Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier: 0njpvN95xQbEcyEWhy+Ha4XspEKM/urS2CC5jFdt9Z4=
Subject key identifier: 8F:78:40:D0:17:4E:53:D1:D6:F2:96:A6:F2:77:3D:A7:E9:E3:F1:F2
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0196760C732A036E7BC9401A1CBA65A0E020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number: 018E
Signing time: Sun 27 Apr 2025 07:00:49 +0000
Manifest this update: Sun 27 Apr 2025 07:00:49 +0000
Manifest next update: Mon 28 Apr 2025 07:00:49 +0000
Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: tSbsjmGfepEHo/40MfdF8NnXY0MPXv6TO5MDtrjafdA=)
2: 75Qx-kzPheTuRxMqDJeoXXXQrYg.roa (hash: ErepmH4DhXni27k1mjnFsC8LESHYORnx4kYupx2Zkhc=)
3: nya5VnmImUQCPczzWGzozyYmAoM.roa (hash: qg+/w/vLW7M/opQjKzbc9S+ktTmX4UXhPUmqd4d4i7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:73:2a:03:6e:7b:c9:40:1a:1c:ba:65:a0:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Apr 27 07:00:49 2025 GMT
Not After : Apr 28 07:00:49 2025 GMT
Subject: CN=8f7840d0174e53d1d6f296a6f2773da7e9e3f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:68:66:7d:a8:3d:11:ba:df:3f:a2:7d:cf:e8:
26:76:e8:1c:85:f6:74:fa:dc:42:0f:ef:91:37:9a:
57:69:e4:65:27:fd:fd:56:63:5b:4c:8f:29:5c:b7:
42:a0:34:12:99:3f:42:0a:ca:a5:60:60:a3:3e:7d:
c9:64:93:f0:85:6b:6a:a8:5c:e5:87:6a:e5:af:ff:
be:0c:56:3e:cc:29:ed:90:04:86:48:42:86:3c:e8:
81:ac:b6:b6:3a:53:87:cf:71:28:21:b6:0d:56:cf:
8a:4c:a9:9d:85:ac:eb:84:4a:d7:af:18:04:77:02:
c6:91:58:33:20:0f:19:1c:9f:45:a5:c6:78:ef:42:
92:c8:a7:aa:7a:a6:6b:70:63:92:a8:22:45:60:24:
e8:1d:f0:1e:0a:d8:5b:94:1e:ca:14:4c:b5:12:ad:
c7:fe:92:4f:30:20:cb:e6:c2:e1:2c:f9:e3:95:c9:
5b:ab:2f:a0:25:57:6e:5d:ea:4c:b5:b5:7d:6d:34:
ba:f2:0a:bc:23:6c:4c:e1:0d:db:28:de:83:ed:3c:
47:c3:17:dd:67:cf:c5:5a:2e:8c:fd:4a:4e:0b:f0:
ff:17:e1:8d:00:e4:28:8e:6c:92:36:ab:12:61:5d:
a6:f1:fc:54:d6:a7:b9:25:61:08:35:ad:ef:9b:f6:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:40:D0:17:4E:53:D1:D6:F2:96:A6:F2:77:3D:A7:E9:E3:F1:F2
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:df:90:5d:06:35:31:11:9b:32:90:1e:7c:76:1b:97:06:28:
c2:a2:2e:f5:89:a6:b9:02:fa:3a:16:18:e2:04:82:d6:6b:de:
02:d4:96:d9:8b:76:69:e3:c4:45:11:c8:b0:7f:03:b3:f7:4b:
28:a4:0b:50:94:bd:6f:fa:f4:78:b9:92:28:d8:e5:d3:40:d5:
f4:6c:6b:8d:33:3f:93:72:7d:be:d6:b2:7b:9b:d4:01:eb:e1:
7f:d1:43:a3:9d:f1:8d:e7:51:7b:3a:ba:a6:73:97:1d:c6:17:
cc:b9:bc:fb:a9:6e:7d:10:09:3e:0e:ca:25:b9:ac:5f:fe:38:
2b:3a:dd:23:11:a9:b0:f5:d0:4c:f0:1f:0c:df:1d:5e:67:05:
b8:b0:62:3d:b6:fb:ca:b5:3d:f2:d5:db:7a:47:a3:bd:77:ad:
c7:df:d2:2e:98:d2:d4:ec:06:fe:da:c5:fb:11:9b:9b:91:ae:
21:a1:bf:43:90:3e:3e:01:ce:b4:39:2f:76:a5:21:f2:e7:32:
f4:e8:d9:76:b6:61:f6:ad:06:31:58:38:6d:7b:73:00:b7:fb:
27:13:c6:3c:34:6a:b9:3f:25:fe:fe:b0:dd:46:ba:03:a2:68:
08:f7:e0:6b:7c:9f:70:04:31:b7:6e:ae:0b:c0:fe:fc:d0:0a:
72:ad:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:18 2025 by rpki-client