Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: F285RKjS8jTo0P9SipERHdhOw0DRW1St9e0LAU6665c=
Subject key identifier: EB:D3:23:95:3C:B9:E8:ED:99:99:D1:30:40:33:CA:BB:A6:41:65:E2
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 0196A6C23D320A13645BE8B510A619E45D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 02B1
Signing time: Tue 06 May 2025 18:01:09 +0000
Manifest this update: Tue 06 May 2025 18:01:09 +0000
Manifest next update: Wed 07 May 2025 18:01:09 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: lpzd5JlM8opadS8vWnomDapSu5QFrpuyiTHLRFL2bc4=)
2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c2:3d:32:0a:13:64:5b:e8:b5:10:a6:19:e4:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: May 6 18:01:09 2025 GMT
Not After : May 7 18:01:09 2025 GMT
Subject: CN=ebd323953cb9e8ed9999d1304033cabba64165e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:60:58:02:f4:1e:44:4e:7c:d8:5d:b1:c8:
7b:29:f3:5a:39:3c:64:d9:46:10:50:6e:bb:9c:de:
68:d4:61:01:bf:44:ed:57:8f:35:13:01:23:dd:f5:
9f:56:a4:ba:3e:2b:f3:77:35:50:40:e7:fc:64:74:
c8:c2:90:44:67:9f:47:b6:9c:ba:b9:b1:6a:96:a3:
da:e0:b9:fd:69:3f:aa:96:2d:e9:ad:7b:49:39:15:
f5:54:16:ac:b3:10:2a:3a:48:a8:13:cc:9b:50:09:
0a:2e:fb:b5:63:c4:58:d9:8f:fa:af:a1:54:28:f1:
1e:bc:93:e8:7b:43:69:10:38:86:6e:91:68:74:c1:
fc:af:13:bf:a1:d7:b6:1d:f5:fb:12:63:35:8d:ab:
7b:1b:44:f5:0b:df:fe:36:49:f6:40:d4:a7:54:e6:
50:3e:37:33:97:9e:71:62:5b:92:4c:63:e6:bf:51:
90:97:a6:e1:40:68:d4:ae:37:df:a9:09:c2:ca:3e:
4a:4f:0f:49:a2:2c:81:e3:17:d7:9e:c3:5d:cb:09:
ab:a9:6c:9c:3d:9f:42:d0:ec:ae:65:3c:46:12:b8:
d6:7e:1f:75:99:0b:75:c0:d6:c4:54:70:3a:24:9c:
9a:ab:c7:ac:f5:4a:db:e1:c6:f6:e2:26:16:00:11:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:23:95:3C:B9:E8:ED:99:99:D1:30:40:33:CA:BB:A6:41:65:E2
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c8:97:86:12:e6:f7:ea:b8:90:1b:92:67:ad:80:d7:9d:cf:
34:88:93:58:90:e3:40:9d:74:c9:68:f3:45:3a:d1:7c:c9:8e:
dd:5f:94:bd:a3:a2:a1:0e:df:87:a2:d5:39:da:a2:7d:d4:d8:
37:a3:80:3e:e7:2b:3e:a2:fc:b1:43:40:79:f0:61:aa:8b:38:
0e:90:da:03:8a:b6:d7:c9:25:7b:71:c2:f1:a0:5d:df:f5:40:
25:71:55:60:78:87:5f:ad:b9:b8:65:47:b3:96:fd:37:e5:dd:
1b:76:00:98:2a:8e:00:42:ff:f8:8c:5b:77:40:71:ce:e4:e2:
58:45:43:bb:0b:00:29:61:b5:74:a1:87:a8:36:ec:de:3e:d0:
4a:4e:5e:49:31:93:4f:f8:ca:d5:ce:34:d2:45:6e:f3:3b:35:
91:23:dd:6b:dd:38:6e:ec:bb:d1:5d:91:81:5d:e5:2b:86:a8:
34:0b:dd:e4:05:0b:63:69:5e:6b:d0:c1:b2:84:59:80:68:47:
ea:63:07:00:29:7d:14:78:0c:97:83:cb:7e:47:6d:14:f7:20:
40:c4:c9:9b:2a:5e:94:aa:bb:2c:3e:88:60:29:ad:ed:27:c2:
8a:3d:e5:6b:7e:d7:a4:12:e8:4e:0f:83:87:cf:17:16:fb:9f:
76:9c:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:56:20 2025 by rpki-client