Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: tqltGvVRShhoUKBKCCtBxBLrlOJioaoTpgatHNhaSvQ=
Subject key identifier: 38:3C:F1:CF:51:81:2B:C1:BC:6E:1A:47:85:07:FD:0A:93:99:B7:A6
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 019674C2D2C3A8EBD30FDAF9998E69F9E044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 01:00:47 +0000
Manifest this update: Sun 27 Apr 2025 01:00:47 +0000
Manifest next update: Mon 28 Apr 2025 01:00:47 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: 0pT6cQNGFSGBMWvrwNu84TjT+CD03aRRG6sE0MHc8Lc=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:d2:c3:a8:eb:d3:0f:da:f9:99:8e:69:f9:e0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Apr 27 01:00:47 2025 GMT
Not After : Apr 28 01:00:47 2025 GMT
Subject: CN=383cf1cf51812bc1bc6e1a478507fd0a9399b7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:1d:7c:54:07:bf:92:c5:75:9e:e4:6f:9e:
68:fd:cb:79:3e:d1:db:a7:e6:af:22:51:b6:1b:72:
0b:2a:79:d8:f2:96:5a:71:39:2c:31:06:cd:8a:27:
52:f5:ee:7f:a2:16:f4:06:d9:49:e9:14:dd:75:79:
cd:26:9a:d5:ae:4c:f1:c6:93:bd:6e:ab:35:c4:4c:
e4:09:68:c5:01:85:b1:45:00:50:db:85:64:ee:95:
1a:26:64:0f:f6:ec:17:98:28:55:8e:17:bf:d5:57:
d7:d8:df:fb:c2:8d:0f:d0:dd:a6:28:ea:19:2d:50:
72:a5:16:64:ab:6c:cc:34:7f:02:97:64:e0:b5:af:
e9:7a:21:bf:51:c4:77:80:7c:49:4f:e5:c8:b0:34:
01:26:54:a4:a1:20:3b:44:04:b6:8f:7d:ac:c0:77:
74:f2:1b:5c:45:74:b3:a5:06:78:56:9a:f8:37:0e:
d8:5a:7b:16:63:93:a7:91:6d:15:01:7c:08:55:94:
76:12:f8:e4:b8:5d:af:8b:71:5b:39:57:20:ff:6b:
ce:f7:3c:ea:6d:71:83:d8:e9:d6:9e:3b:36:8a:ba:
e7:12:45:80:e0:fe:4b:c3:98:ac:ed:d2:5b:65:41:
84:73:f3:a7:46:34:b9:31:e0:18:91:34:e4:48:e7:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:F1:CF:51:81:2B:C1:BC:6E:1A:47:85:07:FD:0A:93:99:B7:A6
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ab:98:57:4e:c2:60:40:c9:14:aa:86:aa:bf:f8:86:1e:4d:
5c:9c:a9:9b:c4:f1:2b:bd:d3:37:4d:a0:0d:ca:fd:8f:f3:7b:
8c:0b:ce:08:3a:56:a2:21:17:ae:a1:cc:2f:ea:47:1a:18:4e:
80:1e:69:0b:8b:bf:d9:4d:b4:78:57:46:4c:67:10:db:af:dc:
9a:5b:72:b7:61:0b:9c:77:1e:e2:ed:5d:86:1f:9c:04:72:7f:
ea:42:e7:79:9a:41:fc:2d:a7:a6:f8:25:49:63:27:fc:04:a6:
50:2c:88:9b:94:6f:e5:39:6d:9e:39:c2:fb:f2:dc:af:14:3b:
b0:8b:cb:6b:79:59:6b:54:dc:df:b9:63:35:97:9a:fd:96:36:
0c:fb:96:35:26:69:97:0d:64:1c:d8:18:38:d3:f5:1b:4c:5b:
20:ed:01:37:69:6a:59:36:d4:d8:18:5b:c4:42:95:80:cd:10:
76:f3:a7:0a:b7:61:31:46:38:bb:61:ed:1f:42:f4:49:0b:4d:
29:cd:75:8b:4b:cd:b7:35:6c:20:07:e6:b7:03:01:27:78:4c:
16:1f:ae:18:77:fd:c7:33:56:cb:58:75:f5:95:bd:e0:a4:51:
46:ed:79:92:1e:3b:97:66:1f:1c:af:a3:23:d0:0d:61:70:42:
fd:5f:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:10 2025 by rpki-client