Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: nQuZPPGSSUsNVc0usNLDS3qgmH6/r8Bm3OHC79LMI2k=
Subject key identifier: 81:1A:3B:94:11:3C:01:AE:26:42:B6:94:8C:CA:8E:E0:3C:A8:AD:16
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 0196C5A819F1A7D814499A70D8F2486451D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 18:00:50 +0000
Manifest this update: Mon 12 May 2025 18:00:50 +0000
Manifest next update: Tue 13 May 2025 18:00:50 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: DCr0KBKr6oNIVFgO5giCdxfFb4rLxUWo0cCf16aOB5Y=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:19:f1:a7:d8:14:49:9a:70:d8:f2:48:64:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: May 12 18:00:50 2025 GMT
Not After : May 13 18:00:50 2025 GMT
Subject: CN=811a3b94113c01ae2642b6948cca8ee03ca8ad16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:64:96:c9:53:b7:f1:fc:db:72:03:77:3e:
75:3f:7f:8c:20:34:3a:7e:58:5a:be:71:df:04:36:
02:e0:cf:16:b5:d5:78:31:63:5f:cb:52:53:dd:20:
12:ac:07:87:5f:1b:f0:24:fe:6b:fd:fc:a5:67:fe:
c5:0d:fd:f2:92:f8:91:2e:fb:51:e9:ad:0b:df:93:
8f:b2:5a:6b:90:fb:07:79:64:7e:27:b0:b7:55:a7:
d2:88:ea:d3:12:94:46:25:d8:ad:a9:a6:bf:e4:49:
f0:2c:45:39:62:69:9d:51:37:81:5b:f8:47:51:e3:
ac:87:2c:ca:04:7e:07:e0:00:d0:13:62:56:d3:76:
8c:c1:b7:4a:b5:96:a5:5e:a9:d1:61:98:be:f8:83:
e2:20:0d:fc:0c:b1:07:af:6b:7c:d1:73:0d:8d:5d:
5d:98:a0:41:07:52:06:4c:06:37:a5:95:0f:9f:e5:
42:ea:72:cd:c6:13:bf:7a:59:f6:b1:a8:51:07:fe:
de:e1:e7:93:7c:c1:56:00:8d:d7:50:53:00:63:39:
78:2d:06:ef:cc:be:66:68:6d:ea:ff:77:fb:81:e8:
ad:22:cc:2b:cf:c4:e3:5d:43:1c:cc:4c:0c:72:0f:
70:79:95:35:35:4a:d3:84:55:02:e0:83:5c:07:6a:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:3B:94:11:3C:01:AE:26:42:B6:94:8C:CA:8E:E0:3C:A8:AD:16
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b4:0d:14:6b:a6:9a:b8:0c:72:2e:13:75:5c:fc:95:3e:c4:
b1:56:a4:80:e1:a1:94:d9:c1:f1:e0:bd:76:a4:bc:db:29:e6:
1d:bb:fd:03:53:b4:97:08:22:84:78:24:47:9d:45:04:dd:cc:
a3:d4:b7:26:f6:80:b6:7a:01:75:3d:53:8f:1f:d3:90:64:91:
94:21:9c:cc:9e:ab:5f:18:89:18:bb:cf:e0:bc:dc:c1:a8:f3:
a0:2c:4c:2c:09:08:c5:c8:7b:7c:13:10:79:dc:c3:88:f6:da:
fd:a6:74:20:ca:50:28:18:8b:24:eb:3e:74:2c:2c:d3:f2:aa:
66:02:3e:69:2a:a5:81:e5:3a:b7:db:6a:f5:ea:5c:c6:97:cc:
4e:37:9b:a3:b1:f0:94:12:8d:26:d8:ba:c5:97:43:ee:44:21:
51:d5:34:43:7b:b6:0e:3f:02:7f:d2:03:de:25:92:2a:72:e0:
eb:0b:7b:42:57:e6:64:87:80:97:85:95:88:6f:2d:a0:23:64:
52:b1:3b:16:cd:d8:43:72:7e:15:58:7f:dc:ff:d9:d6:4f:cc:
e1:ee:47:a4:8b:30:60:12:f1:cc:14:3b:26:c6:88:eb:3f:3a:
24:f2:63:43:4c:5b:66:64:61:9d:d0:fc:11:f4:95:e3:40:1c:
ed:5d:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:55:18 2025 by rpki-client