Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier: X0+S1nNcRgGJagG+3IiPsKF3NmYPbZ5ZAV/BAOXVWNY=
Subject key identifier: 2E:69:0A:05:3D:60:50:C5:F2:0C:86:86:A2:BC:F1:E7:7B:C2:6E:92
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 01968A37B324FE36A26F85665839F0B5A887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number: 13F1
Signing time: Thu 01 May 2025 05:00:28 +0000
Manifest this update: Thu 01 May 2025 05:00:28 +0000
Manifest next update: Fri 02 May 2025 05:00:28 +0000
Files and hashes: 1: A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa (hash: oflLVWiMQR/h5//frwNh8Zh/ixGNkdyJmqiH96c6izM=)
2: D6CNODpYyHvlsmJoLkD5NkQqz2I.roa (hash: GR+jWxRwux3tN/Amoa/0zcsqEh8ihXapWtATgAcfxGs=)
3: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: jBnD/biXhnb6Mt6etgcj4Wj6GYoEiw7pHQ7PVVP/o7w=)
4: ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa (hash: HYmFAXxKVnFTMBP2WvTIUya5uxGXpwouKqV1Y54fjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:b3:24:fe:36:a2:6f:85:66:58:39:f0:b5:a8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: May 1 05:00:28 2025 GMT
Not After : May 2 05:00:28 2025 GMT
Subject: CN=2e690a053d6050c5f20c8686a2bcf1e77bc26e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:60:77:d6:ac:69:2f:9c:05:1b:ae:bc:1d:
0a:dc:cc:c8:53:e4:46:0d:7b:1f:c6:4a:6a:73:12:
68:26:51:9f:39:38:73:36:91:ec:ed:c7:b3:b5:05:
a2:2e:13:18:7f:54:f5:8f:01:0a:a4:9f:60:fb:77:
2e:ef:36:7a:d9:f6:84:b2:a5:14:23:a0:36:eb:90:
7e:fb:5f:8a:82:be:14:dc:1d:4b:9a:b5:5f:c1:00:
99:86:6d:97:2a:21:de:c8:65:29:fa:b1:26:a8:6d:
55:a1:79:f4:a4:90:16:98:df:87:bf:c1:5b:0f:ea:
1e:a1:62:9d:23:6b:77:fb:94:a7:71:99:00:94:d0:
73:d4:10:0a:dd:1d:1f:5c:27:7a:5d:a9:3f:49:52:
91:dc:f0:45:b3:2d:68:30:48:17:96:62:7f:17:e2:
cd:32:e1:9c:d9:77:35:be:27:92:a9:3a:28:bd:a3:
16:5c:0d:58:e0:4c:89:74:91:91:98:35:33:d2:16:
a4:39:f9:b5:bb:2f:81:d8:bb:9b:50:8e:9c:1f:3e:
8e:85:f6:61:4f:1d:1b:33:27:f2:0a:fa:30:2e:12:
8e:bc:93:79:2a:54:63:30:c5:90:5f:22:11:b2:d9:
e7:e1:0f:34:ce:1a:1e:b6:b0:9c:60:02:90:9a:b0:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:0A:05:3D:60:50:C5:F2:0C:86:86:A2:BC:F1:E7:7B:C2:6E:92
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:8e:3e:a1:04:27:fd:08:f4:cd:6f:35:fe:f1:d0:af:12:
79:55:0c:39:b1:cf:89:83:90:87:f7:eb:d6:97:33:6c:5d:0d:
f2:b2:cc:ab:19:d9:c2:8a:85:df:ef:4c:f6:b3:f8:e6:fc:40:
57:ea:d6:dd:60:30:4f:3e:d0:49:4f:73:08:56:2e:dd:ff:34:
5e:96:b8:7f:8d:64:22:e4:0d:6f:f5:71:60:3f:02:41:b4:25:
45:bc:2b:da:df:88:41:d5:7b:b5:9c:fb:24:62:46:b9:76:77:
ce:8d:f3:5e:89:42:dc:df:c4:6d:31:00:d7:f4:5e:be:4b:f8:
a3:cd:2b:8c:80:2d:54:f8:6b:70:d7:8e:55:2b:ea:ca:b4:e1:
3e:96:3f:a4:ba:1f:77:14:72:13:bf:02:6b:b9:c6:bd:ff:37:
93:13:da:6b:dd:59:28:c7:88:25:1c:fd:5f:75:d9:96:04:3c:
18:1d:6d:0e:46:67:d6:3b:1e:1e:ca:e6:13:97:58:f2:e7:14:
2a:4a:0d:fc:23:b1:21:de:aa:42:5a:c4:09:76:a2:a1:9b:6b:
86:8b:f9:9d:22:ca:11:33:5e:b3:ce:70:d9:2c:a9:39:9f:a4:
d8:5f:c3:86:c3:de:b5:b7:37:fd:85:78:80:b5:24:ba:79:83:
08:ae:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:57:24 2025 by rpki-client