Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: 3AYgwWpTrFqQ4/+m4TY9SwkOTijmYm46d0O9oQ8nGOg=
Subject key identifier: 2E:77:77:10:77:C4:F8:C9:AA:53:FB:8C:51:38:CF:77:4C:DD:AC:12
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 0196729D63CC8E9C1C4F814F19302813B7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 060B
Signing time: Sat 26 Apr 2025 15:00:39 +0000
Manifest this update: Sat 26 Apr 2025 15:00:39 +0000
Manifest next update: Sun 27 Apr 2025 15:00:39 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: ZYQHfWb08t+ewinw3GXggqDvQqqBDZ5Zc2YFLbrRKIU=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:63:cc:8e:9c:1c:4f:81:4f:19:30:28:13:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Apr 26 15:00:39 2025 GMT
Not After : Apr 27 15:00:39 2025 GMT
Subject: CN=2e77771077c4f8c9aa53fb8c5138cf774cddac12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:c6:67:e7:59:e9:95:a7:cb:17:73:65:18:
5d:93:0a:2c:34:cd:2c:19:05:5d:9a:d5:e1:8e:2d:
9f:7e:3f:84:92:ad:5e:25:24:b1:04:c2:6d:90:64:
8a:0c:9f:fa:9c:ae:39:ca:6f:82:1d:37:72:c3:f9:
97:b4:e5:f7:88:a9:65:d8:6d:4e:20:57:80:4a:d2:
37:98:94:9a:c7:22:f6:8f:04:b4:e6:4a:ab:49:c1:
8d:cd:bd:31:5c:fe:e8:b1:a1:49:76:bd:77:dd:2e:
8a:0c:87:e4:83:9d:51:66:7d:b4:15:7a:d3:f2:b5:
cc:03:d0:a4:2f:27:e6:6a:04:fd:a2:ae:5c:a5:11:
13:d8:8f:80:00:78:9f:a5:41:45:b9:38:05:09:55:
28:bd:67:0d:68:bc:a8:58:17:f3:13:72:72:25:67:
09:d5:cf:26:f3:8e:17:26:75:fb:c1:5f:0a:01:2a:
49:4a:2b:95:78:79:ba:a6:30:3e:3f:c8:53:a2:7c:
aa:a6:8e:fd:a3:4a:ec:44:6d:30:45:6d:3c:cd:82:
2b:32:d8:a6:48:36:72:ef:89:62:f1:94:57:29:d4:
03:3c:bf:33:de:f0:aa:5d:f3:cc:d8:78:4a:13:58:
9f:11:1e:a9:4b:a6:ed:34:8f:e7:09:b2:fe:5c:ce:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:77:10:77:C4:F8:C9:AA:53:FB:8C:51:38:CF:77:4C:DD:AC:12
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:68:ad:4a:09:85:1a:aa:ff:a0:3f:9c:bb:68:3f:60:e1:ba:
19:f9:fe:15:7d:bb:49:2a:73:d5:28:86:4d:b0:b3:3c:9f:ae:
95:00:df:e1:3b:33:43:85:9e:9e:33:7e:33:67:28:da:20:ad:
0b:64:02:33:3b:7d:89:0c:c0:4b:4a:a8:2e:e4:51:4c:d8:a6:
d5:9a:08:d2:f7:89:06:bf:4f:5c:1b:bc:02:4e:ec:87:c5:aa:
09:e5:90:e1:3b:d0:e0:f9:d4:5a:26:38:f2:f4:15:7b:5d:2f:
4b:fc:5c:5e:ad:c3:68:2f:03:d2:82:fd:be:b9:33:2d:ce:53:
40:b8:1c:23:ab:f3:06:5c:dd:a4:16:bf:99:cf:6d:b8:41:58:
c3:ce:7b:f2:6c:86:a6:5e:1c:2f:d7:c7:a5:d7:72:e9:97:65:
0b:e0:99:c4:19:fb:00:c5:70:aa:c7:be:87:a8:3b:0e:a5:1c:
0d:41:cb:df:21:5f:3a:d4:f1:22:75:a3:d2:9b:ba:d2:ff:f9:
db:01:d5:f5:88:ea:3d:f5:64:ce:9c:0c:dd:02:93:41:11:2c:
6b:03:77:27:30:9e:5d:02:b4:ae:ab:57:d3:4a:b2:29:64:e3:
a5:a8:82:e1:5e:df:d5:22:82:3e:bf:b0:65:b3:9d:3f:cb:6e:
ea:e4:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:53 2025 by rpki-client