Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier: rH7pnXbLG/FT4d7bvZaaDZDn1/L9XZv1BDjQh5fhlqs=
Subject key identifier: 48:7C:B0:FD:44:7F:60:4E:A5:7C:54:7C:60:76:6B:3D:BC:88:70:5D
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 01967EA187E5F20A44E22EA6C48BA0012C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number: 1518
Signing time: Mon 28 Apr 2025 23:00:37 +0000
Manifest this update: Mon 28 Apr 2025 23:00:37 +0000
Manifest next update: Tue 29 Apr 2025 23:00:37 +0000
Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: Sris6BYzzuGWnio3e9iIle3eQ06uX6BRYyOkBJ6jCAE=)
2: lWvdh1tW9Nr29e037SncsLGwjfI.roa (hash: j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=)
3: tpwCcvQj5buTsmFRUmHDkFF9loo.roa (hash: mW6eLdMENzR4XVFpPs8//f09RPHYqnyv9VrQnjo145o=)
4: yVJnFS7lt_m44ZGvk9I8EF_xDD0.roa (hash: /jOq2cHp+9BcWaWydmDU1C8hLNvjhT4eXiMG9sdmdg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:87:e5:f2:0a:44:e2:2e:a6:c4:8b:a0:01:2c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Apr 28 23:00:37 2025 GMT
Not After : Apr 29 23:00:37 2025 GMT
Subject: CN=487cb0fd447f604ea57c547c60766b3dbc88705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:e8:13:7a:04:28:40:c3:ee:cb:5b:c6:d8:
4a:92:91:d2:02:ad:48:26:dc:9f:c1:08:50:40:88:
f6:e6:7e:75:3b:d5:5b:2c:4c:da:3f:4d:7d:66:35:
a2:39:ab:4d:bc:7b:40:dc:18:b6:2a:f2:df:05:d0:
90:bf:a4:54:6b:b7:74:d4:e3:fb:9b:f9:94:8f:5c:
dd:2b:d7:a0:7b:ed:cd:c5:5a:9b:ef:4d:cd:a4:41:
89:ea:ad:1b:02:53:bd:f9:3f:4b:95:5b:63:86:6f:
2c:4d:60:eb:ef:bd:09:a0:4a:c0:20:c8:01:30:2a:
e4:be:d5:35:89:11:6f:8b:fa:46:ee:84:d4:83:14:
f7:5c:90:73:be:f0:10:b2:50:e8:ff:59:31:b2:69:
83:22:8e:73:36:fe:ef:89:3e:30:e5:a8:6c:55:3d:
dc:42:db:c5:2f:95:4e:7c:97:58:1b:ff:a5:09:dc:
ed:93:f3:37:3b:89:f0:51:20:e0:7d:d3:4b:07:70:
74:27:a1:2b:02:90:54:3c:84:8d:3a:f3:56:08:7d:
63:3b:01:06:2d:67:79:10:58:42:31:76:ca:b6:a9:
65:64:0d:6e:6a:a4:ba:66:fd:1d:c8:d9:9f:a2:d4:
bf:8e:62:c8:c8:19:b2:84:31:d3:50:ac:9c:ef:f4:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:B0:FD:44:7F:60:4E:A5:7C:54:7C:60:76:6B:3D:BC:88:70:5D
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:85:d9:ed:83:45:5a:ad:eb:56:07:7d:33:6b:a1:a0:e9:14:
d5:eb:6f:58:6b:8c:a7:ce:90:44:52:12:e0:dd:08:1d:6e:34:
55:6f:fd:08:c8:aa:75:b6:83:8a:bf:ed:d2:f3:5b:70:ba:8c:
96:80:bb:09:76:87:e7:17:b9:68:cf:d6:1c:de:21:16:c0:f1:
89:82:74:60:4e:6b:d8:4c:a0:68:95:b6:a3:60:9a:6c:2a:a1:
77:9b:bc:63:89:97:71:fe:a9:cb:45:02:02:19:20:93:f8:54:
0d:b0:79:8e:b0:29:a7:6c:4a:22:3e:20:bc:2b:72:e7:33:0b:
96:ad:69:5f:5f:e8:9d:53:f9:7f:2a:3d:83:12:6e:3c:db:b6:
41:b5:d0:60:c3:be:4f:9e:4a:6e:19:63:e7:43:c8:fa:d1:d5:
e0:66:fc:39:26:e1:4f:92:20:37:fa:dc:ce:86:25:39:59:c8:
ce:25:ce:4f:f5:08:e1:d3:18:0e:a8:5b:37:46:02:39:c6:6f:
97:1a:03:ee:ef:8a:05:fb:08:68:bf:f6:82:3e:79:f6:c4:fd:
bc:dc:c8:6f:d4:ff:b2:0f:4d:bc:06:9b:6a:66:42:b3:72:9a:
95:80:1a:45:fe:df:1f:19:0b:91:fa:64:d0:ad:a6:82:45:d7:
43:3e:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:46:59 2025 by rpki-client