Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: 5rftfjUvsfAMogpYqk4UZ7/ZFhYHOaWLQLZP8IGKN44=
Subject key identifier: E9:21:3D:57:D2:A6:58:49:B3:A1:AA:75:56:C6:2C:2C:40:E3:B0:DE
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 0196759E52DA55E42E52868F2D4A568BBDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0D13
Signing time: Sun 27 Apr 2025 05:00:32 +0000
Manifest this update: Sun 27 Apr 2025 05:00:32 +0000
Manifest next update: Mon 28 Apr 2025 05:00:32 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: /ORnylpw2KTjvOKM+RKFi+UTIs7M4RhcGcjoGtJlSrc=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:52:da:55:e4:2e:52:86:8f:2d:4a:56:8b:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Apr 27 05:00:32 2025 GMT
Not After : Apr 28 05:00:32 2025 GMT
Subject: CN=e9213d57d2a65849b3a1aa7556c62c2c40e3b0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:48:44:50:83:d3:8b:eb:21:4c:c1:c5:fd:
98:a2:80:7a:e6:93:2a:63:f4:f5:3f:12:a0:b6:a5:
10:30:eb:56:73:99:d9:1c:26:8e:bc:6b:96:b5:74:
80:7a:40:5a:b7:7a:60:df:e7:54:48:58:68:8d:4c:
9f:a9:87:44:11:48:54:ef:56:ea:9a:7e:08:ec:a0:
21:f0:69:bd:64:36:e3:a4:07:9c:9e:47:85:04:18:
ea:9d:4a:b5:22:0a:d8:72:3d:c7:c9:da:da:53:89:
31:83:78:66:00:4e:4f:b1:2c:2f:4e:d1:d0:f1:d6:
64:39:16:a4:5e:d0:fe:5b:6a:4f:1f:97:4c:f9:7d:
60:8d:a8:0e:be:3a:77:5b:55:99:5a:d6:42:7c:65:
c4:e8:cc:f3:c0:b0:1b:36:7c:a2:4a:1b:00:6b:5d:
f0:6e:63:39:29:51:bd:5a:c0:af:ff:4e:25:cf:98:
4d:ad:26:9f:b7:b5:e3:45:0e:35:bd:99:d0:4d:05:
08:40:ec:cf:7e:dd:7c:8f:c5:58:31:96:ae:e6:0a:
4c:fd:ff:0d:2e:c4:4a:93:c0:10:02:a5:94:58:b4:
5f:5a:e8:14:73:65:c5:a8:2c:09:36:51:7f:23:24:
e4:1f:a2:0b:91:8e:21:4b:58:e8:19:97:ce:a4:93:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:3D:57:D2:A6:58:49:B3:A1:AA:75:56:C6:2C:2C:40:E3:B0:DE
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:37:cf:f3:f6:b8:c0:59:2d:29:ee:28:7f:86:25:59:6d:
a4:88:bb:32:60:9f:44:81:d9:a6:55:be:51:37:34:ea:fe:27:
26:42:e4:8b:df:e6:d3:e1:04:7e:c9:51:49:9e:bf:9b:ec:3b:
a9:ea:e8:77:fa:4c:dc:19:ac:cb:a4:af:01:04:68:01:22:a8:
a9:9d:9f:88:3f:66:38:f6:67:ce:cb:91:71:46:7d:ff:e5:0f:
7a:db:e7:a3:65:fc:6d:e2:75:48:9b:58:ff:e1:f5:88:b8:a1:
79:6b:d1:9d:a2:c5:cf:71:1f:0f:cd:63:ac:97:f8:ff:16:58:
95:d4:94:a4:30:c3:f7:da:c5:e8:c2:1f:03:b5:86:c2:2d:9b:
b4:07:24:97:ef:15:4d:5c:20:6d:ff:c4:f1:25:a3:2e:fe:41:
2c:60:26:12:4d:e0:e9:c5:da:14:04:60:5d:3a:df:63:ef:04:
11:b0:78:8d:55:6b:f8:b1:ba:fb:09:63:ea:d6:01:54:ec:c3:
92:8e:6d:d5:2c:1f:d7:88:e2:f0:14:2c:ba:37:19:06:2f:39:
22:f8:81:fb:8d:bb:c4:8b:5b:a5:78:e4:7e:e7:a1:76:a6:d4:
63:67:62:8c:54:da:e7:16:b1:17:9d:01:00:4e:61:80:5f:24:
db:c0:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:22 2025 by rpki-client