Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: lnwYT+aLKkxSHBYR6WFaEB8u4xcDiAkzvwO4FKnGxvA=
Subject key identifier: DC:BE:D7:50:12:68:46:EB:61:DB:3A:AA:02:EF:B8:75:32:33:C2:FE
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 0196827DFA09E0ED2EB983F6A1319E93BE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 17:00:16 +0000
Manifest this update: Tue 29 Apr 2025 17:00:16 +0000
Manifest next update: Wed 30 Apr 2025 17:00:16 +0000
Files and hashes: 1: EjNs4c7ExfB-Xn86trYUTIGxY9M.roa (hash: 5gdWhqxScCqY+ac2NlShb0emeLCeoscJIL/u5Z1pQss=)
2: FQ_8F69qJ1OIvrywFvryFirKQj8.roa (hash: q2ovk1tVG4lGYgmszBcNRyfEZ8Wo4tad3oDRiuzylzY=)
3: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: TZsIyrl/aQrOD9j5iQrk2uadrAf+yAWdxH+SiELvRi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:fa:09:e0:ed:2e:b9:83:f6:a1:31:9e:93:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Apr 29 17:00:16 2025 GMT
Not After : Apr 30 17:00:16 2025 GMT
Subject: CN=dcbed750126846eb61db3aaa02efb8753233c2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:ff:43:07:af:8d:2d:87:e9:fd:07:0d:a4:
6f:46:28:20:26:6f:0f:5d:1f:43:b0:e9:d8:29:47:
70:3f:db:58:8a:7c:4d:f2:26:76:23:7b:e0:a7:f1:
bc:29:d1:e8:d6:32:bd:ca:c6:9a:fc:79:88:53:cd:
78:fe:ac:c1:24:dd:f5:65:02:c2:70:ed:3d:cf:43:
a7:89:21:bc:7d:ba:2b:d8:e3:e8:72:92:f2:6e:e8:
65:25:3c:8e:05:10:16:dc:7d:cc:03:73:e4:27:c1:
ae:2f:9b:52:71:b4:49:54:e2:7b:b0:46:46:62:ed:
de:10:24:a0:17:ef:ec:ac:4c:8a:0d:88:d9:52:bc:
36:c7:ec:c4:d7:11:b0:a9:01:58:06:25:07:0e:33:
ce:81:ca:a2:4b:65:6e:71:a6:eb:c5:b0:f3:28:d0:
a2:22:f7:a5:e4:0d:ee:be:60:0d:30:eb:2a:a5:4a:
8e:af:f8:cb:69:78:43:af:23:b1:81:16:8e:75:34:
68:28:7c:aa:d3:0a:31:00:ab:5f:d2:29:19:8a:63:
b6:b0:9b:5c:81:1f:ac:f4:d9:aa:f2:bc:18:a1:2d:
51:89:07:c9:23:6d:23:01:ec:7d:f3:82:07:41:50:
4f:e2:8b:0b:6c:7e:c8:b2:bc:a5:5b:fe:68:ca:2e:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:D7:50:12:68:46:EB:61:DB:3A:AA:02:EF:B8:75:32:33:C2:FE
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c5:e7:e1:28:c0:dd:7e:b8:92:96:d9:17:bc:c5:3b:f3:49:
71:fd:6a:a5:70:34:46:f7:b1:27:e3:42:57:01:82:b9:7b:ac:
21:e8:b5:6b:bd:fe:81:53:1d:13:dd:54:27:d5:a9:37:4b:69:
44:ab:de:3b:7b:57:84:36:92:3a:6e:88:50:78:33:17:00:84:
a4:1a:25:33:c7:ac:ec:b5:54:97:dd:93:6f:50:02:96:32:96:
53:d1:92:97:b6:20:2a:0f:e9:3d:49:cb:7a:b3:a2:f6:fd:b3:
e0:c4:f0:c9:11:7c:d7:f1:95:28:1d:69:4e:9a:f0:35:26:84:
49:12:68:e7:79:a6:37:1a:f8:98:be:ac:88:49:51:0a:07:94:
88:2c:4e:86:9a:10:a7:21:17:54:ab:14:e5:af:1c:3a:5f:f6:
84:43:ae:07:5a:34:75:dd:99:fe:62:e1:ed:24:ef:5a:d5:82:
c2:43:42:83:23:5b:69:ec:37:ad:c5:d3:dd:91:e6:4c:8e:e8:
0b:cd:ff:75:8d:38:e3:58:49:d9:fc:1d:81:b2:e3:ae:d5:a0:
e4:5d:c8:76:d7:4a:3b:46:02:aa:dd:b9:a0:2d:98:d6:81:b6:
a5:21:81:46:0f:bb:19:92:84:49:b8:38:1d:31:59:51:44:ab:
b3:e4:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:57:55 2025 by rpki-client