Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: lkf+I+0E3EP7el66RKGyJEyPZQlaoE2Z+So/XU3gTdk=
Subject key identifier: 19:C4:72:D6:A4:F9:8A:5D:3B:B8:5C:13:A2:97:39:E2:BF:BD:50:0A
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 0196BA488B451F4680D6F6CBB15D7EBA7CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 04B9
Signing time: Sat 10 May 2025 13:00:38 +0000
Manifest this update: Sat 10 May 2025 13:00:38 +0000
Manifest next update: Sun 11 May 2025 13:00:38 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: H87kMU/GxhejDfxmtKYFnj2jarKEjiGMfd9Opq6Kb7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:8b:45:1f:46:80:d6:f6:cb:b1:5d:7e:ba:7c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: May 10 13:00:38 2025 GMT
Not After : May 11 13:00:38 2025 GMT
Subject: CN=19c472d6a4f98a5d3bb85c13a29739e2bfbd500a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:01:b5:44:d6:92:91:7f:cf:86:c2:73:b2:
cf:5f:25:13:1c:ad:74:ce:af:ef:0b:bc:0a:04:da:
3c:2c:07:c7:4d:da:fb:94:62:9b:6a:54:ac:a5:a4:
d4:e8:e6:81:08:f4:b7:dc:34:8d:c0:65:ff:82:cc:
0f:58:6f:b8:6d:78:35:be:a1:10:2e:43:b6:d8:67:
9b:97:2f:b6:54:83:a5:56:47:0d:4f:56:85:05:0f:
eb:27:ea:93:18:e0:cc:33:34:73:f5:03:56:fb:b5:
c2:fe:b5:e4:fb:7e:46:81:69:42:15:6e:10:f6:50:
8b:bd:5d:d5:93:e3:4c:ab:b2:2c:28:a4:6f:15:dc:
3e:f4:0a:b1:04:4c:46:7c:b6:4a:d7:61:47:6a:9f:
f9:16:2e:88:92:53:0b:90:50:c6:85:dc:ae:70:90:
85:dc:60:9f:98:0f:e3:03:23:55:f6:9a:23:8a:f0:
c2:35:a5:ff:71:95:05:a8:0d:2f:c9:3b:c1:9b:42:
db:53:be:35:e8:4b:bc:1a:f0:2a:75:47:01:63:d0:
16:7d:7c:5c:0f:4c:22:16:41:37:0d:fc:74:12:b3:
14:12:00:a3:9b:41:c2:9a:d1:e7:f5:ed:94:19:b5:
9d:c1:27:ae:8b:ef:35:dc:1b:19:c2:3c:1c:9b:29:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C4:72:D6:A4:F9:8A:5D:3B:B8:5C:13:A2:97:39:E2:BF:BD:50:0A
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:62:ae:fa:61:08:50:86:b1:a7:ef:d7:19:83:ba:b8:9d:21:
55:eb:44:aa:0a:2c:6a:d7:d5:29:f8:62:5e:28:14:f4:95:e8:
e0:c3:33:2c:b8:2b:a5:1b:6a:ad:c5:a3:1a:03:7d:b9:e9:7d:
19:24:30:ce:ef:47:70:d4:d6:4f:07:7a:25:0c:41:2d:8c:47:
1c:65:ff:5b:d2:e1:dc:fa:23:f9:28:8b:42:13:b9:38:e4:0b:
2a:d5:69:1f:bb:83:57:75:32:03:10:4d:8f:90:fa:a0:1d:5e:
c1:28:63:53:ac:85:21:a5:b4:57:af:9c:a0:29:33:98:05:96:
2a:cc:ad:71:db:29:f4:5f:77:c6:82:df:f4:9a:c1:b6:f0:5e:
15:4f:6a:4d:97:dd:32:67:ab:25:b8:a5:ee:8e:a1:7e:37:14:
2b:67:ba:34:c7:64:e0:1a:12:9a:02:1f:43:e2:52:eb:f8:30:
57:98:6d:9e:37:1b:5d:cf:ab:2f:49:86:f4:d3:fe:9e:e7:05:
36:83:c9:f6:12:9f:ad:1d:49:ef:b6:94:87:30:0f:fa:e5:82:
c6:b2:67:05:6a:83:7a:50:77:7e:85:fc:8b:05:64:e7:f7:7a:
1c:3d:11:62:1f:5c:88:e5:6d:9a:a5:cb:a9:b2:e9:59:a4:ec:
ba:48:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:29:29 2025 by rpki-client