Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: jk0rAt4XQ69wIfI42rUyOPwwaAEAMTFWe60m5Q2nIxw=
Subject key identifier: F9:07:1C:9D:EC:97:CA:50:CF:E3:DB:D1:5C:F0:50:24:CF:BF:8E:8A
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 01967E342F5F36876ABF209D4DD133CCBFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 21:01:11 +0000
Manifest this update: Mon 28 Apr 2025 21:01:11 +0000
Manifest next update: Tue 29 Apr 2025 21:01:11 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: 55EBXXLE3QWaoKSZ5UkMsTLeZk+7tSipRWx5dgOYpW0=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:2f:5f:36:87:6a:bf:20:9d:4d:d1:33:cc:bf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Apr 28 21:01:11 2025 GMT
Not After : Apr 29 21:01:11 2025 GMT
Subject: CN=f9071c9dec97ca50cfe3dbd15cf05024cfbf8e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:5d:1a:45:32:91:58:ec:e2:34:0c:78:3d:
49:f8:b3:ee:20:e0:0a:c2:ef:76:e5:ea:f2:db:1d:
fd:5c:74:81:76:80:61:23:dd:a7:64:de:c3:29:a6:
77:de:fa:a4:90:6c:ba:98:37:19:c4:7a:90:ac:46:
5d:89:00:e7:01:b2:27:72:2b:0b:4e:8a:b2:db:d5:
ef:aa:30:5d:6b:dc:77:5f:79:99:e1:86:fb:16:43:
22:1b:e0:cb:59:42:e0:b9:5f:7c:df:9e:77:a4:f5:
94:f0:12:74:de:1f:c1:fc:09:2a:0c:75:d6:f4:b1:
41:17:0a:ec:ea:de:d3:b8:0d:3c:66:d2:45:fb:f9:
89:db:78:c3:01:ab:30:1c:11:ec:03:03:7f:03:9a:
81:16:54:38:62:de:62:e9:28:2c:46:94:5e:48:ea:
ca:12:61:8f:e9:01:db:7c:89:94:27:d7:1e:07:41:
59:86:22:a2:85:30:f2:94:f3:0c:be:d9:f9:36:26:
97:93:84:1e:80:55:13:c3:bd:16:7c:b4:56:6d:a0:
71:da:e2:0c:06:17:08:db:68:0c:58:80:f1:96:a8:
86:25:60:be:c1:9a:25:03:86:fb:c7:49:70:3f:b0:
96:9a:8b:89:bb:46:c9:f3:a5:44:93:8c:94:b9:35:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:1C:9D:EC:97:CA:50:CF:E3:DB:D1:5C:F0:50:24:CF:BF:8E:8A
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:69:94:13:4b:ef:11:80:49:27:bc:9e:1c:ae:9b:f1:47:
fd:b5:f8:cf:eb:0c:0d:3b:06:41:d1:10:d0:0d:a6:73:fd:a0:
b8:d6:b7:25:9c:b3:7b:81:ab:85:76:ee:32:f4:c3:0a:79:c3:
3a:02:03:45:6c:94:67:ae:0a:88:1e:ce:85:6f:8d:56:ae:3c:
7e:51:31:d4:53:2d:8a:00:cb:1a:3d:fc:6b:0b:db:11:d5:77:
da:74:72:c1:0e:e1:5c:cc:97:a1:ee:a1:dd:b7:0d:25:24:13:
b5:70:3b:fa:ac:35:9e:0a:55:f8:b9:ff:53:0d:0f:f6:cb:8d:
a6:56:dc:18:26:15:b4:7b:67:40:86:a7:ef:37:e1:88:01:a7:
b8:25:3a:99:37:56:af:af:49:b5:ac:c3:d4:39:a1:04:4b:f4:
47:6d:20:d8:db:ef:6f:62:bf:8a:ea:96:42:57:05:c0:90:0f:
85:00:33:43:0d:81:54:9c:1b:79:91:b8:0c:3e:0e:a1:8a:d1:
1e:5c:9a:98:da:4e:a6:dd:b5:00:13:9d:7d:68:c4:4e:28:86:
22:09:95:0c:11:9d:63:e2:56:a0:2e:64:7d:75:5e:20:86:89:
64:4a:90:2a:60:b1:e3:9e:c8:02:d0:4f:aa:c2:22:e1:c8:c0:
9a:2f:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:18:57 2025 by rpki-client