Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
File: 1kBlpUFdmUI5AUXyJHkB2TZFidc.mft (raw, json)
Hash identifier: K+nmwyFp+XAhR7fJNUIktO/x1kchtEKDB9GhYg4NRbQ=
Subject key identifier: 31:94:97:ED:98:74:2F:26:C7:0D:19:38:96:FC:1B:54:B1:08:96:7B
Authority key identifier: D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
Certificate issuer: /CN=d64065a5415d9942390145f2247901d9364589d7
Certificate serial: 0196726635CE611F74AE793383D1B162C7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
Manifest number: 09E1
Signing time: Sat 26 Apr 2025 14:00:23 +0000
Manifest this update: Sat 26 Apr 2025 14:00:23 +0000
Manifest next update: Sun 27 Apr 2025 14:00:23 +0000
Files and hashes: 1: 1kBlpUFdmUI5AUXyJHkB2TZFidc.crl (hash: HoNGrUaUt16gwlwqoYperE6bPvm/3x4oDaF8gg/CQmI=)
2: 6rPFWOjVfpn28_M8t16r5KAzkLA.roa (hash: wER3Gq8nSGCzekLgZFtgVD/F8/GF6EezM87XvHZecI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:35:ce:61:1f:74:ae:79:33:83:d1:b1:62:c7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64065a5415d9942390145f2247901d9364589d7
Validity
Not Before: Apr 26 14:00:23 2025 GMT
Not After : Apr 27 14:00:23 2025 GMT
Subject: CN=319497ed98742f26c70d193896fc1b54b108967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:22:b2:29:61:72:fa:ad:de:38:ce:4f:37:
44:e3:77:06:6d:a0:52:24:78:7a:11:40:af:df:00:
27:78:84:1e:5c:69:d2:a1:34:14:07:32:80:39:ab:
31:a3:13:af:f5:b6:3e:e0:17:a4:7a:c8:8a:07:01:
e2:c4:46:87:17:e2:3a:32:d0:94:5f:e9:a0:64:ff:
57:b3:2c:67:d3:05:fc:a5:8b:99:ae:ae:e2:70:19:
28:82:37:a9:19:8f:8c:fa:c0:8d:37:63:3b:8f:c0:
bf:c8:2d:e1:9f:95:1a:0b:9c:f7:78:89:0e:25:47:
7f:f0:57:65:5e:bb:ba:b5:ec:01:ed:36:b4:d8:97:
37:25:4c:ed:5a:c2:bc:63:35:34:ae:c6:29:4c:19:
d0:7c:1b:9e:e0:84:d2:aa:b9:73:a3:6f:e9:26:6b:
f0:f4:6d:fc:22:05:e4:73:5d:76:a4:ad:59:5c:aa:
b1:79:3a:c3:79:28:b0:f9:a7:73:29:7d:69:55:bb:
65:44:5a:82:58:1b:e6:af:7b:b6:12:af:ba:2a:d6:
0a:df:05:0d:5f:7c:84:01:2c:52:5f:9c:b5:30:9d:
47:2a:0a:10:6a:dd:59:6d:2e:b0:11:6c:79:31:63:
6f:7a:08:c7:fe:ca:14:1f:0c:c6:37:7d:4d:00:b2:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:94:97:ED:98:74:2F:26:C7:0D:19:38:96:FC:1B:54:B1:08:96:7B
X509v3 Authority Key Identifier:
keyid:D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a3:37:eb:0b:a9:05:f7:ed:37:3c:65:d8:55:7f:1a:a2:3e:
de:08:21:87:87:e3:18:4f:72:e4:ad:d4:6a:a5:bb:5d:79:b6:
e0:eb:1d:7f:50:e7:c6:36:e2:c1:1c:2a:a9:f2:fb:68:db:a8:
38:03:8a:bd:32:4e:80:26:93:0f:1a:6a:91:57:fc:9b:df:25:
3f:23:f6:d3:56:15:2e:3d:d6:7f:e4:ae:0f:df:e5:60:92:a0:
af:3a:b4:53:d7:2b:e2:fa:35:c0:b3:99:fe:9e:8a:82:4d:19:
4f:23:83:63:8e:80:2a:06:5f:55:8f:9f:92:37:cc:32:02:57:
60:a1:f2:be:d2:98:f8:9a:a4:57:6c:a7:11:b1:79:97:04:6c:
e7:28:e5:9c:fc:42:5c:45:d2:8d:3c:7b:81:05:27:1a:9b:a5:
42:f0:50:3f:78:02:ab:0f:3f:40:04:d0:73:6e:48:a6:f3:0c:
02:11:2e:35:e3:20:d6:e4:3a:f4:e5:9b:fd:30:9f:10:6f:d7:
3e:d6:c8:9a:b5:6c:08:01:87:1a:89:a3:5d:63:92:34:3e:7b:
a7:6f:26:c6:e4:f2:3d:45:7a:f1:a2:b2:9d:f9:8b:6b:7d:e8:
6b:95:64:03:ff:8d:15:21:f5:69:e8:b3:d5:ca:81:c6:f3:a1:
35:14:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:58 2025 by rpki-client