Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: hFYPLH3mIQsBPlE9FYMfUtBW3GI6lMGEmuDjzQYeBnI=
Subject key identifier: 70:23:D9:D2:7C:9E:83:B4:74:2F:1D:58:60:1A:54:31:73:9F:6B:19
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 01968C93F7E51BB7D4034F793601FE4EBC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 16:00:29 +0000
Manifest this update: Thu 01 May 2025 16:00:29 +0000
Manifest next update: Fri 02 May 2025 16:00:29 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: /1kP7RKc/9LrWE0QqKVxGY187dvq1EKU6RfweP+e0KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:93:f7:e5:1b:b7:d4:03:4f:79:36:01:fe:4e:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: May 1 16:00:29 2025 GMT
Not After : May 2 16:00:29 2025 GMT
Subject: CN=7023d9d27c9e83b4742f1d58601a5431739f6b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:8c:95:fc:c0:18:39:ed:c7:2c:26:c0:a7:
8a:17:f2:c0:5c:8c:ae:fc:3c:3f:fb:93:4d:a3:2e:
ba:5a:e4:37:f1:ce:0c:67:53:d2:6c:56:4d:a9:c6:
e5:97:96:06:fa:38:17:02:71:a8:fb:b9:ba:66:c1:
82:75:3f:b6:9e:a7:35:a0:c0:b0:b4:2d:58:20:82:
c4:3d:9e:a1:45:74:b8:5b:d0:30:c1:8b:46:cb:55:
dd:e2:8b:f9:7e:78:99:e8:6b:a7:49:d5:bc:ae:c5:
cf:81:53:e0:7d:dc:fe:f8:b5:7f:50:5f:77:61:02:
ec:ed:b5:13:fc:f3:2f:f2:e7:1d:e8:4a:a9:6e:ce:
c5:40:c5:5e:0f:96:ab:7f:00:75:c0:6f:eb:c0:23:
cc:9e:2c:96:97:0c:ca:e9:e6:b0:d9:ef:a9:31:3d:
52:d1:1d:88:35:10:92:5b:bc:c6:7e:60:d5:56:0b:
9d:5e:e4:79:eb:07:1a:cb:2c:3d:de:3a:15:ef:3d:
3b:89:60:65:39:6c:be:45:1e:9c:d1:3b:90:e9:eb:
6f:d5:c6:78:95:d9:ef:a0:b4:51:a5:f6:fb:71:55:
b2:5b:24:af:f0:1b:29:99:42:ef:ff:99:51:50:36:
71:60:9e:8c:83:7d:9b:5f:1c:df:25:af:a8:42:0b:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:D9:D2:7C:9E:83:B4:74:2F:1D:58:60:1A:54:31:73:9F:6B:19
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a7:4c:2f:67:f2:31:0e:0e:b3:37:fd:a2:9d:41:61:92:a8:
4c:3d:3a:4d:8a:f1:75:0d:7a:75:d8:ef:32:5b:1a:37:d9:50:
24:ad:f8:09:f4:91:13:62:45:03:22:00:5d:3d:1b:5e:f7:b3:
a1:e5:d5:21:4c:be:ed:40:cd:c5:ee:17:74:6e:b1:6a:c9:3f:
67:b4:9f:f9:ca:99:6a:af:9d:63:3a:46:b4:ab:a7:0a:19:f8:
5d:94:56:7a:2e:b0:a7:d7:f6:eb:02:1f:91:fb:d9:4a:23:d9:
1d:60:a9:af:85:36:b7:9a:6d:e6:f7:6c:32:b7:02:48:74:ec:
9c:90:5d:0d:da:6b:1c:98:0d:5a:32:b3:78:02:1c:c4:41:11:
fa:8e:83:64:be:dd:d7:94:7c:c9:72:7d:f6:60:d8:f8:c2:63:
9f:df:23:7b:97:6f:af:a0:a9:e1:25:ca:b7:d5:44:58:66:c5:
17:57:c0:d3:41:44:38:98:56:a1:00:f5:28:3c:99:66:66:af:
93:c3:9a:3d:f0:b9:31:9c:0d:a9:94:86:b6:85:bd:44:35:e1:
9a:a2:3e:af:8d:7e:15:2f:5e:3c:23:01:72:a1:7d:42:46:18:
98:a4:a7:60:de:e1:6f:9e:9e:ac:a4:25:19:32:e5:94:6a:3c:
ac:c4:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:25 2025 by rpki-client