Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: QhURTlj/nC4Us6IjkQQhhCInytSxjJO2PS19U7tPfIU=
Subject key identifier: E4:0D:94:A1:20:52:AF:49:A7:CF:63:E4:FC:51:68:D9:E7:EA:3A:EB
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 0196BC6DE0A814CBD9B1FF7F58A1C36268C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 14C6
Signing time: Sat 10 May 2025 23:00:39 +0000
Manifest this update: Sat 10 May 2025 23:00:39 +0000
Manifest next update: Sun 11 May 2025 23:00:39 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: E5NSOxZBO5KWz9iHAF4kR3b7WxXJsB3Qc7kjqdl8KP8=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:e0:a8:14:cb:d9:b1:ff:7f:58:a1:c3:62:68:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: May 10 23:00:39 2025 GMT
Not After : May 11 23:00:39 2025 GMT
Subject: CN=e40d94a12052af49a7cf63e4fc5168d9e7ea3aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:6c:58:c7:6b:f4:80:c1:e1:5a:16:5f:60:
b4:dd:8d:42:84:95:5f:4e:e7:88:d8:ac:04:7f:9d:
d1:b2:05:a0:ac:91:84:99:45:82:cd:30:18:94:fe:
f9:95:e9:0c:71:cb:13:5f:bd:01:ca:63:5a:ec:e4:
6f:74:b9:c1:d5:44:29:ca:d8:ce:fb:41:a2:de:7b:
35:be:76:97:da:16:73:35:1a:99:4f:46:7e:27:e9:
0f:0e:63:0b:9a:4d:40:24:71:2e:ed:ed:59:d6:28:
9a:da:e8:fc:5d:da:e5:af:6e:94:4d:4e:98:d0:28:
16:66:95:0c:aa:a0:bf:39:b2:e5:2b:59:97:da:58:
e1:65:4f:5e:f9:c8:13:0b:20:a3:ff:7c:a2:47:b7:
45:39:be:bb:50:2d:84:41:c5:d9:9c:52:60:1f:db:
34:22:9a:7f:36:f5:86:f0:99:35:82:38:d3:83:2b:
3e:99:54:83:37:24:0d:db:ac:7f:b6:81:61:62:4f:
9e:86:f8:ee:89:f5:2c:1a:fe:ae:2b:68:21:fb:03:
24:11:78:d5:e3:39:b9:57:6f:b9:08:30:88:18:25:
76:91:d9:a3:16:37:f5:a8:d9:32:bd:55:e3:c4:9d:
13:c8:89:e8:71:70:24:76:a0:8b:58:18:bb:cb:93:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:94:A1:20:52:AF:49:A7:CF:63:E4:FC:51:68:D9:E7:EA:3A:EB
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:67:fc:16:d5:32:a5:46:c9:e9:06:39:93:8a:90:c1:5f:4c:
3c:7c:a5:90:ff:0d:7e:f5:22:08:cc:ef:30:10:e9:ec:4a:9e:
b1:58:2f:d7:9c:22:e8:28:ad:c9:d9:48:31:a3:af:21:01:b2:
34:49:1d:57:4f:0f:91:5e:32:39:9d:b8:03:09:05:89:97:54:
2c:ca:90:31:d1:90:72:bd:4f:18:df:54:e9:d3:1c:0b:e2:cf:
1a:c1:1d:3a:b0:01:f9:f9:16:cd:a9:05:a5:b1:42:4e:42:27:
6a:1e:d0:89:ed:03:69:0d:69:bb:27:ee:64:98:9a:8c:08:b5:
f7:2d:be:d6:8e:a6:6a:03:d3:9d:78:42:e3:f1:58:4d:cb:34:
aa:cb:41:0e:9f:52:de:33:39:b7:8e:3b:a9:5c:62:74:fa:30:
31:76:25:74:5e:53:3c:02:55:c7:4a:4d:56:33:93:05:24:03:
5a:d4:3a:93:22:7a:7e:f4:c5:68:2c:14:63:48:22:9f:32:2b:
70:02:f8:68:aa:a7:ec:41:1c:fe:19:05:2c:73:c5:8e:8e:4e:
f5:7a:b7:dc:b1:bc:31:45:80:da:d0:50:5e:6d:12:d2:a6:29:
60:f7:5f:50:70:5d:90:ad:94:9f:f6:a2:dd:81:de:93:81:6d:
30:ec:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:41:45 2025 by rpki-client