Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: xXpAWkHjj8kduuFJrAxBflu/+rdy8iRRug28UY6PKNs=
Subject key identifier: F4:31:9A:AB:EF:16:71:D2:B8:F9:40:B2:DE:B9:6B:11:E6:97:9E:B9
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 0196895C35EA8A8126268B49508D9ED21BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 01:00:43 +0000
Manifest this update: Thu 01 May 2025 01:00:43 +0000
Manifest next update: Fri 02 May 2025 01:00:43 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: kU8UGI6QR+Aut++GRCJ2ClT3xoXAIQ9WJybiUwuTjfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:35:ea:8a:81:26:26:8b:49:50:8d:9e:d2:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: May 1 01:00:43 2025 GMT
Not After : May 2 01:00:43 2025 GMT
Subject: CN=f4319aabef1671d2b8f940b2deb96b11e6979eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:4d:c0:17:fa:40:bc:3b:06:c9:26:a2:61:
e9:5b:77:4d:0e:a6:06:50:a6:1f:b9:55:98:33:17:
99:50:ae:68:40:74:84:8a:af:bd:fb:9c:05:00:1c:
20:03:83:ac:a4:90:c3:30:fb:58:25:81:a4:12:df:
53:02:de:a2:61:2c:dc:d3:1a:62:b8:4a:6b:23:7a:
21:9c:b1:2b:7b:c4:a0:66:60:1b:ec:5a:a6:30:0c:
a5:2a:6d:70:5f:36:e2:c7:77:9e:40:94:3d:e9:90:
43:b7:13:37:95:14:bc:9a:73:f9:5a:ee:8f:76:e6:
8f:ab:fb:11:e7:27:be:5f:bc:89:e5:0e:3a:6e:58:
2f:0e:68:8f:bf:5d:c4:e2:b0:32:01:6d:e8:a5:60:
46:d0:49:c7:e0:51:fd:58:aa:d1:ee:59:d9:ce:3f:
8d:17:e0:59:b6:fa:f2:10:6f:77:35:0a:f0:3c:40:
13:af:12:2c:24:41:f2:2b:a0:d1:b2:0e:6e:57:5a:
8f:ae:74:77:dd:d3:a6:d1:1f:55:bf:6c:ef:1e:80:
fd:e2:ca:21:e1:65:a3:1b:bd:44:5f:fb:de:57:27:
14:a5:37:22:4b:83:62:c4:05:78:92:46:bd:e1:b6:
15:65:69:cb:e4:72:86:bc:70:9a:71:17:ea:44:58:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:9A:AB:EF:16:71:D2:B8:F9:40:B2:DE:B9:6B:11:E6:97:9E:B9
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a7:26:6b:d6:f5:77:ad:9c:4b:ce:28:a1:32:fe:bb:a6:1f:
98:22:23:52:89:d7:3f:25:81:4d:69:a9:83:dd:02:94:98:2e:
81:36:bf:a4:8e:b7:86:9f:78:83:31:4c:83:88:b4:a2:69:90:
ec:c0:0a:97:1e:a3:58:b8:52:51:40:ca:4c:15:5b:8b:41:af:
78:72:d8:1b:e5:0f:b0:37:aa:ca:f0:88:dc:f2:ab:9c:21:94:
bd:ee:3b:46:8b:4f:ab:83:44:7d:a3:94:f4:42:da:2a:4e:3b:
91:ae:bf:fe:7e:1f:97:ef:05:62:aa:f6:60:b4:34:fc:df:ec:
58:0d:e3:2a:ed:88:2d:bf:a2:34:c8:8f:01:59:77:2f:ac:33:
27:de:d3:5a:9f:a8:15:af:64:b4:f1:b7:82:9a:34:65:fd:9f:
72:a1:3c:66:28:e7:77:46:a7:93:95:9b:12:fa:a1:a4:7a:53:
11:bb:5e:b4:94:4a:91:4d:96:ae:20:5b:ad:1f:58:02:35:03:
c0:03:4e:fd:b4:2c:89:52:e4:f2:c1:c7:ae:9c:56:3d:2f:53:
af:29:14:ec:b5:c3:b7:49:64:93:ed:c9:2f:0e:1f:ab:0d:8f:
25:e0:83:10:d8:62:e9:a5:bc:36:31:9b:45:ee:19:7b:ac:e1:
2d:70:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:10:27 2025 by rpki-client