Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier: WSfPrNVjht/rMOZiNU+7sRyNU9j9IM8zSOBjIlnBQfE=
Subject key identifier: 6D:F0:12:14:C5:6D:5B:89:C9:11:D5:E1:1A:23:F6:9E:79:07:39:5F
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 019677FB8E5B445373EFA8F002E15342943B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number: 0110
Signing time: Sun 27 Apr 2025 16:01:36 +0000
Manifest this update: Sun 27 Apr 2025 16:01:36 +0000
Manifest next update: Mon 28 Apr 2025 16:01:36 +0000
Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: W4EcU50r9s/ytFO0MmkB9QrGrvhbZV3X70qDUspWILI=)
2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)
3: T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa (hash: ugT57+pZzDU4gTFn9+sLNI0YDzkT+2i3eEwIihTAs/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:8e:5b:44:53:73:ef:a8:f0:02:e1:53:42:94:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Apr 27 16:01:36 2025 GMT
Not After : Apr 28 16:01:36 2025 GMT
Subject: CN=6df01214c56d5b89c911d5e11a23f69e7907395f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:e3:d3:63:bd:fc:88:0a:47:9f:64:f7:4b:
97:88:c8:86:51:bc:52:42:e8:e2:0b:ee:e1:78:0c:
46:8b:21:db:48:d9:98:b2:2f:5f:6e:a2:24:49:40:
e3:64:40:fc:cb:a3:21:de:9c:e5:bf:cc:14:ab:6d:
5b:09:ad:33:d1:89:3d:c1:c1:71:7d:60:b6:5d:8e:
cf:8c:eb:00:26:39:c8:cc:fa:8a:db:32:f3:88:13:
cc:ee:5f:bc:bb:7f:f8:fe:ad:b1:dc:07:48:c6:08:
79:1a:f6:44:fb:94:21:49:83:f0:c1:0b:17:4a:d0:
02:7b:25:8b:0d:65:0b:94:34:d6:03:50:48:9a:87:
7b:7c:ca:32:d0:05:87:55:71:2e:4c:44:de:28:fa:
14:58:55:5e:4d:77:79:0f:59:d7:60:4b:eb:60:07:
10:85:1c:13:4d:3e:ff:ea:51:c8:7b:2f:aa:eb:7e:
de:12:ef:34:f6:48:b6:e8:79:58:f9:b1:bf:e7:73:
fe:28:82:a4:9b:ab:5b:fa:d3:95:ba:6a:5d:3d:9c:
e6:c5:b7:6f:31:ef:5f:9f:6f:f6:9f:79:29:3f:26:
c4:84:b5:8e:a5:a6:34:28:97:be:24:31:e0:ad:95:
c8:e5:a2:8d:45:1c:98:9c:a1:f1:e8:9a:32:f2:4b:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F0:12:14:C5:6D:5B:89:C9:11:D5:E1:1A:23:F6:9E:79:07:39:5F
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:99:22:a0:84:f7:b0:fa:b1:ae:e6:e1:89:e6:20:c4:20:92:
0d:c0:b0:1c:24:25:98:4e:ed:33:84:64:ac:59:59:de:8d:a7:
2b:a8:1b:f3:a2:a0:cd:fd:23:3b:08:0b:ad:5c:06:7a:25:2e:
11:47:1c:52:cd:06:29:e3:34:4e:57:2d:d2:cc:a1:0f:83:95:
3a:6e:66:e6:fd:4a:5a:2a:4d:34:7b:e4:b6:1e:cb:f6:ea:0a:
91:f5:e0:40:fc:46:f1:76:45:8a:d1:b4:a1:95:dc:14:3f:33:
94:51:ab:b7:9c:33:02:56:ec:54:69:15:24:19:50:48:97:9b:
4e:1c:a4:8f:8c:28:95:78:e5:7c:e5:43:f0:24:ca:4e:1d:53:
5a:f2:ae:5b:ee:88:eb:2b:4c:e3:0f:10:77:c9:14:32:78:6d:
87:24:2f:50:25:a6:ec:7c:23:0e:29:cc:6c:42:ff:88:d3:37:
eb:c0:8e:1c:15:3b:d8:38:ee:c1:28:32:60:ba:22:11:c3:ff:
27:3f:38:50:20:52:02:03:84:39:86:10:86:50:09:fa:a9:be:
a1:04:e5:4a:91:f2:9c:aa:72:8d:73:18:0e:c4:a3:f9:f6:58:
b9:1e:13:5d:cd:c4:3d:e3:a2:1a:8d:14:2e:3f:d0:5b:08:5e:
eb:3d:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:22 2025 by rpki-client