Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: AZZQx7YjSwqqPLY+UrexkIarR5av1WYv10ks9Q14VDQ=
Subject key identifier: 8B:50:37:A5:2F:FA:06:35:4A:5A:6D:56:0E:37:58:B6:80:A7:F4:83
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 0196B6A25423288792CCE6DE5D15CA3C8FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 14EF
Signing time: Fri 09 May 2025 20:00:13 +0000
Manifest this update: Fri 09 May 2025 20:00:13 +0000
Manifest next update: Sat 10 May 2025 20:00:13 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: HjpVcLE18A2VT75OG/A4HXmICR95j2uGjeYmjOdufmg=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:54:23:28:87:92:cc:e6:de:5d:15:ca:3c:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: May 9 20:00:13 2025 GMT
Not After : May 10 20:00:13 2025 GMT
Subject: CN=8b5037a52ffa06354a5a6d560e3758b680a7f483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:e6:23:e0:f5:37:0d:3d:8a:52:d0:2c:24:
0b:dd:c7:fa:d1:16:aa:15:da:e3:1b:50:82:4d:67:
a9:9f:f8:ef:8e:36:ea:73:7b:f2:aa:42:12:b0:be:
5f:ce:9b:a5:c6:4a:f7:02:cb:4c:55:bf:d3:ad:47:
8e:8f:09:9d:be:90:74:87:19:e1:d2:aa:65:c6:ab:
1f:4b:53:d3:c5:52:1f:58:9b:e7:81:cc:e9:32:15:
f9:70:29:b1:43:d5:62:8b:8e:25:e4:81:9c:df:62:
ec:c5:61:0d:ff:87:49:18:e3:a0:7d:e3:53:97:0d:
63:06:e6:5f:bb:8a:cf:a7:19:9a:3c:a5:15:0b:26:
d0:9c:a5:f1:3e:92:ac:58:aa:bd:34:cd:d8:87:da:
86:08:14:ee:8d:07:95:23:61:3b:b1:06:40:66:0c:
be:ab:69:b3:f5:92:d4:45:50:92:c1:9f:da:ae:4d:
b3:6c:3b:0c:23:e9:5c:4e:44:f8:ea:dd:a6:12:63:
f4:5a:4e:3b:c4:ac:d7:bb:59:08:6c:75:de:d3:dd:
56:df:a6:81:06:36:4d:7d:fe:bd:a2:83:1a:44:87:
ef:5d:fa:03:4a:fc:ee:19:4f:79:06:c0:fd:72:7c:
2d:19:71:78:b6:53:26:85:63:fd:ad:56:97:70:85:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:37:A5:2F:FA:06:35:4A:5A:6D:56:0E:37:58:B6:80:A7:F4:83
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:10:51:17:50:7e:8d:6b:52:4e:9d:3b:7c:d0:7b:ec:8c:63:
39:d3:6b:86:d1:46:f7:28:7f:df:86:59:a0:a3:7c:97:cd:ba:
98:e5:72:34:05:bf:53:59:71:cd:af:a4:7e:be:a4:a9:a6:7a:
8c:4c:ae:1d:62:99:6e:38:b6:49:5e:8a:e5:6d:e6:1e:60:b5:
4d:fb:fa:5a:1e:0f:72:d6:86:98:92:44:d1:60:cf:8f:25:a2:
ef:99:26:98:2c:af:79:7a:c4:6f:df:47:15:e9:67:b5:d9:1e:
68:6e:52:27:21:1d:6d:18:5c:88:93:1c:0a:3d:0e:b2:97:e6:
a2:83:9b:5d:d9:07:42:b6:a8:76:c6:c0:1f:6a:10:fd:cc:13:
b4:45:22:72:38:65:69:a3:98:bb:2b:8c:eb:0d:10:a5:11:e4:
c4:f7:89:23:64:da:71:83:d5:ba:1b:e2:57:88:56:96:17:3a:
3f:ab:3e:bb:22:7a:8e:39:5c:61:9e:c5:a3:16:81:be:b2:a7:
7e:5a:fb:f0:0f:54:9d:f0:54:86:a3:3e:66:78:26:78:a0:b4:
8c:da:a4:9b:8a:f5:db:be:45:2e:89:95:39:03:ba:90:0b:79:
bf:81:d0:d7:79:b9:cd:31:47:91:71:0f:89:87:2e:39:c0:5f:
59:58:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:48:18 2025 by rpki-client