Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: d5sHP0w+NElNkLPbfBMGyl9lnkVGCJ83QjYE2hGOAlI=
Subject key identifier: 9F:CF:D5:FB:97:26:A9:D1:9E:3D:3F:25:44:4B:39:BE:D6:33:12:E4
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 019674FA0AB57A22643399DF22A39D77386A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 2F
Signing time: Sun 27 Apr 2025 02:01:05 +0000
Manifest this update: Sun 27 Apr 2025 02:01:05 +0000
Manifest next update: Mon 28 Apr 2025 02:01:05 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: 6CwDvR/dhlthzcS0xVrzYIrui8x4+RMbC+OFhsvaHNE=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: NYmwF4mBpF0BkmMcJbcBfbb7mNw.roa (hash: 4P8DST75fp7YFw+joLinoBciFGEOW9RYd1ghEZUg2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:0a:b5:7a:22:64:33:99:df:22:a3:9d:77:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Apr 27 02:01:05 2025 GMT
Not After : Apr 28 02:01:05 2025 GMT
Subject: CN=9fcfd5fb9726a9d19e3d3f25444b39bed63312e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:bf:30:a2:d5:19:b7:7e:98:f4:b2:f2:ce:
89:a1:1e:6c:ce:25:f1:a6:6e:6b:66:64:c4:d0:f0:
19:3d:d4:95:8c:39:74:61:02:ce:c7:d2:8b:db:de:
a3:f9:c7:f1:13:a1:13:18:c2:8a:54:b4:29:38:00:
5e:2e:54:6c:74:52:f2:39:d2:16:09:bc:26:25:c2:
77:5f:ea:92:13:24:a1:27:63:45:78:92:7e:34:17:
6b:e7:a8:83:63:ba:83:fd:42:e9:84:4c:0e:0a:ff:
3c:92:fc:0e:b5:8a:4f:d2:78:6d:4a:03:b0:18:3b:
c4:70:3e:73:07:94:af:be:1a:32:f2:e3:4e:8f:2e:
27:00:b7:bd:4e:35:5c:9e:dc:e7:09:a0:37:61:a4:
30:3a:4e:1d:a4:f9:06:1e:19:97:21:f0:96:10:f3:
a1:92:92:cf:ff:21:58:f2:11:b4:57:b6:12:77:f9:
5e:36:94:aa:82:4b:af:a4:91:16:99:12:79:da:00:
3e:89:f2:d7:4b:fb:6b:a8:6c:d0:24:e3:07:a5:e4:
58:b3:81:4c:58:11:a8:e2:44:0d:3e:19:e7:bc:e5:
0e:5b:79:ce:c4:c5:da:63:f4:0a:c1:4b:f4:6c:55:
df:65:96:96:6c:99:9c:5b:9a:a5:58:02:54:7e:1b:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:D5:FB:97:26:A9:D1:9E:3D:3F:25:44:4B:39:BE:D6:33:12:E4
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:d8:b1:04:1f:f5:99:c3:e1:1b:8f:19:ba:4a:91:15:39:
38:0f:d1:8a:03:53:8b:32:9a:cb:dd:06:53:1d:67:1c:7f:bc:
5e:0c:01:6a:79:30:5d:e2:ef:3b:ae:40:62:70:e3:ff:76:fa:
5f:8e:97:2a:fd:7d:1c:5a:b1:ef:6b:f3:73:f6:8f:9a:52:d2:
85:a7:9c:a4:53:54:43:14:f0:3a:da:02:0d:81:d7:5b:9d:31:
ff:ba:d6:64:d9:e5:bd:c1:0b:31:d4:72:04:5b:55:93:2c:a2:
1b:f8:34:c0:7f:22:e2:92:a6:23:3b:1b:17:0a:fe:a0:df:18:
a0:42:8d:c4:64:65:be:49:5b:a4:54:08:61:05:dd:6b:4e:f2:
be:7a:f0:56:c2:9b:2b:ea:42:1e:ba:b3:05:05:d8:25:2b:5f:
0c:0a:4a:de:9a:b2:2d:e4:1d:97:08:ff:f2:65:d2:2d:5c:93:
87:f7:1a:6c:02:23:3d:14:9a:04:20:b1:9c:7f:77:06:c3:b3:
14:29:4d:ad:21:8e:42:84:f5:f6:b2:23:f6:fa:66:f2:20:13:
ba:e4:88:b2:67:bf:6b:ee:6f:31:e4:ad:ae:78:24:da:b7:fd:
34:0c:c7:0c:27:a9:37:ac:b3:40:5f:6b:d8:81:8d:c0:b9:ce:
8e:2a:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:14 2025 by rpki-client