Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: ucGOoVdyTiRXeptI5NVN+gQzc2ndMRVp2plpqq3Y+qs=
Subject key identifier: 37:7A:9F:9D:18:88:43:53:2A:D3:B5:1C:A9:A7:BA:A9:ED:58:4B:7C
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 019676B0D1BF286EF7800E49B626034287B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 10:00:21 +0000
Manifest this update: Sun 27 Apr 2025 10:00:21 +0000
Manifest next update: Mon 28 Apr 2025 10:00:21 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: dY/DQJPzT3XuwnRji0Qhz2iRkJ2I0ZHLphQuzzYcybM=)
2: hJUOwaTvP74lE8UHTrGlvy92Ql0.roa (hash: AMxeUVD26hTz30vzgYyULbbdEqiL9GrkX+UdMqFq2KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d1:bf:28:6e:f7:80:0e:49:b6:26:03:42:87:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Apr 27 10:00:21 2025 GMT
Not After : Apr 28 10:00:21 2025 GMT
Subject: CN=377a9f9d188843532ad3b51ca9a7baa9ed584b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:96:98:97:84:4d:5c:a9:02:f9:73:9a:ad:
89:cc:7b:e5:27:f3:b5:f5:b8:d5:79:81:be:28:d9:
39:bf:75:ea:e1:63:35:44:4d:c5:e5:51:39:0e:0b:
ba:5d:f9:6c:5e:1d:9a:ee:84:b1:67:f3:31:09:31:
02:5d:7d:ac:f8:92:91:9c:20:55:de:a0:72:f8:78:
5e:f1:e6:3c:17:f8:93:be:9e:4b:e1:c4:7f:4d:92:
e4:87:6f:27:e3:e8:c4:da:03:8e:a4:a9:75:67:20:
41:d1:1a:95:f5:bb:22:7d:08:44:1f:79:93:79:f2:
0c:e7:85:a4:df:18:d3:5d:85:3c:82:7c:07:c2:47:
01:5e:6f:38:05:b4:4b:c6:84:3e:aa:13:8e:67:a7:
c9:ac:25:6c:72:f9:14:c5:0c:96:fb:17:d2:8e:34:
db:d1:b8:2d:b0:95:d3:77:65:da:c4:ab:87:d3:99:
3d:c6:dc:85:cc:19:02:94:5a:f6:7d:6e:19:38:50:
c7:b5:bc:39:7d:95:37:6e:e8:99:b4:40:5d:c0:7c:
a0:b3:84:c4:a0:80:28:52:46:c8:25:74:4e:6b:3c:
53:81:18:e6:23:9e:d0:04:59:80:3b:e6:1c:26:6e:
49:12:b5:1c:c5:7d:4c:56:ba:dd:36:8f:16:6f:72:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:9F:9D:18:88:43:53:2A:D3:B5:1C:A9:A7:BA:A9:ED:58:4B:7C
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:20:db:d8:0f:10:6c:ba:8b:5f:ea:40:10:dc:bf:3e:36:
60:a0:6f:6a:94:53:4b:89:af:74:af:7e:82:d9:89:2a:9c:31:
72:c6:38:a9:71:ae:90:2f:bd:f3:39:28:96:39:43:4d:3b:27:
93:db:79:e7:29:89:fe:94:e9:5a:15:7c:7b:84:fe:95:56:0f:
6d:a2:bc:9d:d8:34:ab:6e:79:7c:58:42:55:4c:f1:45:69:a7:
80:c0:b3:95:cb:6d:9b:9a:1f:24:e5:45:34:82:ac:69:0a:dd:
03:71:ee:ce:a0:21:ac:01:3e:2a:1d:6e:83:c4:57:1d:92:32:
11:1b:ce:e2:73:db:e0:5f:28:fc:d9:51:cd:94:bf:e9:fb:a8:
49:9f:9f:04:71:92:12:5a:75:cf:a3:03:74:b0:41:78:43:34:
e5:66:eb:f3:ed:a3:11:87:c2:aa:b4:d1:0d:94:7b:52:94:be:
60:30:85:d7:f2:20:ae:02:a1:09:3a:3a:6e:ce:e5:81:de:09:
7d:29:58:6f:25:c5:e9:f2:a5:b2:3f:0e:60:44:70:78:8a:ab:
27:ba:94:c7:f7:ad:cc:5f:63:e2:30:b3:58:62:7d:e7:6e:5f:
4c:1a:6b:90:ef:e3:e1:01:90:d6:b6:d5:a8:79:c5:2b:92:bd:
9e:a3:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:16:27 2025 by rpki-client