Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: jQjxLCI/AV8CdS3S8Y61kCvGyvAG12EnYMQ/l3viDHg=
Subject key identifier: 73:01:1D:D2:E5:5D:C4:37:41:02:90:75:20:62:DB:90:EA:83:23:E3
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 0196BE93457700C328EC4F0ADC2CF0E1DE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 09:00:44 +0000
Manifest this update: Sun 11 May 2025 09:00:44 +0000
Manifest next update: Mon 12 May 2025 09:00:44 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: wZwVkIhmJwdSwGVhDak6q6hRXo+MaROvSAqIguHRs3Y=)
2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:45:77:00:c3:28:ec:4f:0a:dc:2c:f0:e1:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: May 11 09:00:44 2025 GMT
Not After : May 12 09:00:44 2025 GMT
Subject: CN=73011dd2e55dc437410290752062db90ea8323e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:61:83:ea:ac:55:ec:30:df:bb:e7:0f:b3:
71:3e:04:84:00:72:5f:85:39:55:7e:82:50:c8:da:
4f:e7:07:d4:8c:1a:2e:31:b2:f5:2b:53:08:05:40:
7e:1d:65:04:f2:77:f8:dc:d3:e7:9d:de:f0:de:29:
d6:2c:f5:f4:41:a1:ad:f1:2b:3a:83:dd:05:0e:52:
78:25:7c:ca:a8:50:48:a1:1b:f7:fa:da:8e:e5:6e:
d4:e2:eb:2c:04:d6:8a:20:b9:57:ab:2d:ca:6c:7c:
9e:ab:16:97:67:ce:c8:6a:ce:81:84:1a:b5:4f:76:
fc:95:c5:3c:f5:b7:26:d2:7f:83:c2:a6:3e:be:7b:
36:47:d4:3f:d1:60:e7:70:e8:e6:c4:e7:ea:6a:c0:
76:71:c8:11:20:aa:55:4c:ab:71:b9:d7:ca:9d:2a:
e2:34:a3:2d:30:13:c0:e2:4b:91:bc:a6:73:bc:53:
f0:66:27:7d:70:2d:a7:e9:25:30:83:95:9d:31:3c:
98:55:8b:28:dd:5f:ba:59:82:fa:04:b6:c1:81:12:
91:99:5d:c8:d4:1c:bf:37:92:ce:df:64:c1:d9:2e:
79:da:37:13:18:52:c1:94:6c:b8:e0:84:04:ff:0a:
91:bb:5e:5d:9a:1c:52:13:9f:68:f5:b2:a5:a9:83:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:01:1D:D2:E5:5D:C4:37:41:02:90:75:20:62:DB:90:EA:83:23:E3
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:61:15:22:a6:22:9e:aa:2a:d8:12:df:84:87:ca:67:64:
0a:0e:92:4a:04:fa:d4:b0:0d:05:f1:14:2c:72:65:a2:e1:4d:
ce:26:20:07:8f:6b:f8:31:bf:3f:4d:03:2c:9e:67:5c:32:f9:
43:c4:a4:44:17:b9:39:34:99:96:05:7f:c8:7a:a5:96:61:ef:
bb:cc:d0:f8:3d:f9:65:a6:f8:03:ab:8d:c5:cc:54:0f:64:93:
10:45:af:ac:02:73:ab:ce:fe:72:6f:d7:2f:b2:99:5f:4d:66:
e9:4d:eb:65:cc:47:92:ce:6d:bd:4c:6b:e3:87:64:a9:32:1e:
e5:14:97:f2:fd:3c:d9:04:5a:7f:4a:88:51:a8:4b:07:b8:eb:
31:11:85:f4:fe:aa:ea:80:b1:2c:2f:e7:8b:e4:4c:18:c7:50:
0b:b4:58:fe:ce:1d:68:d7:7d:b6:49:48:47:71:ff:b6:52:66:
ce:71:13:5d:6b:c6:69:39:71:ea:46:d9:74:b4:f0:c7:30:34:
4e:cc:ea:0d:30:8c:81:5d:ce:d5:46:fb:5f:c5:e9:6f:52:e7:
92:17:fa:09:25:ed:84:c7:08:f1:56:93:94:8e:8f:63:e4:d4:
1a:4b:0a:bf:7d:98:17:38:1c:2e:33:d7:b3:60:a6:bc:ae:87:
c1:2d:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:27:05 2025 by rpki-client