Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: iqIpCfli9j6SZFsRMNLjVSHZs+3ILXmwsDipuefGC04=
Subject key identifier: 74:68:BA:26:07:A3:AE:56:13:E2:BA:A8:51:84:1F:B6:2A:F3:6F:AE
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 0196760C9EDD07BBA1B5340730F8ABFBC5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 0646
Signing time: Sun 27 Apr 2025 07:01:00 +0000
Manifest this update: Sun 27 Apr 2025 07:01:00 +0000
Manifest next update: Mon 28 Apr 2025 07:01:00 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: AaA0pKw5f//Z0F72kQighGjsZKm9qWnvPVQhQaaDGcA=)
2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:9e:dd:07:bb:a1:b5:34:07:30:f8:ab:fb:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Apr 27 07:01:00 2025 GMT
Not After : Apr 28 07:01:00 2025 GMT
Subject: CN=7468ba2607a3ae5613e2baa851841fb62af36fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:51:f8:28:09:ee:47:48:eb:ab:b2:6c:ee:
f6:91:78:f2:f7:e9:94:a2:86:50:ed:8c:81:57:7e:
62:6e:fb:c8:24:35:a3:88:e5:f0:a3:27:ad:0b:15:
4c:63:14:4e:e6:ab:18:4e:db:88:c1:91:63:70:5f:
10:ea:e6:60:07:84:b9:0c:6f:09:d2:a1:47:be:45:
a4:60:7b:a2:60:48:fc:3d:1e:ea:7f:34:10:be:c9:
b5:37:0b:7f:7d:43:9b:8c:4f:5c:ad:09:9f:84:f1:
ba:14:e1:d7:0c:d1:e2:15:7a:38:ef:21:65:51:41:
2e:1c:b1:ab:b0:94:ef:8a:59:4a:79:e5:76:ae:0f:
35:6f:1b:39:02:ac:3d:ae:65:84:7e:08:98:42:de:
46:d2:13:20:00:56:9d:0e:04:56:7f:88:ad:e7:ff:
ce:42:8d:f6:d9:e5:78:60:41:bc:e9:f0:87:39:27:
e0:96:55:d7:8d:e1:03:56:8a:82:14:bf:34:f5:54:
e5:90:2c:de:9e:6e:bc:8f:f2:de:2c:b6:1d:2f:73:
e3:d0:82:47:94:e8:27:66:68:99:13:19:69:31:86:
4e:0e:8f:dd:32:9e:a0:b8:9f:f8:3d:40:7f:a3:f5:
15:7e:bb:dd:1e:8c:e2:1e:5f:8c:1b:f0:6c:66:8d:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:BA:26:07:A3:AE:56:13:E2:BA:A8:51:84:1F:B6:2A:F3:6F:AE
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:58:e3:44:70:75:a3:0e:5c:ec:5c:54:9a:0a:50:6b:3f:2b:
ce:a6:f3:4c:63:29:1e:72:47:54:c2:c0:d6:97:ab:a0:d5:57:
30:9f:e9:b5:e4:45:cd:47:6a:23:e9:18:a5:49:3d:c0:e3:f6:
61:bc:af:22:a2:eb:77:18:f8:a7:17:49:73:ca:02:d8:68:b1:
97:06:20:ca:94:aa:c1:eb:17:a1:9b:4a:73:81:99:c3:c8:86:
3e:7e:1c:fa:f1:0c:50:16:4a:c6:78:87:6d:5c:87:bc:83:4f:
73:68:71:6f:00:8c:58:54:ad:7c:6e:9d:dc:06:0d:90:fc:7a:
99:24:58:bc:dd:53:3a:48:d5:5a:af:07:80:72:15:b6:4c:a8:
db:3e:4d:33:33:82:d0:16:a1:49:1f:cc:d4:73:24:f3:c6:39:
d3:62:0e:74:d2:eb:a4:91:2d:ff:b2:14:7e:b8:8a:ff:d8:78:
1c:ef:04:e4:6a:69:b2:7a:41:dc:81:9d:97:b2:2b:69:68:f3:
1d:7f:ca:51:2a:40:c3:7a:e1:ba:a0:a0:51:27:93:90:ad:e3:
cb:26:8f:5f:21:d8:05:9b:5b:de:55:a7:2a:9c:af:d4:2a:d8:
cb:d1:58:70:0f:23:97:29:73:40:c7:19:ec:f3:7a:24:68:73:
25:61:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:13 2025 by rpki-client