Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: AQwnrtcn5jvn8+eRKASjVrlNoLgo6KlUgqiAXocO9iY=
Subject key identifier: 7D:AD:10:3E:F1:A4:65:EF:C1:06:91:75:6E:6F:30:0C:D0:D7:E3:2D
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 0196816B6D5DCDB6DEBE1693BB07B01E0C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 12:00:23 +0000
Manifest this update: Tue 29 Apr 2025 12:00:23 +0000
Manifest next update: Wed 30 Apr 2025 12:00:23 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: 14T6z3VgybUaf6lqHZHX8R7xdngjHcsJV3DNNtkwxiY=)
2: DiWaQ483B87mmH9xBQjUT-gKREU.roa (hash: +HNilVQSXx0rRIqto+Np0Fi3ncazRRex3uQcgtaQ1OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:6d:5d:cd:b6:de:be:16:93:bb:07:b0:1e:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Apr 29 12:00:23 2025 GMT
Not After : Apr 30 12:00:23 2025 GMT
Subject: CN=7dad103ef1a465efc10691756e6f300cd0d7e32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:dd:83:db:33:41:38:1d:d2:e2:71:a2:59:
cb:09:0c:3c:0d:5a:cf:c2:a3:7d:ee:fd:41:8c:b8:
b4:6c:1c:a0:57:ba:45:f3:46:56:3a:9d:e7:be:07:
cd:2f:46:14:f9:06:f5:ac:1b:a5:be:cd:97:72:20:
c3:9a:67:f4:ef:15:57:bb:21:65:f6:a2:bd:3a:c8:
72:79:fb:d2:0c:fd:8c:fc:ba:a0:52:f5:a8:49:e0:
a0:6d:77:f0:cd:40:95:b6:15:7d:83:9c:62:48:20:
26:eb:66:c0:bd:b9:a4:45:df:da:a5:c2:56:30:7b:
a2:cb:18:57:3a:79:08:f7:53:31:ab:cc:02:6a:f4:
e9:45:c9:99:f5:f2:0a:3c:26:b2:76:b6:f3:0e:76:
5b:94:a9:10:92:13:ed:b3:03:1a:d3:31:6c:66:b7:
26:b2:8b:62:6e:93:fc:4a:3c:bd:d5:9c:85:28:77:
36:9f:96:21:1a:03:d9:1a:f3:ca:87:a3:22:b0:60:
41:48:52:c7:c8:7b:62:f0:09:1d:a1:25:ef:58:cf:
b3:91:64:7e:f4:1f:1b:cc:64:ca:60:2d:25:cf:23:
a4:43:a5:f0:dd:05:ab:e6:f3:04:c5:2b:a4:ea:69:
7f:9f:dc:ff:03:6f:a9:a2:4c:a8:0f:92:e1:ab:be:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:10:3E:F1:A4:65:EF:C1:06:91:75:6E:6F:30:0C:D0:D7:E3:2D
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ae:6e:17:88:9b:fa:ac:d3:0d:ff:da:2d:df:e9:92:cc:12:
57:8b:3b:1a:c0:79:09:7c:7b:d5:4c:f9:e4:d9:bc:60:19:d0:
b3:9b:c0:00:38:39:6e:91:da:35:94:cb:92:38:06:82:16:81:
39:ff:97:dd:65:53:77:4c:5e:b0:3d:28:63:ce:98:c7:ef:19:
e7:34:3a:80:08:8c:8a:08:fa:6e:ef:04:e2:a4:0e:01:ba:7d:
10:87:8e:6c:ba:92:79:d2:f3:2b:c5:d8:41:b2:7e:48:0b:16:
fc:76:5b:75:b7:ed:80:15:c9:91:c4:87:47:b3:e0:5e:45:5d:
49:61:bb:b6:2b:a0:58:0f:7f:e3:65:3a:92:a1:bc:46:7a:29:
60:8d:2c:77:c2:cc:cb:43:9d:04:cf:d3:cd:25:c3:5b:10:cf:
9b:cf:72:14:b9:80:75:a4:d0:68:82:b2:03:82:68:1d:a0:2c:
22:13:6f:21:19:a7:da:51:82:fe:e2:ff:87:dd:a9:48:c3:fb:
8b:5e:53:61:9c:7c:9b:52:f2:0f:e4:68:bd:f2:8d:e2:5c:c6:
e3:e2:c1:45:07:44:5c:87:d9:a1:f7:ec:55:da:cb:51:2f:f7:
ed:36:18:56:fb:1c:fd:a0:1f:32:75:b2:c5:cb:52:c6:5f:67:
bc:69:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:54:32 2025 by rpki-client