Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: HxHdeDONg3hjEXN47SXqbKVxjMH5fHdfwMRMhJTtmsI=
Subject key identifier: 17:D7:1D:9A:A8:DB:2A:CB:9D:68:6B:70:1F:2C:BA:BB:68:40:1C:B6
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 01967642E74969C7104FE661E009DB138C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 1F
Signing time: Sun 27 Apr 2025 08:00:18 +0000
Manifest this update: Sun 27 Apr 2025 08:00:18 +0000
Manifest next update: Mon 28 Apr 2025 08:00:18 +0000
Files and hashes: 1: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: Ll1v6Vij6xB3auA5/v5OS9edYyriv7rRaEFcUHQOqqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:e7:49:69:c7:10:4f:e6:61:e0:09:db:13:8c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Apr 27 08:00:18 2025 GMT
Not After : Apr 28 08:00:18 2025 GMT
Subject: CN=17d71d9aa8db2acb9d686b701f2cbabb68401cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:de:03:d3:e0:25:67:f6:7d:11:00:b6:82:
a6:80:89:95:f5:9a:57:b7:94:c2:7a:76:75:a1:84:
41:cb:5f:08:da:86:a9:ee:0f:6f:6a:42:7d:02:0a:
9c:25:be:fe:2a:e8:36:16:e0:77:cd:5f:d9:a2:4e:
80:45:6b:1b:5a:45:b0:bd:df:65:83:16:3a:da:28:
0b:fd:12:4b:71:ad:c7:ce:70:ee:3f:13:68:43:ae:
96:58:ad:3f:db:73:b9:18:d7:72:bf:48:81:6d:d2:
82:6d:2e:22:a4:af:db:71:42:70:42:7b:1b:a5:bf:
6a:8b:ad:e5:46:c6:92:57:12:ab:ba:17:c9:57:10:
35:b9:e6:91:1d:4b:0f:17:45:d3:64:43:89:bc:24:
82:13:85:d2:4c:33:d9:84:b0:34:bc:cc:59:48:c9:
ef:d8:dd:3f:91:90:ae:4d:05:f1:9d:83:74:8d:80:
91:fe:79:26:47:50:e1:0d:60:6b:bc:23:0a:22:58:
a9:f0:60:24:f0:f8:15:85:37:11:a6:67:f6:84:09:
01:87:73:1c:52:f9:89:3f:31:84:7d:26:bd:09:62:
21:98:d9:79:4d:25:ae:27:1a:45:8f:1c:ca:f1:40:
bc:9c:f8:43:5d:e1:0f:68:81:00:c4:f1:b7:09:d3:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:1D:9A:A8:DB:2A:CB:9D:68:6B:70:1F:2C:BA:BB:68:40:1C:B6
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bf:2d:2a:45:44:75:cd:59:bd:0f:a6:62:52:58:43:f2:bd:
a6:7f:a6:7e:ce:b6:59:30:c3:70:2f:e3:70:e7:67:03:8f:71:
e8:c7:18:7a:1a:eb:89:54:e4:d1:3c:6e:54:90:6e:b8:78:2b:
cd:ba:cd:4f:d4:0b:94:11:08:dd:76:67:3b:aa:07:20:6f:98:
4b:17:41:ff:fd:14:26:be:f5:4c:fb:12:42:04:ff:86:b9:2e:
d9:c6:45:9f:78:d8:ce:c8:07:cd:dc:5c:2a:03:f0:74:a7:4c:
84:dc:4e:b5:4c:10:41:d5:0e:96:7e:97:e8:24:b1:8e:5e:21:
2c:3c:d1:34:80:95:4c:2a:67:34:76:cf:8e:fe:79:a3:39:4f:
93:e3:e0:98:03:b7:1f:6b:c5:fc:e1:59:60:91:34:28:3f:e8:
81:37:7c:d7:62:7c:e8:69:4b:72:d2:53:3c:9e:2f:0d:1d:3c:
4d:22:81:ac:eb:b9:a7:e3:54:59:91:9d:81:9e:8d:df:9d:8a:
29:f6:38:26:5f:d8:1b:ae:1e:f3:ed:54:85:e4:da:78:4f:01:
a3:80:00:82:d4:8e:49:40:21:af:bc:0e:cd:48:b8:18:7b:0c:
94:fb:5c:98:eb:65:90:de:48:fd:ff:9f:b2:b4:6e:2a:21:31:
80:71:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:26:07 2025 by rpki-client