Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: OCxsHhup/sKIxY23eVoiTt+HPsRJqVmhQ0ug9tUD5UM=
Subject key identifier: 5B:33:0D:B3:51:49:42:0F:8F:11:82:D5:12:9B:A4:EC:C7:B2:80:DB
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019689252D60C2BFBE88CB8B51DB0A26BD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1517
Signing time: Thu 01 May 2025 00:00:37 +0000
Manifest this update: Thu 01 May 2025 00:00:37 +0000
Manifest next update: Fri 02 May 2025 00:00:37 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: xDJdkRGDpEfHft9HpZlJ2zRV4ZpNmKuBr7mMpiOLVkk=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:2d:60:c2:bf:be:88:cb:8b:51:db:0a:26:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: May 1 00:00:37 2025 GMT
Not After : May 2 00:00:37 2025 GMT
Subject: CN=5b330db35149420f8f1182d5129ba4ecc7b280db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:c2:26:21:29:43:98:e1:6e:fe:ab:35:92:
62:30:f4:a5:0d:e7:23:74:e2:64:65:09:68:cb:ad:
7c:eb:42:67:76:63:a1:21:89:bf:d9:05:82:ee:78:
cd:05:37:cd:85:fd:c7:97:75:bb:d1:b8:9e:2f:29:
99:52:c7:9c:dc:92:27:9f:60:ed:b6:82:82:6f:84:
08:43:e0:79:e8:83:4e:14:3c:b3:80:b2:09:04:bb:
64:cc:42:01:8c:41:4c:3a:e7:ed:da:53:65:83:f4:
0f:66:05:50:a8:7c:56:a8:c1:c2:21:d9:d7:d6:5e:
a1:df:69:a3:19:33:40:82:89:95:78:e5:91:98:3e:
08:a6:bc:17:be:12:78:ee:dc:ae:e6:61:ae:2b:7a:
09:b5:02:43:da:1b:73:13:00:9b:b6:c3:4c:1c:69:
5b:ff:3d:46:b0:04:73:a3:66:b9:19:86:19:0a:96:
5d:db:cf:07:c9:5d:0a:d5:e9:c6:a3:e3:e5:91:03:
4d:97:ad:b9:bd:e4:e1:49:92:0f:d0:0a:99:1b:87:
fb:63:84:fa:78:55:27:ad:23:2d:ab:6a:60:cb:7d:
8c:7d:b4:93:e3:f1:d8:db:04:10:5a:c4:8e:3d:de:
c8:e8:e8:e9:18:f6:a0:73:a3:05:a1:3b:b7:51:e3:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:0D:B3:51:49:42:0F:8F:11:82:D5:12:9B:A4:EC:C7:B2:80:DB
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fd:88:af:c8:de:f1:04:5d:00:b5:1f:e3:d1:01:3f:f2:17:
8a:ec:c5:cd:27:44:31:8d:cb:23:0c:0d:84:b7:e3:83:ec:61:
1c:ee:1a:1c:f8:18:76:20:57:af:c0:b8:52:7a:fe:38:04:98:
5a:c2:5a:f8:e9:47:97:0e:f7:d0:de:c2:0d:1a:47:be:a4:9c:
50:26:40:4a:36:ce:d7:1e:bf:da:6c:e0:71:d8:39:80:c5:85:
a1:1d:0a:ba:33:67:f8:bf:41:75:7a:51:75:13:d1:40:9f:b5:
76:17:2b:cf:49:ee:4b:8b:86:35:1d:a2:46:7f:9d:34:36:26:
88:8d:75:04:7f:85:1d:24:66:8e:29:58:e5:50:e3:1f:0f:56:
76:b3:24:85:fa:42:74:32:a9:97:47:70:82:92:b1:9b:7f:f6:
a7:70:72:3f:8d:b3:44:db:88:29:59:ad:85:bd:e8:00:46:6d:
62:1e:e4:ef:08:9b:52:ab:57:a7:5a:ff:98:a2:ad:fb:33:79:
0a:27:34:14:53:c1:d0:bf:d9:56:18:74:5d:4e:e5:ca:39:f0:
57:a9:08:29:3f:d2:ba:72:bd:83:73:71:58:a6:1d:b1:9e:03:
0b:01:5c:14:24:39:4e:b4:ad:ea:94:37:ab:74:4f:97:96:80:
a6:2c:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:07:22 2025 by rpki-client