Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: i5KadkZTIitkMz/Hi/Mj5vTRHBRdpQdln39j7MIsAa4=
Subject key identifier: 2D:00:BF:30:84:DD:FE:69:D0:46:A7:E5:68:CE:1A:58:89:AF:76:21
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01967D8E9281B6A29E2C2E61A72E8E447D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 124D
Signing time: Mon 28 Apr 2025 18:00:17 +0000
Manifest this update: Mon 28 Apr 2025 18:00:17 +0000
Manifest next update: Tue 29 Apr 2025 18:00:17 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: hz8HCz8KKjB020tTFn5PkbRrPAHJARYtpg2qANMqnt0=)
2: jeS6MzGjyajhq1xTKVFYKQisOvE.roa (hash: jH0c3uNXNqP5D5cKBijjnuw+oityQx81s+MFU0/3N0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:92:81:b6:a2:9e:2c:2e:61:a7:2e:8e:44:7d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Apr 28 18:00:17 2025 GMT
Not After : Apr 29 18:00:17 2025 GMT
Subject: CN=2d00bf3084ddfe69d046a7e568ce1a5889af7621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:0e:91:07:7e:65:bd:9f:1a:30:3a:74:12:
a4:26:c2:8c:e0:4f:51:86:ba:49:c3:fa:62:88:20:
31:f1:16:21:f2:56:5e:68:bd:58:d6:b6:43:3f:8c:
88:1c:d9:61:bc:2c:91:35:46:2f:4b:af:ab:d3:64:
e7:7a:84:e5:31:26:5b:6c:a8:66:dc:78:5d:b2:1b:
12:03:b5:68:4a:9e:11:ab:87:f4:04:c2:22:91:0f:
47:03:b0:c4:f0:b7:5e:8a:2f:b8:dd:4b:61:25:59:
05:c3:f1:9e:92:a2:47:22:2d:d9:9b:4d:0c:7e:18:
30:d1:ba:c8:69:f6:f1:51:54:9d:bb:57:44:d9:5c:
04:77:53:f2:16:fa:ed:61:38:4d:26:ef:11:c0:72:
40:76:d8:fd:aa:0f:9c:83:c2:6a:da:21:10:6a:f0:
ea:1d:8d:68:c2:34:69:91:e8:46:84:0a:8b:dc:02:
a6:e0:05:b3:72:bc:99:ea:8c:ac:05:d7:01:b4:d7:
5f:ed:33:74:35:67:ff:09:95:3e:5d:33:a4:33:4c:
a9:52:29:a4:07:38:6d:f6:b2:fd:5c:6f:d8:80:01:
3f:2e:09:8f:45:c9:c8:98:b5:db:a4:cc:56:ba:c9:
13:97:28:6e:19:cb:ce:59:37:56:90:97:63:0d:ca:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:BF:30:84:DD:FE:69:D0:46:A7:E5:68:CE:1A:58:89:AF:76:21
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:67:b4:77:fe:e2:30:73:82:c3:78:59:2b:43:fc:b3:01:98:
d1:d0:ba:ac:be:30:33:aa:7a:73:ee:92:73:22:d5:e0:c3:eb:
6c:43:06:1e:a1:6c:aa:41:98:c3:ca:e0:b7:1b:37:4f:e8:29:
3b:46:bf:f4:6d:78:98:74:4c:e7:a4:c3:fa:15:ec:c8:c7:2b:
fb:8e:29:d2:42:08:9a:99:c0:a0:6d:28:15:02:e2:e1:48:3b:
9e:2f:83:a1:4e:4c:f6:6d:01:50:1d:03:e9:e9:5c:56:73:7a:
89:48:ef:51:96:ca:e5:30:58:24:a8:9a:48:ef:71:42:6c:10:
cf:db:c1:78:ee:c8:bb:1c:b6:8f:05:93:0e:e9:d4:41:c3:46:
bf:c5:d1:3c:7b:7b:a8:52:26:86:c8:ad:e5:9b:a7:f9:cd:b1:
ad:5d:b2:75:1c:2d:a8:07:50:e1:0c:2d:45:ca:98:e1:aa:89:
6d:38:35:de:ee:3c:c9:75:77:8c:cd:4c:e3:6c:ac:d5:14:53:
b5:4f:dc:84:86:14:ad:87:80:ad:4e:8e:2e:40:dd:6e:ec:2d:
f5:66:82:30:c6:bc:ac:71:84:b5:b9:8f:b3:e3:5f:00:62:70:
14:7d:51:8f:0e:7e:a5:da:14:20:08:3f:c4:eb:6d:70:5a:f6:
5b:55:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:01:46 2025 by rpki-client