Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: fM6j5o+ZxRjFj9htOhDIlFrx4XsWqhh5kHsCfuDvskI=
Subject key identifier: CD:8E:AA:07:08:3A:4C:57:93:10:13:A8:52:4C:EA:1A:19:09:82:FD
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 0196BB92FB5FB6058D5BFEC6846635D6EBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 1259
Signing time: Sat 10 May 2025 19:01:34 +0000
Manifest this update: Sat 10 May 2025 19:01:34 +0000
Manifest next update: Sun 11 May 2025 19:01:34 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: 9eMTG9zT/6A79xX1XsYh10G4SWtLk1KMAeYpDFJvDcg=)
2: gXT82y4_ruBTwVaX5bN2hgE4EKo.roa (hash: eKWZFW/juKdnFf5IqmdyNTYbtOCEhhxhQ9S8D2wh2us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:fb:5f:b6:05:8d:5b:fe:c6:84:66:35:d6:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: May 10 19:01:34 2025 GMT
Not After : May 11 19:01:34 2025 GMT
Subject: CN=cd8eaa07083a4c57931013a8524cea1a190982fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:f6:d0:d7:1b:f3:8b:c8:fc:c8:26:bc:fe:
0d:c5:2a:a6:96:4b:97:95:46:81:c7:4c:52:81:5a:
f7:82:29:3d:f1:82:db:b4:8b:52:53:73:ac:28:e1:
16:2a:2f:6b:c0:87:67:45:2d:ee:5a:13:8e:14:b2:
e0:3d:4b:63:1e:4e:22:a8:e3:c0:45:80:ab:42:5c:
6f:1b:9a:24:7b:ed:02:77:9e:b1:89:42:cb:16:f2:
b6:da:8b:9c:b9:d0:4b:e0:36:49:cc:08:d5:6f:fa:
75:03:d4:98:6d:89:b8:b1:95:49:63:cf:d5:e4:c5:
48:7b:36:4b:d2:b7:b6:e5:63:21:5a:6a:e2:4a:1a:
1c:08:57:13:f3:84:af:64:f5:f4:81:c5:18:e8:e7:
87:89:21:62:d1:a8:f5:e3:e2:14:f3:90:06:01:ba:
ce:55:b3:f5:02:9b:b5:b1:1c:49:2a:91:48:6f:c5:
22:f8:75:1c:cb:e8:f4:e1:7b:31:00:0a:13:e2:f7:
25:3b:f3:3f:88:48:01:2f:9b:2c:47:05:44:56:d2:
fd:b5:a4:0c:cf:8a:4f:db:f5:3d:57:84:1a:30:59:
38:88:87:c3:fb:bf:c9:24:be:35:c4:a9:a5:ba:8f:
e8:a7:92:1d:d9:ce:31:57:0a:c3:92:4a:76:44:bc:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:AA:07:08:3A:4C:57:93:10:13:A8:52:4C:EA:1A:19:09:82:FD
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:da:b0:14:67:c0:33:78:6c:6f:f0:b0:eb:e8:d3:8a:22:55:
1e:c9:17:1a:10:7d:50:5a:dc:ea:79:59:c4:f0:f2:c4:4c:c8:
d7:a7:18:df:a7:52:da:96:57:9e:6f:f1:5e:47:75:ea:42:ad:
96:ed:a9:73:ab:0f:b9:b8:0a:09:35:95:76:13:16:f8:29:dd:
97:ae:8c:fe:af:18:aa:48:a8:cb:18:b6:a6:17:67:ef:fc:11:
af:98:21:f1:c6:a4:7a:f0:d3:34:ae:c9:ec:47:f8:45:51:c1:
70:80:ea:71:17:0f:3a:4d:c8:70:72:12:8c:3a:78:78:ba:d3:
e8:a3:5c:59:32:04:9a:2d:99:23:34:c0:82:a2:e0:fb:5b:ad:
b2:e5:46:24:8e:d6:72:c0:0b:11:09:63:a4:26:5a:fb:25:18:
50:c3:a9:13:88:0f:1c:e7:a6:3d:72:32:50:b8:7f:13:16:a7:
64:04:46:dd:2f:db:61:17:4f:4b:b4:bc:68:c4:39:12:20:f7:
db:0d:6e:07:3a:f2:6d:e1:6d:bb:f5:c0:fc:7a:db:11:b4:27:
92:68:58:a2:ab:2d:41:b6:80:2b:c2:06:83:21:f4:b1:87:5d:
46:d2:c2:3d:ef:04:2b:74:f1:2e:4c:64:69:04:06:2b:25:47:
cd:86:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:14:22 2025 by rpki-client