Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: 4F3s84sclNBVXcWwvIExwrlrSZGe0GU9uz40e6SDC6I=
Subject key identifier: 4E:70:DC:D8:3E:70:89:1F:B8:FA:C4:17:F1:F8:B4:2B:E0:FF:6F:DD
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 0196C1CBC3C6F03B6D57C1350C73C7B8310E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 01C2
Signing time: Mon 12 May 2025 00:01:18 +0000
Manifest this update: Mon 12 May 2025 00:01:18 +0000
Manifest next update: Tue 13 May 2025 00:01:18 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: NH/epSdE/r5+jl/bmfFw3VyRTtrA0KJMsFIl2Nf6jJw=)
2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:c3:c6:f0:3b:6d:57:c1:35:0c:73:c7:b8:31:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: May 12 00:01:18 2025 GMT
Not After : May 13 00:01:18 2025 GMT
Subject: CN=4e70dcd83e70891fb8fac417f1f8b42be0ff6fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:9a:53:50:1e:26:39:39:b7:24:bc:75:05:
d3:ad:ee:6d:b5:6b:8b:e1:e4:9e:71:b2:fd:95:4e:
2e:96:7a:ec:cf:eb:9a:16:7c:75:26:c9:b5:b5:aa:
f4:95:f9:f6:8b:18:d5:14:f4:3f:a5:c2:0f:4d:8a:
07:d7:14:96:25:23:4d:3c:63:1c:f9:85:5f:49:4d:
4d:6b:2f:d2:3f:0e:36:36:4b:ae:89:34:3b:36:6b:
d9:b8:bf:f8:82:e6:a5:67:a8:53:ff:04:11:a0:5a:
f5:89:b4:c4:90:b0:75:e3:6c:39:5e:83:e8:f4:ba:
2a:5e:07:f9:8a:eb:f3:78:b6:20:2d:97:a2:f8:82:
23:5a:8f:08:c1:85:64:de:66:b1:55:1c:e9:4e:4f:
2b:0f:95:69:b3:50:03:7b:7f:37:a3:74:92:9d:61:
9f:2a:39:fc:eb:83:b7:56:c7:b3:53:c3:9e:63:1f:
24:49:bf:e9:81:ca:f4:7a:ad:b1:ab:4e:e7:dc:19:
9a:2d:14:13:ef:c6:01:86:54:c9:b7:ea:19:1e:6c:
60:bb:93:fe:8d:84:e2:2d:48:65:30:eb:24:2a:5a:
06:d0:95:3e:8c:e1:5c:5a:71:25:71:75:6b:c9:89:
b2:40:57:1e:06:22:a8:c6:70:62:1e:81:07:47:d9:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:70:DC:D8:3E:70:89:1F:B8:FA:C4:17:F1:F8:B4:2B:E0:FF:6F:DD
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:04:eb:f8:b6:34:0e:05:9b:53:0b:2c:4e:5a:70:a0:1b:bf:
51:25:9f:9c:02:2d:05:4e:c2:3d:ea:41:28:11:cb:96:3a:1c:
c8:38:0e:30:f5:08:79:2b:30:47:c7:6b:c2:43:77:95:1a:97:
76:53:cc:8e:63:41:77:e6:dc:1a:92:40:22:44:ae:fa:87:56:
7f:ed:59:8d:5c:7f:93:b8:82:9a:1c:e5:04:cf:5a:4c:fc:6f:
9c:6e:86:ab:78:ce:08:3d:5d:74:ff:97:5e:5f:3e:6f:c4:3b:
9d:66:37:54:86:be:92:da:1b:31:74:03:c4:53:49:f3:72:66:
d9:7f:d2:1f:6a:7b:91:b2:30:5b:f0:c2:b5:b4:d2:a0:72:f0:
1a:31:b7:5a:0a:b6:ca:18:ed:8e:9e:a3:db:0c:10:fe:7b:29:
f0:8e:62:f3:fc:45:c6:13:51:7d:9a:fb:a0:6f:f8:36:16:b5:
5e:ec:cb:f5:20:a1:21:f5:6b:79:4d:b8:45:b9:89:8d:e6:b0:
1a:16:42:bf:a1:12:8f:11:9f:cf:7d:30:7d:b1:74:1d:9e:84:
fb:41:24:b9:d6:40:da:48:78:20:71:da:9a:e9:76:da:4c:4d:
19:c9:00:6b:c3:33:f2:38:ba:bc:b4:68:29:67:6a:d6:50:7b:
3d:d3:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:08:18 2025 by rpki-client