Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: bRyvgYMtAtMuKteGICyDPiWT7oTw473bCjT0PlKWs5o=
Subject key identifier: 27:78:A4:EA:72:C5:A7:AC:1D:4A:20:5B:A6:7E:D0:D0:DD:EC:09:0F
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 0196797B358844BB7CA71BF50B12FBE9C55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 23:00:39 +0000
Manifest this update: Sun 27 Apr 2025 23:00:39 +0000
Manifest next update: Mon 28 Apr 2025 23:00:39 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: W7a0fHBVxhmlQX1ptOvO0JWY5Ob/ksxlxFgJx9RJ18k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:35:88:44:bb:7c:a7:1b:f5:0b:12:fb:e9:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Apr 27 23:00:39 2025 GMT
Not After : Apr 28 23:00:39 2025 GMT
Subject: CN=2778a4ea72c5a7ac1d4a205ba67ed0d0ddec090f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:c5:7e:b0:ae:66:9c:a2:80:9a:37:ff:5f:
84:4d:0b:57:f7:c3:77:81:a1:25:f1:e2:5b:16:a4:
c9:28:5d:03:91:a1:0a:86:27:3a:aa:69:56:d3:6d:
04:fc:6f:f8:2e:d8:a9:14:e1:15:08:d2:c5:90:d9:
a2:2d:62:6c:2d:f7:d8:33:1e:8c:27:f0:5c:f4:d2:
dd:59:1f:9b:a6:2b:be:c8:01:2f:e0:df:ca:da:07:
0d:b0:95:ff:80:d5:a7:dc:c1:cb:69:80:7a:7b:9c:
10:f1:2c:e2:6b:a7:f2:a7:be:82:2f:d9:27:c4:d4:
6a:6a:37:7a:f5:33:3c:b8:46:cc:9b:ef:ff:83:ca:
b1:f7:db:73:26:9b:7d:ea:3f:2f:8e:b8:85:46:13:
a5:9a:f1:9b:5a:b3:03:2f:59:46:c6:70:e9:18:89:
6a:ae:68:ac:85:09:2a:ad:4c:26:e3:01:e7:66:1f:
14:5a:6a:11:13:30:09:4d:80:9e:02:10:51:45:00:
ef:0b:83:04:fe:a2:5d:5f:82:d5:7d:01:aa:80:d7:
25:16:02:f7:62:e3:8f:57:44:d7:2f:e8:1b:1c:67:
1b:b8:e7:e6:b1:8a:b5:b8:f1:f2:71:8d:b2:af:14:
7a:8d:4a:b1:c1:c8:c5:e0:7e:8c:f5:df:1c:d3:47:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:A4:EA:72:C5:A7:AC:1D:4A:20:5B:A6:7E:D0:D0:DD:EC:09:0F
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:da:3c:00:70:5d:31:cb:cf:ca:b1:06:a8:e0:3f:ee:e2:90:
62:e1:ec:6e:16:cc:27:cb:9b:37:df:05:e0:2c:e0:17:f0:2b:
02:bd:57:11:2a:36:80:e0:0e:58:07:1a:9b:ab:9f:d8:c5:04:
cc:6a:ce:25:33:74:f7:b6:93:21:f3:23:b5:e9:1b:ee:48:76:
6a:84:82:96:ab:18:4d:e1:37:b8:ab:0c:26:ca:ca:09:ce:80:
37:3e:21:65:ef:c5:db:c6:00:29:85:89:7a:67:52:60:c8:38:
01:c1:0d:4a:21:4c:f9:c3:b6:d7:12:2f:01:a7:a0:c2:31:25:
f2:53:19:20:c4:ad:56:ef:66:d1:82:88:dd:be:38:8b:84:8e:
6e:11:3f:4e:87:ff:fa:9d:38:c3:b2:35:67:ef:11:8d:92:79:
30:5b:5e:ee:7a:01:20:d3:d4:59:66:a0:bd:14:a3:80:b2:5c:
7f:f3:f4:42:73:ae:ee:0e:3d:f4:8e:47:66:0e:58:84:ee:cf:
26:c4:e5:c8:b8:8b:3f:6e:ed:3c:8a:4a:8d:69:93:ca:5d:3b:
d4:20:10:93:90:6c:02:71:74:5a:db:ee:01:87:6e:47:fd:f8:
12:ff:df:c2:42:cd:54:9d:77:ae:ca:40:74:f7:90:ce:cb:6d:
0f:1d:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:22:44 2025 by rpki-client