Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: hcct2VJwqsTSCklJ36Uk/SpUbho/7a3x9FYZkt67dk0=
Subject key identifier: 71:6A:D2:E1:91:33:80:89:39:13:16:5B:79:DE:9D:C7:15:CD:43:B1
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 0196760D314B4CC82F6ACFF907B42A1AA16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:01:38 +0000
Manifest this update: Sun 27 Apr 2025 07:01:38 +0000
Manifest next update: Mon 28 Apr 2025 07:01:38 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: A7pWVudoIp1KBX8rfw6NeJLdhDyGmw4elB0RoE4bBSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:31:4b:4c:c8:2f:6a:cf:f9:07:b4:2a:1a:a1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Apr 27 07:01:38 2025 GMT
Not After : Apr 28 07:01:38 2025 GMT
Subject: CN=716ad2e1913380893913165b79de9dc715cd43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:f9:28:0a:33:9a:de:ad:00:f5:8d:3b:dd:
11:fa:75:24:64:e5:22:f3:4e:e3:6d:bd:95:06:77:
b0:19:a9:e1:21:be:b7:11:0d:77:f0:cd:f8:82:e1:
e4:af:03:86:9a:f6:26:cb:10:98:48:80:68:d3:6b:
26:3a:74:95:6d:a9:4f:80:e1:5b:bf:32:f7:e0:d2:
b8:3e:0b:8d:6b:03:fe:bb:ac:52:44:c1:38:05:6e:
a5:ae:5f:2a:72:b0:1e:d0:2e:b3:0a:9c:68:99:34:
62:f2:9e:f7:c3:e8:62:0a:cf:5d:3b:bf:45:40:22:
08:3d:36:4d:e7:e5:2f:f2:e0:92:5a:ab:75:4b:c8:
df:a1:7f:3e:45:6a:63:55:04:ab:e7:1b:19:c0:45:
6f:90:e5:7e:89:3f:ab:4a:ab:aa:ac:45:91:ce:ec:
60:77:ca:ba:04:97:47:18:ea:54:e4:9f:e7:10:09:
cc:fd:88:13:54:d0:b2:fa:6b:a2:68:68:95:8a:c2:
1d:bc:cc:8c:29:8c:7b:0b:20:21:f2:5b:71:8c:3e:
d8:d2:ce:e7:14:dd:65:68:de:09:38:47:cc:77:1a:
0c:6c:ce:19:9e:28:14:49:41:0b:5d:92:84:02:a3:
36:32:f7:d5:ce:02:31:9a:0a:20:0d:2a:a5:45:56:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:D2:E1:91:33:80:89:39:13:16:5B:79:DE:9D:C7:15:CD:43:B1
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ec:56:70:c0:c4:ed:f1:d3:26:f4:ec:74:f2:9e:a7:38:3d:
c4:8e:a1:1f:a5:33:d8:a5:e5:2b:ea:ae:33:8c:ff:75:1e:d5:
17:29:ad:1c:a7:41:dc:79:b9:40:ce:e8:3a:e4:ce:34:64:2e:
ac:ac:1e:1a:cc:19:09:7f:4b:af:92:14:8e:45:4c:55:67:0d:
aa:55:48:ef:7f:4a:12:7a:14:70:1e:8f:8b:22:a6:bd:af:66:
2e:d2:f8:46:49:95:14:90:c6:e5:db:ff:26:35:76:06:26:8d:
70:80:94:7d:46:05:ee:6c:ff:cd:fc:4c:57:17:04:ac:b2:d8:
79:1d:1e:3f:b7:31:ea:0f:ec:d6:da:fb:2b:a9:65:52:f9:af:
e0:0a:fc:86:ed:39:7f:53:7b:63:83:56:ec:dc:f6:1a:a6:b9:
19:57:a8:54:60:28:60:0b:6d:c4:34:b4:3d:f5:2e:15:39:19:
c4:10:2b:c8:31:da:b8:d6:ac:46:03:e9:60:a6:59:c4:bf:c5:
9d:e1:5e:e2:69:da:00:ab:4f:de:82:1b:a1:34:56:54:94:da:
c0:96:a7:8f:37:27:25:14:49:c4:1e:19:b9:8d:3e:e3:8b:bd:
05:a3:83:e3:8b:56:ee:32:45:ac:39:5b:76:c6:58:f9:b5:83:
ca:81:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:52:47 2025 by rpki-client