Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: ODDUDLeVVIKBEjPR75jgxFokAySr/3sCH7y0YMJKrdU=
Subject key identifier: 4C:DC:4E:9F:7A:97:1A:EA:B3:3E:6F:B2:81:20:49:4C:87:AD:4D:F3
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 0196B8FF385E717F7143D21B7C6804B9FCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0C24
Signing time: Sat 10 May 2025 07:00:55 +0000
Manifest this update: Sat 10 May 2025 07:00:55 +0000
Manifest next update: Sun 11 May 2025 07:00:55 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: SY0+oziehS5zrq7KRPtFhk5J98NAyn0uB8+S+YRlRas=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:38:5e:71:7f:71:43:d2:1b:7c:68:04:b9:fc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: May 10 07:00:55 2025 GMT
Not After : May 11 07:00:55 2025 GMT
Subject: CN=4cdc4e9f7a971aeab33e6fb28120494c87ad4df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:79:a0:04:56:64:7f:8b:56:d2:f6:c2:77:
ed:df:a1:b4:57:23:30:66:e0:7d:87:3f:76:bd:14:
48:29:24:a6:4c:46:b1:5a:c3:ce:a2:37:57:04:6f:
cd:b7:f5:bf:7d:2c:1a:cd:26:30:df:b6:ce:4f:64:
09:f7:d2:09:bf:33:00:0f:f7:79:24:be:c2:c6:67:
90:8c:61:af:8b:06:0d:03:ad:a8:20:33:bc:9d:b3:
76:d6:2c:1d:29:20:4d:b8:72:27:7e:6c:78:a9:b9:
33:cc:14:0b:bb:f3:6a:cc:bc:fe:30:05:75:d7:7e:
44:7b:d2:a9:fb:05:2a:94:5b:70:54:f5:3c:41:bf:
5a:3e:6b:9e:5e:ba:5b:de:02:a4:37:80:04:26:ef:
7d:a7:e7:ca:42:8d:43:43:25:dd:c7:a4:cf:5d:80:
d2:dd:48:ff:22:30:36:b5:40:d2:25:6f:20:a0:c5:
4f:9c:f9:73:50:b3:aa:5f:e7:52:9e:ee:f4:1c:ad:
05:18:28:46:78:6b:45:23:5e:16:fd:97:ef:cd:d6:
4d:ff:ad:77:66:1a:7d:60:68:39:96:57:de:c2:d1:
a5:9b:d0:fa:aa:46:6d:4a:f6:96:4d:47:91:ea:2e:
57:be:c5:a4:e7:87:50:3b:6d:1a:82:a2:42:69:2f:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:4E:9F:7A:97:1A:EA:B3:3E:6F:B2:81:20:49:4C:87:AD:4D:F3
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8e:98:4a:ec:af:a5:31:dc:6e:a8:90:38:d4:43:bd:e6:a6:
f6:17:86:8a:a2:09:70:43:2c:76:f8:45:30:e4:d3:46:63:bf:
9b:00:f5:3a:c5:7c:4a:a6:52:79:30:60:0d:ab:f0:68:9b:6e:
a6:62:67:b7:98:5d:75:ad:c9:ec:d8:2b:43:9e:b4:d3:16:06:
96:bd:37:6d:4c:c4:54:e7:ed:7b:70:23:d3:72:d0:1b:fb:43:
ef:3b:3e:f1:fc:b2:8d:87:b3:2d:b8:e1:1b:7a:20:d2:a3:3a:
c0:c4:3e:f8:fc:a5:9b:34:3c:fc:27:70:61:6e:44:b1:34:cf:
31:c8:df:96:a2:30:fc:96:7e:1a:d3:8d:a6:12:a4:a6:24:48:
db:9e:3a:b3:fb:45:84:9c:c3:86:61:ea:c8:8d:34:9a:fb:02:
bc:e6:78:91:26:99:2d:3d:a7:d4:f6:98:e3:09:ee:d1:fb:a1:
f2:14:dc:4f:78:bc:bf:a5:bd:67:9a:99:89:bd:3e:0a:b7:fe:
a1:96:90:30:ac:c3:de:65:8a:a1:57:e4:a4:3d:95:2f:db:e7:
ca:57:70:99:cf:a2:93:22:25:c6:19:17:ce:89:7d:6f:04:df:
b1:13:03:64:46:6e:47:e9:6a:2f:99:5d:39:9d:98:c5:17:cb:
81:5d:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:01:06 2025 by rpki-client