Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: hMbjQ/7MpEYZcYMKkTm2xQvgwkiHiwitXYTHNM/xE3U=
Subject key identifier: 43:64:3A:74:31:77:59:15:60:3D:EE:5E:F7:0E:14:2C:5B:89:F8:8C
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 0196B66C30C45EAC8C71FFDC10E684E92E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 19:01:05 +0000
Manifest this update: Fri 09 May 2025 19:01:05 +0000
Manifest next update: Sat 10 May 2025 19:01:05 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: NnslIG1SUInic5iELL9K4O5S3o9C41FzfMo/ekedqeo=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:30:c4:5e:ac:8c:71:ff:dc:10:e6:84:e9:2e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: May 9 19:01:05 2025 GMT
Not After : May 10 19:01:05 2025 GMT
Subject: CN=43643a7431775915603dee5ef70e142c5b89f88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:bf:7d:45:9d:bf:21:1a:92:80:39:a8:d3:
93:13:eb:f9:86:98:6e:7c:f1:fd:b7:b0:4d:8e:40:
7b:ee:d2:25:c3:c0:7f:7f:26:73:9c:7b:de:cd:4b:
15:3d:7b:27:e4:c9:b5:36:9f:50:0a:50:75:5c:2a:
57:92:5d:d9:73:fa:d4:bf:0b:a9:ac:17:92:56:e8:
6e:1f:62:62:a1:75:30:54:25:82:3a:47:e5:58:ef:
f9:ec:7b:65:1f:f9:b2:0f:95:cf:12:55:c5:ed:c1:
44:f1:7d:12:45:d9:62:cf:82:75:3d:81:0a:e4:ab:
ea:7a:7a:c7:ce:95:4f:d6:33:34:c9:4c:1e:11:84:
55:e3:45:b4:74:13:18:d4:cb:d0:18:cd:40:c9:67:
84:70:84:fd:74:d8:de:70:26:6f:97:71:b2:88:0b:
e4:25:25:6d:65:83:c0:a9:01:d2:1b:9f:cd:1d:3d:
c0:7f:ee:f3:16:78:b6:c4:ac:6f:e2:e0:0d:a1:12:
bb:03:da:f8:3b:2b:3e:ed:73:1f:37:fd:01:0c:33:
40:2d:bc:fe:dd:1c:9d:73:e4:dc:d0:07:20:45:fb:
2b:43:39:84:f0:7d:df:c2:0a:3d:b1:10:5f:f6:d9:
df:05:8e:27:18:8e:93:ed:94:20:ef:b0:06:2d:57:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:3A:74:31:77:59:15:60:3D:EE:5E:F7:0E:14:2C:5B:89:F8:8C
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:53:01:c6:62:54:8e:69:66:bf:b4:f3:cd:ad:7d:b6:d3:67:
27:98:5f:04:eb:9d:6f:44:ff:36:65:1b:83:1c:bd:b4:60:fb:
93:ea:19:3c:e5:39:28:a9:1c:5c:78:af:64:41:d7:eb:63:9d:
f1:67:fa:51:3e:28:42:4c:11:87:aa:bb:ec:be:c9:ce:14:b6:
a3:fc:f5:fa:e5:92:b9:8d:e2:c2:d9:28:8c:55:ec:cd:2a:34:
95:78:49:9b:de:af:66:28:c0:11:dc:b5:a0:45:65:90:78:d5:
f8:1c:6a:89:95:70:b3:51:83:76:9e:c0:cf:94:47:f8:2b:66:
cc:59:c0:f4:c5:a9:f2:6d:3f:39:d3:fc:c8:9a:f8:36:c3:3a:
a5:72:de:ec:b9:37:e8:5e:62:72:90:0e:ad:47:d2:5b:b6:80:
d1:13:96:48:94:ff:f8:e4:70:45:19:07:47:0d:44:ee:9b:7b:
8e:cd:ff:9c:e9:43:7d:f4:9d:27:eb:2e:2d:e2:2c:45:93:98:
3e:08:40:e1:56:a9:a6:0c:ab:a8:3d:03:31:86:ca:db:78:af:
36:7d:82:c9:70:3e:aa:c8:f0:bd:e9:95:09:fc:67:29:8e:da:
0c:98:b7:28:e2:a4:3a:b1:bb:10:51:27:6a:bd:d5:78:7a:94:
c1:35:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:01:39 2025 by rpki-client