Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: WjvS7ftpBDymNUrWh8fiWEFBG4yK3O0haDCTQVDMGms=
Subject key identifier: 70:E5:40:06:51:5B:FA:25:3A:36:31:C5:9F:E5:FD:A6:74:2F:EA:1D
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01968322C95324F1DBB459962D544CC44DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 20:00:17 +0000
Manifest this update: Tue 29 Apr 2025 20:00:17 +0000
Manifest next update: Wed 30 Apr 2025 20:00:17 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: dE4NwaMO6dr0DbZ/NHyxcl/XXVYJugbdkC8CUdvYa9I=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:c9:53:24:f1:db:b4:59:96:2d:54:4c:c4:4d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Apr 29 20:00:17 2025 GMT
Not After : Apr 30 20:00:17 2025 GMT
Subject: CN=70e54006515bfa253a3631c59fe5fda6742fea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:54:ca:70:37:32:dc:96:85:48:01:56:6a:
62:63:a6:44:03:e8:5e:f8:28:ed:86:8f:44:ac:8f:
7d:e0:01:1f:70:84:68:f8:75:9f:55:b3:d1:dd:33:
80:80:5c:1b:aa:19:f1:5e:cc:0a:4a:ef:32:e3:f3:
2f:10:e5:a8:38:ee:63:4f:fe:3f:15:7e:3c:10:c9:
96:36:50:74:07:7b:5f:8c:53:d6:c4:a4:e3:d5:a4:
39:90:12:ce:4a:de:4d:aa:ff:7a:02:35:00:6a:ba:
94:39:83:2b:2e:b6:a6:7b:36:43:15:d3:93:e9:7c:
36:92:97:b2:6e:61:56:62:71:b4:44:fe:ff:04:e4:
15:8c:0b:b7:0b:0f:bd:86:93:fa:45:c5:6e:45:d3:
9c:20:08:35:14:31:a3:1b:96:b9:69:b5:13:e3:61:
5c:cb:a0:dd:45:aa:72:49:6b:7b:89:45:f7:7e:0d:
7b:52:b4:4e:3d:fa:8f:23:17:77:aa:14:97:0b:7f:
71:cb:e5:ea:17:ce:dd:91:9b:05:39:e1:b8:d9:72:
4c:b9:97:5e:63:84:03:43:5e:ec:8a:50:83:a7:e6:
41:10:78:15:3a:70:d3:f4:b9:b1:e4:9b:60:88:21:
49:ef:52:a1:6d:25:b5:c0:5c:a8:28:f6:c2:95:bb:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E5:40:06:51:5B:FA:25:3A:36:31:C5:9F:E5:FD:A6:74:2F:EA:1D
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4b:38:aa:2e:66:36:7d:18:58:f5:cb:19:66:5c:d3:97:a9:
07:cb:db:b2:b6:85:e5:7e:54:23:ff:ce:c2:1e:90:a1:af:bb:
21:44:99:df:33:6e:28:54:47:b6:c6:81:25:d4:a2:32:b5:6a:
e4:f1:31:33:84:41:bf:99:9c:66:1d:db:c9:49:ff:fe:92:fc:
01:34:0e:7f:5e:35:8c:a1:42:bd:da:35:fa:35:43:05:35:ee:
68:c1:5f:5c:0e:16:f0:94:0e:e1:fa:b3:bc:98:69:47:85:fe:
0a:6f:a1:82:cf:49:06:17:ec:e5:26:7d:95:8b:9a:3a:58:91:
19:b0:d3:90:f5:5d:c9:1d:9e:b6:bc:e5:b4:bc:9e:75:78:bf:
d1:c8:9f:3e:39:21:a0:2f:b7:35:59:0a:c1:c0:f8:a3:f5:84:
b4:9a:9c:45:83:75:97:41:7f:d4:32:dc:50:8f:4b:86:d3:a2:
ca:05:5a:0e:b3:82:a8:50:02:0d:05:31:fa:13:22:d4:8d:20:
ef:4b:3a:36:2c:d5:a3:86:1f:5d:e7:ef:f4:24:05:20:52:ae:
21:e7:b7:b7:51:ce:77:b0:9f:41:06:c6:b3:a1:43:ce:e1:fc:
00:aa:1a:8d:28:b3:b4:6a:77:72:eb:de:aa:fb:bd:c7:a6:8d:
bf:4c:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:15:04 2025 by rpki-client