
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: 5abF72Tih+T6hRP6IP8COlsHwUmmhc5Y0aVkiirfpG4=
Subject key identifier: 8E:AC:5A:B2:DD:E1:FE:C0:2C:09:EB:0D:C9:DB:43:53:65:14:AC:51
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 0196CC857AD26D14B23ABDEAD835CD837298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0D40
Signing time: Wed 14 May 2025 02:00:21 +0000
Manifest this update: Wed 14 May 2025 02:00:21 +0000
Manifest next update: Thu 15 May 2025 02:00:21 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: WtIuSXM8Hdb0tysAaWl43oCre6MJeoHsX4rXGgtoskY=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:7a:d2:6d:14:b2:3a:bd:ea:d8:35:cd:83:72:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: May 14 02:00:21 2025 GMT
Not After : May 15 02:00:21 2025 GMT
Subject: CN=8eac5ab2dde1fec02c09eb0dc9db43536514ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:d7:cc:2b:c9:d6:a5:8d:79:56:bd:a1:4b:
fb:92:1d:49:b8:b6:45:54:6e:21:98:9b:54:33:04:
f1:e4:15:00:41:91:b1:aa:34:e6:98:35:a4:6f:48:
24:c6:9b:e9:3a:a0:e5:35:ac:64:69:3a:38:cd:1c:
95:d8:ea:e6:e4:61:31:37:6d:4d:64:db:d7:7f:f6:
fb:ea:ba:9e:ab:f1:55:e2:cd:ce:9a:10:74:7f:9b:
28:69:8d:e9:2f:4c:ea:f3:80:27:d9:8d:a1:2d:1b:
04:db:88:dc:05:ad:2e:01:62:ac:36:0a:9d:ae:1e:
1c:07:14:f9:9d:58:3e:ff:b8:72:5d:d8:3e:6b:af:
95:44:59:48:ed:bd:7e:23:25:2b:ca:f9:dd:bf:80:
73:16:9c:0a:5d:de:17:9d:2d:5b:c3:da:27:30:11:
14:a7:6c:92:b0:09:09:d2:66:62:91:e7:51:dc:c8:
25:65:25:3e:a6:3d:c0:25:81:c4:c5:1e:9d:51:55:
82:dd:59:6c:80:da:38:a4:bb:d7:d6:38:ef:66:95:
be:79:89:0a:1f:6e:80:74:02:08:ad:e4:c9:5b:e1:
a4:58:aa:85:d2:d3:b3:8a:5d:be:13:fd:fb:d8:b1:
29:bf:47:a1:84:12:d5:67:ed:a2:3c:ed:73:fd:ea:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:5A:B2:DD:E1:FE:C0:2C:09:EB:0D:C9:DB:43:53:65:14:AC:51
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:52:1a:2d:cb:2b:ea:38:e4:30:c4:a0:e8:c9:a0:1a:27:f0:
2d:b7:dd:d0:4b:82:b5:92:6a:57:b0:7b:c6:a3:53:09:b7:0d:
d8:c6:c6:68:4b:49:93:2f:dc:75:5c:e3:bf:46:b0:23:68:c4:
47:e1:6d:26:95:25:14:ca:ce:3e:c2:4c:e6:b2:b8:3b:51:a4:
d3:98:b0:0d:0b:83:f1:08:1d:50:25:17:b6:ba:12:ee:c3:2e:
5a:52:1a:b2:48:c9:49:a9:37:0a:8c:3a:88:48:e1:53:e1:7b:
5b:28:45:96:e9:04:79:4e:a8:76:6d:2a:bf:be:38:71:dd:d0:
37:d1:9c:b8:c3:93:53:07:e6:f0:54:72:5b:c5:af:86:1d:f5:
09:4b:ef:10:a5:05:f9:60:e9:9c:16:25:9b:b5:2a:d8:15:9f:
9c:9c:71:6b:f2:cf:62:88:1e:b3:21:cb:46:ac:86:c5:57:00:
5c:d9:ef:a5:9a:bd:93:44:a0:ce:23:66:4f:4a:d1:32:b2:a8:
5f:21:72:44:59:3f:da:9f:2b:3a:df:ea:83:59:2b:2b:4b:1f:
f7:8b:b5:2d:4a:22:5b:33:19:a8:4b:e7:0a:ce:e8:bb:98:e1:
cf:87:b6:76:3e:32:2b:c1:66:48:0f:57:0a:77:33:4e:1b:63:
ce:8b:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:55:17 2025 by rpki-client