Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: 8j3IIQmCPowVwfjsgymJjuOFLY2mWP4XFh/U87MohZ8=
Subject key identifier: DE:A0:7E:1A:A4:54:2B:38:E1:AA:31:7C:FE:A1:28:0D:64:2A:1A:25
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019688122090B15C392A20CB7DA39948A861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 19:00:11 +0000
Manifest this update: Wed 30 Apr 2025 19:00:11 +0000
Manifest next update: Thu 01 May 2025 19:00:11 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: QYLkdLciBYDPwLvpiZvvfKizv5LAgHx6JZ84Uv8RP9A=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:20:90:b1:5c:39:2a:20:cb:7d:a3:99:48:a8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Apr 30 19:00:11 2025 GMT
Not After : May 1 19:00:11 2025 GMT
Subject: CN=dea07e1aa4542b38e1aa317cfea1280d642a1a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:4c:71:0a:2e:4b:ac:d6:18:e2:cb:c2:fb:
32:b6:fd:6d:36:3e:bb:d1:f3:35:54:8e:df:ca:c3:
86:5f:8f:8d:20:33:c7:b7:40:bf:f3:aa:d9:fd:61:
29:41:29:37:4c:4a:41:bc:6c:f0:09:70:f1:79:29:
b4:a6:4f:0a:6c:52:8f:dc:32:a1:66:a0:71:72:9f:
ca:51:0d:62:c0:64:47:96:e5:11:4f:d5:5d:45:53:
3a:9a:c9:fa:4a:c1:0d:97:b3:c7:21:6a:4b:28:bb:
cf:3a:70:be:ff:32:b1:3d:c4:90:c3:19:51:c1:8a:
25:dc:eb:e4:e4:7f:20:a5:dc:a8:3a:34:f9:da:4e:
6e:0d:fc:d5:db:7d:8b:9c:85:d9:33:a4:f6:28:6f:
83:fe:45:d8:4b:47:b3:72:9b:c5:b3:b6:38:d1:18:
49:50:1a:a3:84:49:07:34:87:cb:6f:dd:ef:06:48:
fc:2b:95:dc:6d:67:24:cd:17:b8:33:43:1d:5d:87:
45:fe:38:87:69:c7:35:b3:cd:96:87:21:09:de:bc:
73:92:d2:20:92:fb:93:2e:37:6c:e6:88:f4:ba:d4:
4e:4e:f1:87:b9:70:d8:dc:f7:cb:ff:b7:ef:3d:fc:
95:68:d2:b6:76:22:bd:3c:e3:46:bd:45:7f:7e:a9:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:7E:1A:A4:54:2B:38:E1:AA:31:7C:FE:A1:28:0D:64:2A:1A:25
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:07:19:97:48:49:53:ab:7f:cc:45:d8:11:b9:be:61:40:46:
75:c7:3d:d8:a0:cf:7c:19:e5:82:8c:54:b2:00:44:1b:82:67:
42:78:33:a7:6f:b5:44:04:f6:74:c8:dc:48:4c:c3:f5:69:1f:
0a:0a:9b:c4:d0:b8:e1:ad:0d:79:30:37:96:e0:23:54:b5:d3:
e2:97:24:2f:11:df:15:43:77:43:bc:14:24:fd:36:cf:b1:7e:
00:28:02:57:23:f0:48:70:0a:5a:0a:0a:0f:30:c3:5f:41:ce:
c8:51:a2:a3:00:ca:d2:3c:be:dd:78:1d:12:f1:62:a1:bd:a2:
40:ec:f7:70:8d:aa:07:8a:79:7b:c3:66:7e:af:ca:1d:16:b6:
0c:79:64:f0:26:86:09:3a:d5:5a:71:8e:32:76:6a:f9:fc:06:
e5:1b:35:f6:25:58:42:03:b4:77:c3:f4:44:0b:40:e8:b2:d1:
95:3b:14:48:e6:a7:a2:51:a3:a7:65:ea:07:2c:d7:c6:ee:74:
51:cd:da:0d:a6:dc:bb:d0:4e:9b:59:3d:81:61:62:47:4a:15:
87:0a:2e:a7:a3:62:ce:97:c3:7d:f1:95:1d:19:45:e5:2a:f3:
bb:4e:05:cf:49:1f:7c:33:0d:0a:58:48:86:87:31:b0:fc:3f:
a9:14:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:04:26 2025 by rpki-client