Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: DMx8bwqdlSDD4kkdRWE8KCRCq5JWKza4+VCgMQndF/A=
Subject key identifier: 84:62:B0:22:34:B5:29:FC:9D:29:15:C6:65:D5:31:16:45:C2:43:79
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019688B7C944E2DAC89CA72493D171464D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 22:01:08 +0000
Manifest this update: Wed 30 Apr 2025 22:01:08 +0000
Manifest next update: Thu 01 May 2025 22:01:08 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: n6FJyWpn5AoAlXVx7fZjyvv6sKszezb/esxeOh+EzUw=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:c9:44:e2:da:c8:9c:a7:24:93:d1:71:46:4d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Apr 30 22:01:08 2025 GMT
Not After : May 1 22:01:08 2025 GMT
Subject: CN=8462b02234b529fc9d2915c665d5311645c24379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:7a:6e:d4:bb:36:ab:84:f9:90:b2:db:f0:
08:67:47:2c:6b:61:79:e5:ab:98:e5:c9:f1:dc:21:
a1:4e:4c:0d:c3:79:8f:3b:14:0b:4c:0d:e1:93:96:
80:14:c0:f4:ee:80:02:74:e6:56:4e:b4:d7:dc:c3:
52:02:c7:11:ac:46:1f:03:24:e9:83:83:b2:f2:34:
a9:45:34:3a:32:6d:ff:a8:87:c3:4d:7d:cb:48:da:
87:f4:de:0f:38:6a:a2:0f:d0:c4:25:ae:9d:de:cf:
5c:f7:61:d4:78:10:69:3f:e6:63:d5:f0:3e:c1:ca:
2b:9d:85:77:5f:c9:f3:f5:9c:c2:6c:be:b2:a2:cc:
91:05:35:84:be:85:f8:1e:9c:8e:a7:fc:e9:bd:55:
b4:94:2d:55:d2:fb:06:2d:9a:f4:47:26:99:3f:9f:
49:40:73:3b:16:0a:ef:15:b0:cc:6a:03:75:9f:8a:
43:f5:6b:d7:89:8f:bc:56:40:d2:1e:28:90:08:0d:
58:fa:2b:14:be:cd:c0:ae:86:d3:39:db:97:11:c2:
cc:8a:b9:b2:01:0c:77:e7:a1:80:51:4d:2e:77:5f:
1f:ca:5b:a6:56:8a:05:27:42:3d:93:b2:b6:9c:a0:
d8:b8:0e:37:89:f5:ef:f1:a2:f2:fc:8f:7a:b0:42:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:B0:22:34:B5:29:FC:9D:29:15:C6:65:D5:31:16:45:C2:43:79
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a8:d6:b6:b7:82:49:ad:35:f7:05:8f:82:67:2d:d2:88:9c:
a9:7c:11:88:d2:c7:a8:0b:8e:fb:04:6f:39:37:68:2f:d2:b9:
8a:74:d3:9f:41:5e:05:f8:04:41:a6:fc:5f:db:bc:11:92:14:
f0:a4:87:47:74:f8:76:48:b5:7d:99:9d:46:e2:b9:51:9f:d0:
89:e7:d4:e1:9f:be:5c:b7:95:28:3c:fb:d9:59:80:8f:6d:26:
ee:ef:77:5f:53:76:43:29:32:72:58:4a:b4:79:96:0a:f4:21:
d6:44:7d:03:5e:b5:5e:79:99:ee:a5:d7:e3:b7:e1:1b:87:7b:
f9:2a:c1:b1:46:a2:1b:9e:ce:0e:3d:4c:bd:f5:1f:be:59:3d:
c8:0b:ce:a9:3e:62:b6:10:0e:97:57:fb:6f:13:ae:74:6f:f8:
aa:1b:aa:3b:db:fd:54:f5:2b:56:4c:53:c9:fb:c7:bd:58:78:
5d:2e:3b:9b:a5:0f:69:5a:9a:ff:87:fd:d9:e3:9e:a1:d3:45:
f2:e7:a5:db:f4:57:a3:21:f9:a4:fe:4d:9c:ca:75:dc:ba:69:
1f:02:a0:5e:b1:22:c6:1c:28:2b:ad:e2:37:ab:3b:72:4f:c4:
b6:3d:e7:c5:6e:26:fa:65:83:8c:67:af:ac:16:c2:fc:6d:70:
4a:f4:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:37:49 2025 by rpki-client