Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: pSWgQRssdgPqGErCiKFa6rhHux7T9Zn3ej58gVXHXvw=
Subject key identifier: 11:38:56:87:F8:22:60:79:48:FD:60:18:E0:3A:E4:71:10:0C:74:E6
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 01967BD7716A44D69918FEAC9D458CBC55A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 1238
Signing time: Mon 28 Apr 2025 10:00:38 +0000
Manifest this update: Mon 28 Apr 2025 10:00:38 +0000
Manifest next update: Tue 29 Apr 2025 10:00:38 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: 7SHpdLozSbqzeEem/uE0xbOjdcTg9grBZFPqu1V7elw=)
2: gXT82y4_ruBTwVaX5bN2hgE4EKo.roa (hash: eKWZFW/juKdnFf5IqmdyNTYbtOCEhhxhQ9S8D2wh2us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:71:6a:44:d6:99:18:fe:ac:9d:45:8c:bc:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Apr 28 10:00:38 2025 GMT
Not After : Apr 29 10:00:38 2025 GMT
Subject: CN=11385687f822607948fd6018e03ae471100c74e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:db:41:72:35:6a:49:57:cf:71:68:d2:7e:
60:8a:77:48:6c:22:7d:06:70:b1:e9:0d:88:d3:c7:
7d:ce:18:e3:9b:ec:7c:89:e5:91:c2:0b:44:bb:fb:
19:a5:58:80:9c:d0:01:4d:36:a8:db:17:b2:02:11:
14:73:66:67:60:cc:0b:e0:61:b9:b7:22:aa:10:ae:
70:ac:89:05:59:39:89:a9:a6:a1:97:d6:67:64:7d:
a1:8a:d3:f2:2f:5f:4c:84:3a:59:93:94:26:99:74:
ac:ae:a7:12:4d:22:2b:39:ac:a6:22:b4:22:30:df:
94:97:94:0a:45:7b:9d:0c:40:03:37:a2:7b:10:da:
dd:b6:eb:ce:a7:4a:72:d7:ff:1f:15:b6:9a:05:95:
b0:5f:14:58:6b:ea:f2:28:6c:0e:52:12:6c:33:e6:
04:eb:50:87:7d:75:a0:5c:71:54:8e:70:6a:8c:9c:
7d:f8:26:c5:5c:9e:5a:f7:21:f2:59:0f:90:3e:1c:
57:90:14:0b:28:a9:bf:de:e0:f1:5f:7e:8a:50:65:
06:50:b1:88:d7:11:91:c6:ea:28:fd:58:9b:aa:9e:
f4:aa:86:75:90:6e:17:d0:24:56:b5:48:0e:fb:77:
4e:e6:43:61:31:98:8c:4b:94:ea:fd:3b:c0:c3:35:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:56:87:F8:22:60:79:48:FD:60:18:E0:3A:E4:71:10:0C:74:E6
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e6:3b:23:69:5f:3a:ac:ab:52:e5:2a:af:4d:2c:0e:56:75:
12:42:6e:83:26:5e:6a:a7:cd:7f:3f:b5:eb:b8:f1:6e:45:73:
29:c2:6f:d0:a9:6f:88:b3:f9:e3:3e:88:30:3b:4f:14:ce:f1:
f8:8f:a9:59:da:b3:ac:b2:77:9c:ea:60:9e:66:ca:5d:e7:52:
b5:25:8b:fa:2a:29:ee:13:c8:e3:d9:d1:f1:9c:ac:7d:22:16:
d4:2a:82:33:5e:54:d5:a8:cd:d4:f7:f9:e0:92:d0:a1:30:19:
aa:62:9c:9b:c2:29:ad:80:a2:be:83:08:cc:98:17:62:4a:fe:
3a:cf:e2:7e:66:41:90:1d:75:eb:63:32:7b:db:7c:50:68:34:
6c:8e:6d:89:b5:73:40:7b:8d:df:f3:ba:64:48:ed:39:c3:fd:
97:b8:61:aa:8c:9f:97:da:7f:10:01:ba:28:96:d4:11:3f:9f:
e7:d7:42:b6:2c:7b:a9:b8:06:0f:e0:e4:98:2a:30:60:86:b2:
c8:cd:3b:1b:1a:31:ca:52:7f:96:72:67:d3:4a:8d:a1:4b:45:
48:fc:8b:25:0f:a2:10:d8:99:be:fa:16:eb:0b:52:b6:b3:70:
e3:63:4d:7c:7d:8c:b8:3c:21:da:bc:c6:9c:74:b0:8f:bf:90:
e3:27:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:34:56 2025 by rpki-client