Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: SLwIUiU2GL2DagjbKIZ/e3jT96lvaXFdreXDT7OiP6Y=
Subject key identifier: 94:42:7B:5C:DF:CE:8B:2C:5D:85:39:E6:D0:C7:39:15:8B:75:29:31
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 0196741DDC3DA710E2FA8C48CE5D8157576A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 22:00:36 +0000
Manifest this update: Sat 26 Apr 2025 22:00:36 +0000
Manifest next update: Sun 27 Apr 2025 22:00:36 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: Y76HwC1iN7CEqp3tToLvZmURmTKP/pesC1hhfe1J5Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:dc:3d:a7:10:e2:fa:8c:48:ce:5d:81:57:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Apr 26 22:00:36 2025 GMT
Not After : Apr 27 22:00:36 2025 GMT
Subject: CN=94427b5cdfce8b2c5d8539e6d0c739158b752931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:0e:c9:0f:87:c2:69:06:20:07:ce:27:ac:
37:50:a0:27:ad:b1:ec:17:b3:f9:c7:a8:bd:74:7b:
5c:ce:d0:33:47:f9:7a:76:a6:ec:25:4b:13:68:b4:
dd:f1:49:07:fb:16:58:40:d5:65:03:b7:32:cc:3d:
3f:24:ac:31:43:c6:0f:5c:e9:19:e8:63:5d:13:40:
c4:51:c1:fc:31:37:bf:73:d3:83:ca:a0:95:17:e0:
1e:ca:2b:d6:01:2d:43:da:49:6d:7b:29:99:d0:49:
6e:f7:8e:6d:af:cf:c3:53:96:d0:df:90:f3:6d:f9:
c7:95:e5:36:2a:a7:ca:2e:3c:09:75:bd:da:a7:d8:
31:17:34:4a:eb:72:6e:51:fb:d7:e3:4f:e2:5d:08:
67:b6:9a:c0:6f:31:ef:d8:77:cc:aa:a0:d9:6a:e9:
24:02:1a:90:84:13:cb:21:b4:e2:f1:6d:5a:a7:72:
a9:dd:6c:8a:00:e3:a0:76:fb:ab:2a:47:d5:ef:64:
54:7a:1e:09:6d:d0:84:78:91:11:48:bc:56:87:fb:
5a:f1:42:8f:f8:e3:b4:91:66:67:bf:41:0e:3c:07:
00:29:18:af:a0:f9:c9:19:fe:63:83:7e:cc:66:72:
e1:3d:c1:c0:d3:97:71:28:40:9f:b6:7d:3c:b7:e3:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:7B:5C:DF:CE:8B:2C:5D:85:39:E6:D0:C7:39:15:8B:75:29:31
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:10:50:9c:a1:e5:87:dd:83:7e:4d:79:46:27:b7:38:4f:ab:
dd:84:5b:6e:a5:70:8d:61:b7:df:2f:37:97:f5:7c:35:dd:80:
d1:ef:7f:c9:0f:9a:15:a1:ad:f1:5f:53:b5:a3:91:6d:a9:a0:
6d:58:22:d8:8b:32:63:82:d5:ea:b1:60:4e:34:6e:4b:1b:aa:
9f:07:eb:14:c6:8c:e0:37:8e:a0:c5:0b:c9:e8:03:1c:63:e2:
77:3c:56:84:bf:8f:75:c9:5f:3c:bf:56:0e:d0:9b:df:41:b4:
46:8b:9b:33:45:ca:de:8d:87:81:3d:95:85:90:03:50:14:d8:
c7:85:2e:52:27:fc:6c:db:aa:6b:64:97:11:e5:c0:55:e5:df:
de:68:2f:bf:68:50:d6:a3:72:c9:63:39:f0:f0:3e:0c:7a:ea:
e2:56:e8:f7:10:e3:fd:78:c3:91:87:17:ca:ac:c6:3f:3b:8f:
ed:9c:d6:20:63:2f:85:6b:1c:bc:c0:a2:94:49:fd:2c:3f:97:
59:9d:44:92:ec:81:81:8c:c2:e6:2c:04:02:82:f4:c7:ce:79:
0c:8d:da:dd:65:53:59:08:d2:75:46:b4:17:03:f9:43:eb:8d:
75:f3:4e:9c:08:cd:09:09:ed:e3:8a:01:88:55:de:6c:ba:5b:
ca:0d:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:02 2025 by rpki-client