Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier: K4vlkJnXyvbYwuaEu/1fdEurd8QfxmrF+6fZZWreq6I=
Subject key identifier: 18:39:0C:9D:09:0D:5E:91:A8:39:96:0E:90:40:BF:A0:E0:0D:47:F5
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial: 01967AC4D4AC6B1C952E95DBE9AC55C3C4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number: 08FA
Signing time: Mon 28 Apr 2025 05:00:41 +0000
Manifest this update: Mon 28 Apr 2025 05:00:41 +0000
Manifest next update: Tue 29 Apr 2025 05:00:41 +0000
Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: /aJP2/OrwipwqAhLK1K/aFCttmkfHOoM8RiZpSKLLNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:d4:ac:6b:1c:95:2e:95:db:e9:ac:55:c3:c4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
Validity
Not Before: Apr 28 05:00:41 2025 GMT
Not After : Apr 29 05:00:41 2025 GMT
Subject: CN=18390c9d090d5e91a839960e9040bfa0e00d47f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:95:74:77:a4:03:3c:f1:89:5e:24:fc:5e:
6f:c0:01:49:92:51:51:e5:04:34:ab:ef:15:21:5c:
3b:a2:08:fa:7c:11:20:ff:96:58:4d:02:4e:0c:ae:
bc:65:70:64:cd:cc:06:cd:f5:fa:ce:e4:e2:73:1f:
ab:0f:8e:0c:f6:d3:aa:72:36:21:b4:7a:85:c0:2b:
2e:03:bc:a1:ae:bb:8f:95:fd:a3:f7:93:74:5a:85:
9f:71:a0:75:b0:01:37:a3:2e:8c:db:93:6c:62:0d:
4a:76:23:f2:6d:2b:b2:13:9d:ce:80:f3:f2:89:4c:
eb:fe:34:15:cc:f9:8d:7a:9c:9c:3b:7b:39:7f:f6:
ce:f5:56:a7:8f:33:bb:08:4c:e3:be:04:14:94:dc:
08:49:24:5e:d9:03:79:ad:ce:0c:b9:7b:18:09:b8:
27:74:a2:f6:1a:9f:41:24:a6:6a:62:c1:19:cf:7c:
7b:27:c9:b3:c2:02:8d:fd:ec:9b:57:80:44:a0:2b:
b6:20:ae:08:9e:99:f6:3a:23:3d:ff:13:4d:a9:99:
76:6b:4f:a2:b9:b5:4a:42:38:71:27:55:9a:2b:ca:
1a:6d:68:a9:84:8d:21:48:c0:6f:f7:f6:26:bb:37:
f0:47:44:64:80:b6:7d:f1:9f:82:b6:9f:53:b6:9d:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:0C:9D:09:0D:5E:91:A8:39:96:0E:90:40:BF:A0:E0:0D:47:F5
X509v3 Authority Key Identifier:
keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6f:37:34:92:04:f0:a8:d2:47:b4:72:10:46:86:d0:c1:45:
7a:0d:f9:2b:6a:cf:84:bd:64:b9:75:65:f2:45:5a:63:a6:a8:
9e:a9:99:e9:05:2b:a6:b5:98:b8:87:8d:39:b8:4f:53:24:71:
33:95:f2:ce:9a:75:90:14:4e:36:02:2f:b3:ed:32:d1:04:5e:
85:8f:a1:ad:5b:31:95:ca:45:af:f3:f6:e8:ec:06:ed:0a:ee:
cd:72:75:04:2f:63:3d:81:7e:6c:27:16:14:e4:ed:42:e2:3b:
5b:74:7b:39:23:e1:66:4f:ee:73:6d:1a:9f:28:ca:48:26:ab:
aa:97:5a:8a:46:55:ef:9a:4b:0b:22:84:36:f6:f6:78:b0:62:
92:e3:f5:f1:4f:25:ff:0f:3a:84:01:14:28:c5:1b:56:0c:d0:
ed:f7:e1:de:fe:b7:08:45:9b:47:54:72:37:17:19:4d:58:cf:
a6:3e:cd:96:ae:8c:e9:42:7a:de:bc:95:f0:a8:36:f4:00:14:
c0:de:dc:e9:b1:62:c5:d5:80:60:72:fb:66:1a:ec:61:01:e7:
2b:d1:96:3d:0b:9d:63:45:48:0e:7e:67:92:41:da:78:91:d7:
31:41:d1:b0:5d:f8:6a:ad:f4:cb:c8:e1:ac:c5:98:a9:ae:cd:
1c:2b:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:47:10 2025 by rpki-client