Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: LQpdg7QYy9xc1X0GTTEhUENR/SQIDPKnHH1Gn4AmxxA=
Subject key identifier: C8:5F:0A:1F:D9:7A:2E:B8:74:99:8D:BE:26:9B:7C:72:C2:53:A8:F1
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 0196723021B7C95A6BE61ADF1B72077B9B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 151F
Signing time: Sat 26 Apr 2025 13:01:19 +0000
Manifest this update: Sat 26 Apr 2025 13:01:19 +0000
Manifest next update: Sun 27 Apr 2025 13:01:19 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: tDIGDvYmVdg/v4H7CHX2+37+KtQgzaubtRr4KdyVPsg=)
2: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
3: tLS4xU-vtXZpX37sjW7SyqQqQ0M.roa (hash: Eq8qKDr4X5oijarNEC8B7aqyt4IhqQ1MlTcTqvRwOtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:21:b7:c9:5a:6b:e6:1a:df:1b:72:07:7b:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Apr 26 13:01:19 2025 GMT
Not After : Apr 27 13:01:19 2025 GMT
Subject: CN=c85f0a1fd97a2eb874998dbe269b7c72c253a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fa:65:54:f7:7c:81:db:0d:8d:53:71:c2:68:
24:56:db:76:c0:6c:e8:47:11:c1:df:f6:52:44:bc:
23:83:19:3a:e6:86:ac:87:ed:57:02:dd:aa:a6:c8:
f6:82:82:31:55:a8:be:c3:5a:ef:7c:ef:5a:05:32:
17:b5:08:30:5f:60:aa:a3:98:8d:e2:38:43:07:66:
13:19:aa:b0:50:32:27:92:b3:ae:6c:bb:88:21:c3:
ca:b3:1a:23:aa:c5:dd:0f:b0:a5:c0:f6:fa:f9:0a:
2e:2b:80:a3:cd:4f:57:1d:17:59:5d:91:34:ce:e2:
28:0e:85:a9:a2:2d:d5:d8:ed:72:a1:c1:b7:37:b0:
2c:64:29:f5:e3:fe:19:b7:3a:38:a3:89:47:e1:80:
82:dd:7c:4b:bd:d8:ff:42:37:57:44:96:47:c4:a3:
4a:c2:60:dc:01:79:91:b4:5a:32:67:89:25:20:04:
45:16:34:ae:55:e3:56:80:ac:98:fd:1e:a6:d5:25:
c5:32:7e:fb:0b:f2:a5:42:07:7d:1a:1c:57:65:35:
c1:60:94:59:1e:be:6a:04:a5:37:a7:67:eb:d5:e3:
c3:2c:96:b4:d8:68:ca:f4:99:36:07:2d:72:2b:33:
50:80:72:68:fa:b7:66:60:d6:03:02:54:75:cc:ae:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:0A:1F:D9:7A:2E:B8:74:99:8D:BE:26:9B:7C:72:C2:53:A8:F1
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:69:1c:b9:27:6c:3a:87:1d:e1:48:06:e6:58:57:9c:ae:78:
76:c3:97:eb:6e:04:79:8f:f9:4f:94:91:df:8a:a3:f9:0c:a0:
45:90:a3:79:df:55:13:5d:bf:50:93:d5:71:b6:2e:91:b2:74:
f0:81:34:4d:9b:bc:20:1e:95:7d:6f:76:60:18:d5:0c:c2:eb:
cc:04:4f:90:5a:08:13:aa:e7:bf:63:b6:75:48:76:c9:ae:6a:
8b:34:79:37:41:f7:2f:c5:5c:9d:c5:ea:61:c5:42:fb:86:0b:
1b:75:7b:d2:32:77:8b:37:bf:df:94:0f:4c:67:71:d3:60:79:
d3:d5:cc:6f:14:19:fb:d2:45:c8:4f:1b:b6:6d:09:e8:79:2a:
be:4f:fc:76:80:34:18:2b:74:21:7f:e9:e6:92:80:f4:c0:97:
c6:9d:27:dd:e7:8a:d7:13:ce:9f:92:4d:74:06:71:8e:24:70:
ea:43:05:d7:e0:2a:d6:39:ba:98:24:20:c3:c2:4e:a8:58:69:
e4:7d:73:37:f8:0a:88:5e:51:17:51:e5:ab:51:bf:e0:c3:55:
06:1c:65:b4:75:a2:59:ee:40:d9:95:67:73:5a:e0:3a:99:e4:
c9:f1:53:ac:9a:c0:7a:8e:9f:39:9e:0e:79:3d:35:c4:88:89:
38:8e:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:18 2025 by rpki-client