Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: 2HWZt5F4qI+j9BeyLPv8yA0PMm5HjUt6btimkO0EBKI=
Subject key identifier: 68:A1:BE:84:29:DF:4D:A8:26:85:EB:2C:40:2E:DA:9B:AA:EC:3A:A2
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 01968CCAD11AE4E37068194EA9223BF723BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 0D15
Signing time: Thu 01 May 2025 17:00:24 +0000
Manifest this update: Thu 01 May 2025 17:00:24 +0000
Manifest next update: Fri 02 May 2025 17:00:24 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: iEDiJRRJTxofuw4Kt6oANTcbgtknoQxOK7CuVE4uMdU=)
2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:ca:d1:1a:e4:e3:70:68:19:4e:a9:22:3b:f7:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: May 1 17:00:24 2025 GMT
Not After : May 2 17:00:24 2025 GMT
Subject: CN=68a1be8429df4da82685eb2c402eda9baaec3aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:69:d0:9f:cd:6c:b3:ad:11:3c:5d:b5:97:
d2:50:52:4b:2f:19:f2:a1:d6:2f:14:77:68:c2:83:
5f:a1:1a:b9:b8:f1:fc:64:2d:ad:28:40:f3:78:5b:
67:0e:fe:3d:f5:05:6a:b8:24:81:f4:81:0e:c2:e5:
2c:02:43:23:25:70:39:28:ea:fe:3e:d4:91:24:80:
28:5d:6b:a9:68:ab:1c:b8:2c:ea:40:23:0b:fe:51:
f1:58:fd:7a:6b:e5:d6:f2:87:22:1c:9c:8d:c6:5f:
cb:e8:c1:5f:d6:dd:86:c6:f4:42:a8:9f:7a:52:55:
ee:32:1d:e1:48:9d:e2:f2:b6:35:55:37:17:9c:34:
73:1a:19:a8:86:e1:44:4a:69:68:0f:10:aa:ba:9a:
23:6f:3a:18:7d:62:8d:0e:90:12:ed:7c:7e:7e:06:
72:43:60:a2:ce:22:78:fa:52:1a:10:d5:fa:38:dc:
9d:7c:d1:dc:17:09:3e:a8:cb:ca:bf:27:20:7a:7c:
af:88:ef:38:81:48:aa:5c:73:7d:a7:8f:40:89:3f:
85:f9:62:49:18:39:8c:cf:40:20:b7:32:f2:09:f5:
b6:3a:83:82:49:4b:67:67:bb:82:2a:65:8e:cd:25:
48:52:7e:1f:d2:d7:33:ad:a6:1b:ab:b9:cf:0e:58:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:BE:84:29:DF:4D:A8:26:85:EB:2C:40:2E:DA:9B:AA:EC:3A:A2
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:29:45:38:eb:67:a8:8e:44:5d:99:9f:a6:13:f2:b0:d7:d0:
f2:a4:0b:8b:e5:3e:e7:6d:41:da:72:41:40:dd:f9:93:8d:2b:
1a:ce:a7:e3:11:81:2f:e6:e9:f5:81:df:7d:8e:24:04:df:7b:
92:65:c9:ac:1e:80:ff:ec:ae:14:d2:36:9d:fa:ba:d1:53:86:
03:2a:92:e7:6e:00:a8:af:61:36:cc:26:9f:80:72:93:6d:d6:
18:28:28:96:da:4c:2f:da:da:81:9b:05:4a:b9:bc:85:2b:36:
b2:b4:39:d1:41:2c:27:d7:00:78:34:f1:d9:3e:70:cf:22:28:
9b:7c:db:73:fe:0d:89:ea:75:f3:18:c3:53:b5:49:0d:8f:de:
6a:c3:47:e1:f1:89:a5:9d:a1:01:91:f6:24:1a:a6:ad:56:7f:
6d:df:cd:84:d5:9e:66:de:06:76:c1:17:71:18:cb:7c:d0:90:
fd:14:59:24:20:ef:04:fd:0b:2c:3e:b9:aa:01:31:2a:0d:57:
41:0b:10:78:9c:1c:d4:5f:e3:7d:7a:c7:97:fd:b5:e3:e5:4f:
e3:42:1d:22:aa:a2:8b:7f:e8:ed:34:68:c5:fd:b5:b7:44:43:
8e:08:43:43:6a:18:d3:20:df:f7:40:ef:fb:04:70:28:bd:c6:
54:3d:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:56:54 2025 by rpki-client