:C0:CE:55:4D:A1:0D
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 01969E99FA22310053F652E81AD7BD8933F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 04:00:13 +0000
Manifest this update: Mon 05 May 2025 04:00:13 +0000
Manifest next update: Tue 06 May 2025 04:00:13 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: TO72AemWwUY648PJRhxIifvoNj4sPCv95cMApMVkfaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:99:fa:22:31:00:53:f6:52:e8:1a:d7:bd:89:33:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: May 5 04:00:13 2025 GMT
Not After : May 6 04:00:13 2025 GMT
Subject: CN=a1ee8c57f1d9add85faa81a24027c0ce554da10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:8f:95:c3:86:9d:61:a1:e2:55:25:da:54:
83:48:f9:28:b7:04:7f:cd:50:94:fa:c2:de:1d:80:
4d:ff:d1:2f:38:73:27:8f:22:01:d6:ab:e0:c4:09:
b3:42:42:f6:0f:dd:c1:e2:15:97:5a:5f:0c:39:b9:
9b:ac:44:4a:c5:80:d1:22:a9:c8:e7:58:11:3e:18:
e5:21:d6:4d:6b:04:f7:ba:d0:c2:e7:c2:a1:fa:0b:
ae:65:ac:f5:56:56:b9:51:89:37:86:a5:26:71:99:
59:ab:dc:e0:48:96:80:45:9b:be:70:34:ff:9c:9e:
5e:f9:2b:f4:07:ed:8c:ba:dc:5d:01:73:a4:97:67:
e1:ac:04:d5:4e:eb:79:51:fb:63:32:57:ea:db:b5:
7f:25:0d:7b:8c:cf:c5:5d:ca:d7:31:ea:e6:1b:cb:
2a:cd:e9:e6:87:c7:16:78:e7:67:26:a0:3f:9d:13:
a9:3a:99:0c:ea:06:77:3c:d9:06:83:af:b1:70:8a:
c7:da:60:97:74:d8:b0:78:44:d5:58:a2:28:82:9c:
e2:b5:3f:39:9b:6f:80:22:ec:77:fa:fe:52:5c:cd:
1f:1a:9c:74:96:ef:35:2d:9e:98:3b:71:ed:ca:66:
53:5b:2e:81:b5:2c:48:81:47:c0:86:4e:c5:e1:e1:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EE:8C:57:F1:D9:AD:D8:5F:AA:81:A2:40:27:C0:CE:55:4D:A1:0D
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d0:45:c3:4b:02:10:3d:bb:fd:19:e7:69:22:be:2b:2c:ec:
63:ca:0a:c6:f0:ce:7e:4f:6d:31:52:de:a4:1e:5a:61:c0:1c:
7d:b8:8c:c6:6c:46:32:35:de:04:a1:13:82:f0:f5:04:1d:48:
b3:95:ce:85:29:46:ee:a4:59:81:b2:4a:d5:f0:ca:bf:70:1c:
4a:f7:c7:d7:fd:58:b6:68:da:f2:22:b1:30:57:1b:8f:06:2a:
a5:89:c8:59:72:a9:ff:53:1e:51:dd:45:bd:a6:8f:17:c5:e2:
68:83:d1:6e:75:cf:14:82:56:bc:ad:5a:eb:5d:40:0f:cf:cf:
40:6e:dd:9a:66:46:00:26:07:43:2c:ff:46:35:be:b7:08:76:
71:a2:85:ea:4a:c7:c9:53:cb:a3:fc:c3:9f:80:5e:88:21:50:
c9:9b:21:90:ee:8c:71:62:a0:9a:96:39:aa:b8:42:a0:01:ff:
c3:b2:e5:61:ef:e5:45:ff:03:48:8e:9c:c7:05:97:a1:f4:7e:
f6:e2:70:54:62:ef:6d:8b:c5:dc:9d:33:84:17:cb:05:f4:bf:
4e:c9:89:b3:a2:53:74:51:df:32:e1:02:c0:31:bb:cf:fe:2e:
b6:c1:ea:22:69:fc:bf:5a:b2:40:73:17:23:d9:9b:18:a5:3d:
a8:5a:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:10:48 2025 by rpki-client