Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: JOwTJtW2Pzw4avTW6QPUeW4m79jvBRhvgMIpJzCAHFo=
Subject key identifier: AF:08:A7:43:C2:34:54:FB:AD:49:44:B5:49:20:26:44:D1:E3:83:F2
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 01967A574A151279FF70256F475293B88785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 07DE
Signing time: Mon 28 Apr 2025 03:01:02 +0000
Manifest this update: Mon 28 Apr 2025 03:01:02 +0000
Manifest next update: Tue 29 Apr 2025 03:01:02 +0000
Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: AuaD8bA42jtl+AjmveQ5WSGGTzEM0sqlbDAG/2lOsQo=)
3: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:4a:15:12:79:ff:70:25:6f:47:52:93:b8:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Apr 28 03:01:02 2025 GMT
Not After : Apr 29 03:01:02 2025 GMT
Subject: CN=af08a743c23454fbad4944b549202644d1e383f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:56:b6:72:ea:9e:3e:93:36:04:a1:b8:d9:
85:a5:1e:e7:6d:9e:c3:22:5f:5e:0e:b3:bc:bb:ca:
97:13:30:51:47:23:f1:81:bf:38:8d:44:1d:ca:41:
dc:46:b9:2c:28:e8:7f:cd:be:e0:61:03:9f:f2:c1:
85:e1:ee:99:25:e5:cb:b1:d7:18:e7:df:49:5a:c9:
23:f2:eb:27:0a:92:44:f1:1b:44:b2:d8:f7:a1:72:
b2:1b:f0:e1:43:11:50:46:74:d1:43:e5:ec:0c:26:
56:fe:e1:52:07:5c:20:63:6d:40:60:9c:50:fe:2d:
ab:5b:18:eb:d9:63:d7:7e:55:cb:50:02:2f:c5:7a:
e8:c7:be:8e:bc:6d:4d:0f:34:ce:14:3c:c4:f3:20:
66:2f:41:bd:ed:7f:99:b9:a9:01:ab:6f:19:8a:44:
ea:95:c3:67:d9:3f:10:5f:17:d0:77:15:6f:77:3d:
3d:e7:74:45:96:05:23:34:8f:b7:29:f9:6f:6f:e5:
5a:59:02:b0:85:7c:a2:69:03:46:cb:c2:47:88:93:
f2:b0:49:9f:e9:b6:17:ed:95:60:17:ad:83:ec:80:
78:ef:c1:5c:d9:0a:8b:74:6f:ff:e9:d4:29:9b:2c:
21:e3:a5:12:60:e2:58:a7:57:c6:dd:ab:bc:b9:0e:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:A7:43:C2:34:54:FB:AD:49:44:B5:49:20:26:44:D1:E3:83:F2
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:dd:92:28:09:2f:19:d5:24:91:e8:82:7a:e6:6a:67:6c:
92:6f:ac:30:7c:60:8e:25:c1:0a:76:e2:50:df:97:65:91:e1:
a0:39:a3:35:fe:dd:5a:fe:76:27:a8:07:36:03:36:58:9d:92:
4d:5d:1e:88:47:cd:42:d6:b5:94:84:aa:ae:d8:74:1d:5a:5e:
e1:db:1d:f7:f2:a8:e4:aa:e5:bf:54:6f:8f:59:62:1a:6b:51:
f5:6c:d8:0b:e8:b3:9f:9a:08:a7:26:49:0e:f5:4a:a4:34:55:
93:bf:ae:29:6a:0d:4b:ee:68:df:0e:ed:23:32:d1:89:2e:bc:
28:5a:cd:20:e5:85:21:42:20:d0:50:ec:02:53:ee:23:98:65:
d6:c2:9f:12:ac:1a:b6:84:4d:42:89:e8:51:46:58:9b:60:cd:
03:e2:a1:74:a2:eb:7b:3e:f6:9c:e0:d9:c5:bc:b4:11:c7:2e:
1a:3b:d7:7e:a4:ad:40:32:2b:26:b3:93:24:27:d6:d6:96:d6:
c2:1d:dc:6d:93:62:de:1e:b7:7f:34:72:48:26:ff:7b:6a:22:
de:37:56:70:4c:65:8c:80:6b:b9:a7:3b:ac:bb:a6:64:a2:46:
26:02:a6:87:46:1e:a5:44:e5:18:56:43:72:d7:93:27:07:ad:
b2:64:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:39:47 2025 by rpki-client