Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: ythZgCef7BnuI+s2KhfNu8kcE3hYuHO73KZkNNmgHjc=
Subject key identifier: 1D:F5:7D:AB:70:AE:AB:E9:91:80:AA:A2:C0:1B:7F:F4:49:78:C9:CC
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019685484DB4160A1867FF5A4F42DD7780E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 0532
Signing time: Wed 30 Apr 2025 06:00:30 +0000
Manifest this update: Wed 30 Apr 2025 06:00:30 +0000
Manifest next update: Thu 01 May 2025 06:00:30 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: EMLOgqmjydL6tif8TOJaUwcAsWdKoPpeQcum8IiFwug=)
2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:4d:b4:16:0a:18:67:ff:5a:4f:42:dd:77:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Apr 30 06:00:30 2025 GMT
Not After : May 1 06:00:30 2025 GMT
Subject: CN=1df57dab70aeabe99180aaa2c01b7ff44978c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:00:25:73:88:14:09:27:20:55:02:7f:7a:
f3:b7:22:4a:53:66:99:5a:75:bf:af:4a:77:03:9d:
6d:77:5c:ff:bc:51:b2:76:3a:7a:07:30:71:f2:cc:
54:6c:31:f2:3f:87:a1:98:41:23:11:36:19:3c:4e:
8e:e3:db:81:aa:d1:43:68:f6:b3:eb:cb:72:e2:6f:
be:e4:d2:c6:a0:7d:8e:0d:4f:7b:ce:36:f9:a6:d1:
c0:c1:79:bf:0a:8f:1e:86:ac:31:19:a2:4d:53:d3:
2c:9e:2a:f0:5f:37:64:a4:97:d3:8b:cd:de:9f:12:
ce:bb:c1:22:c3:cf:31:9c:a4:f3:d7:f5:49:07:ec:
e5:38:7d:0d:fb:5b:2f:f5:86:13:05:64:d8:2f:59:
98:4a:ba:5d:cb:35:60:f1:b7:8b:0e:ff:f0:20:f2:
9e:8f:b2:20:8d:72:d1:15:0a:9b:87:da:ae:ad:6a:
2c:7f:19:7d:10:fb:1c:60:d2:a9:70:fa:cc:a8:f5:
6f:d8:7a:4f:ea:2b:51:f4:8c:fa:91:f8:14:3c:71:
2a:98:85:d0:bb:96:25:64:ff:16:16:2b:b4:60:4a:
6b:1d:2a:6d:2c:64:f8:d9:56:b8:fd:ae:f8:bc:78:
52:c9:89:49:f6:6f:47:6b:81:50:a0:ca:80:29:95:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:7D:AB:70:AE:AB:E9:91:80:AA:A2:C0:1B:7F:F4:49:78:C9:CC
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:64:91:e4:d9:8a:3b:be:1f:35:35:56:e4:82:a8:f5:df:ff:
1f:9e:83:45:82:22:23:6a:91:71:da:45:00:d8:32:41:a4:39:
1b:d9:48:f5:10:bf:f2:c7:70:72:f2:09:88:75:3a:3f:7b:d8:
58:fd:86:d6:f0:97:b3:86:96:ec:00:ad:46:b6:a4:32:a5:66:
cd:c9:c5:c4:38:21:ab:32:80:ac:b2:d0:af:89:4c:6a:24:db:
e2:51:62:17:70:32:81:4f:86:d4:85:7a:5d:20:22:21:ae:89:
23:28:b4:d8:3c:91:39:9f:12:22:ce:da:a9:d6:ba:ed:86:8c:
69:30:35:dc:fe:67:3d:ef:45:9a:13:25:52:b0:a4:8b:22:b9:
6a:74:ac:77:55:70:66:c3:62:91:c4:de:e7:92:fb:8e:d2:a8:
f3:c2:72:31:b9:ab:bf:37:1a:a2:a2:d0:b7:d8:8a:33:1d:5e:
3b:01:e7:01:02:8d:b6:37:1c:50:15:a9:dc:4a:f7:15:7d:4f:
56:44:f6:3c:5b:45:e0:fb:95:b9:41:97:01:4e:04:d1:3b:67:
46:88:5d:2b:ab:bb:71:a5:34:50:2d:1b:e4:fb:79:0d:a7:d3:
ee:a1:6a:ea:24:ce:ca:95:f6:67:33:e5:79:92:ce:16:38:72:
0b:f8:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:45:59 2025 by rpki-client