Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
File: EVNfj6S19RUz1yTq-Q26mXFfxvw.mft (raw, json)
Hash identifier: spksZ/+iX9z+aSGGejaGUXvVRR6tsfSlECFtpL9KEwM=
Subject key identifier: 39:14:6F:F8:E6:D6:BD:47:A7:BF:D9:C2:8A:6A:2C:A4:5D:DF:57:DA
Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Certificate issuer: /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Certificate serial: 019699AB36533A3AE2ACCA3EF8A008CC6F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
Manifest number: 1520
Signing time: Sun 04 May 2025 05:00:56 +0000
Manifest this update: Sun 04 May 2025 05:00:56 +0000
Manifest next update: Mon 05 May 2025 05:00:56 +0000
Files and hashes: 1: EVNfj6S19RUz1yTq-Q26mXFfxvw.crl (hash: v9IAsNu84KETmLrluYB2Stq3S4S7GlGheYE2xyx8i0Q=)
2: Qpu6vaOAY5n2mIT4E3Vh72x5kkE.roa (hash: P0y6XucznI/69rbHwQvBGeYNmc4RVWARo9Yt1RUz3AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:ab:36:53:3a:3a:e2:ac:ca:3e:f8:a0:08:cc:6f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Validity
Not Before: May 4 05:00:56 2025 GMT
Not After : May 5 05:00:56 2025 GMT
Subject: CN=39146ff8e6d6bd47a7bfd9c28a6a2ca45ddf57da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:a6:19:b6:1d:5c:40:bb:1a:83:96:2c:47:
6d:6c:a9:29:6e:93:d8:41:f3:b4:ea:28:32:ed:be:
25:04:56:a9:45:84:28:51:cb:a6:e5:22:c5:63:bc:
01:92:47:51:8f:27:2e:6f:50:58:64:9b:5f:55:ec:
48:e0:35:a5:38:5e:15:7a:1a:02:8a:ba:26:a3:06:
7a:ef:91:cf:7e:27:12:74:28:c7:77:2a:2f:31:8c:
40:0e:d7:f3:90:62:68:60:b3:9e:05:52:b8:7a:92:
33:02:87:d4:83:c4:46:2d:ff:f9:5f:00:ad:ba:e2:
8f:07:c0:79:b0:13:57:a2:54:8b:53:d9:47:be:8c:
53:64:ef:9a:7a:5e:a4:fe:ba:4f:1c:c1:c1:44:49:
ae:55:4b:d3:27:d1:0b:38:6c:b7:35:4e:04:c8:89:
24:1c:9b:51:bf:2d:86:c2:c7:14:ce:d8:38:43:12:
83:91:df:9f:0e:98:84:e7:2e:4d:c6:af:8d:a6:92:
90:73:d9:ea:be:ab:79:e3:92:99:58:a3:91:10:bd:
a9:1c:c9:ff:5e:e7:d1:c5:bc:5f:83:31:a9:32:44:
eb:54:d1:7f:cf:4a:6b:5a:f6:86:d6:3b:60:07:0b:
9f:62:2d:8c:39:fd:7e:5a:52:1f:e2:d3:4b:8b:86:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:6F:F8:E6:D6:BD:47:A7:BF:D9:C2:8A:6A:2C:A4:5D:DF:57:DA
X509v3 Authority Key Identifier:
keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:79:7e:af:21:0b:0b:a1:2f:5d:e6:68:88:4a:86:f8:e6:28:
c3:91:f0:20:30:17:51:d3:4a:da:f2:91:4d:e2:01:ee:75:b5:
17:76:9e:49:8d:bd:17:2c:b8:70:75:60:a7:69:b4:ba:3f:78:
2e:f4:43:c3:3d:41:d7:21:9b:d8:1b:72:72:10:0d:97:fb:b8:
7d:43:aa:17:f2:f9:06:75:a4:47:7a:9d:d8:e3:02:b3:64:46:
82:fa:c8:4a:e1:fd:72:56:e5:c1:ea:1d:1d:ba:22:ae:d1:20:
a5:4f:36:61:9f:d3:16:34:aa:e8:82:ba:ba:79:6d:2e:e7:a5:
63:e6:58:dc:fa:8b:a6:b0:72:59:81:1b:cb:1f:02:cc:ff:75:
64:7d:4f:a0:13:74:24:c6:c0:0e:2e:a2:ed:9b:c2:fc:e6:93:
5a:29:02:46:7a:be:06:1b:f7:f2:29:08:1c:56:a1:88:55:09:
05:73:1a:b3:6d:fe:85:d7:ee:29:82:74:67:cb:77:eb:27:eb:
6c:24:87:41:36:cf:28:6a:73:20:ea:f0:be:ea:e1:32:7f:07:
18:e3:35:61:a7:32:fd:71:93:6c:76:73:58:47:d1:89:a4:45:
06:6e:08:66:ef:16:62:6c:36:bb:aa:40:7a:db:47:e4:db:7f:
1e:04:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:54:56 2025 by rpki-client