Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: KDTC233Ldb1QBPA5yGvogBxY0CTTrkLuQ3gcCU8drX8=
Subject key identifier: D0:3D:40:3E:FE:F8:22:18:E4:9B:73:0E:5D:59:09:4E:BF:FB:4D:B7
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 0196729D481B5AC7EB65831691B99A736491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 0450
Signing time: Sat 26 Apr 2025 15:00:32 +0000
Manifest this update: Sat 26 Apr 2025 15:00:32 +0000
Manifest next update: Sun 27 Apr 2025 15:00:32 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: kbetJB+YsUcswoliVyv92NpINsR7F6Oz+mv+07MiX/c=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:48:1b:5a:c7:eb:65:83:16:91:b9:9a:73:64:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Apr 26 15:00:32 2025 GMT
Not After : Apr 27 15:00:32 2025 GMT
Subject: CN=d03d403efef82218e49b730e5d59094ebffb4db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:6c:5b:37:c8:39:24:82:3d:dc:be:25:15:
f3:91:e2:88:77:08:50:68:9e:bc:73:18:c7:af:e2:
c4:32:e5:45:e2:da:bc:8e:b7:23:31:9f:f8:04:44:
0c:bf:dd:6d:c9:84:e6:d2:03:75:ef:04:f4:4d:bd:
f8:4a:dc:ad:b0:0f:84:aa:7d:78:22:76:29:b0:a4:
79:33:6e:bc:df:71:18:86:5e:1a:f9:fd:22:d5:27:
67:b2:85:41:a4:84:cc:53:ac:fd:c9:6a:a4:5f:7f:
43:71:7c:7c:c5:27:9f:bf:f7:9a:ed:c6:69:ff:d0:
b3:1b:f5:c8:2a:c3:e9:26:92:20:7a:d1:ab:8f:45:
3a:25:88:6b:1c:69:b2:72:22:e9:84:fa:66:a6:64:
64:ca:fa:1f:1d:44:58:85:3a:6e:85:54:2e:5a:a4:
7d:5a:3b:f8:b5:f7:dd:99:f0:f9:0c:e4:3c:91:24:
7a:8d:9a:2a:f4:4a:c4:1e:c9:d8:25:7a:9e:64:f6:
35:c7:60:15:b4:31:fa:43:0b:f5:bc:7d:75:62:95:
cc:81:71:f3:99:ce:45:80:7e:bc:de:0a:89:c2:64:
6b:52:2b:95:eb:38:e4:ec:f7:b7:b2:38:eb:3a:3c:
5f:8e:49:f4:74:93:fa:3f:9d:a0:b7:a7:d0:c2:1f:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:40:3E:FE:F8:22:18:E4:9B:73:0E:5D:59:09:4E:BF:FB:4D:B7
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8d:96:0a:aa:ec:57:6f:e6:1c:8e:78:5f:39:2b:28:8e:21:
c4:d3:83:23:ea:2a:df:2a:91:c5:15:da:8b:88:c9:b7:ff:bd:
7e:97:f4:c8:d2:b8:fa:ae:a9:fe:3a:72:f9:0e:1f:3f:53:53:
e3:ac:b6:15:7e:bc:82:de:ff:ed:be:b2:fd:03:7c:da:e2:0b:
67:d4:ea:52:c7:e1:9d:8e:59:5d:26:a2:e3:04:18:cb:8b:f0:
67:0a:ee:19:a2:f1:b1:be:bc:0e:15:69:a7:d0:11:67:9e:9f:
83:ed:b1:26:c0:1a:93:8c:37:1a:0b:4e:91:6b:61:3c:c1:db:
f6:ff:1e:e3:c7:ab:12:0c:4e:e9:0c:f5:06:69:39:f1:f0:e8:
82:55:e9:fb:68:88:7b:c1:e4:96:98:94:2c:24:9a:7f:ee:3e:
25:30:e4:8a:02:6c:51:8b:63:cc:bf:3a:c5:5c:bd:d9:e2:3f:
6f:af:56:aa:92:35:8a:9c:e2:0b:82:0a:4b:6a:7e:0d:f5:6a:
cc:a6:63:40:5a:e6:76:93:1f:63:ba:89:e0:84:39:9f:22:ef:
1e:cc:df:25:f4:1e:93:9d:7e:19:b1:c8:34:1f:fc:04:56:1c:
a9:c4:5c:0a:7f:69:f8:80:97:15:25:aa:d1:9f:53:e4:94:eb:
99:55:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:13 2025 by rpki-client