Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File: V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier: itPV9R3pRGAWF4DT7PtfUi4721lIL8gU1KjkXDGCAYE=
Subject key identifier: 2D:21:F2:19:30:CB:E1:36:D4:22:6C:DD:3A:8B:3A:04:2F:A2:68:69
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer: /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial: 019688499AD3D4EE2CDCA917ECFEA3854F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number: 0FA2
Signing time: Wed 30 Apr 2025 20:00:47 +0000
Manifest this update: Wed 30 Apr 2025 20:00:47 +0000
Manifest next update: Thu 01 May 2025 20:00:47 +0000
Files and hashes: 1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: moeT6nPup3i73QFODXUKoX5kxzXryCNa9rOSR/yemNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:9a:d3:d4:ee:2c:dc:a9:17:ec:fe:a3:85:4f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Validity
Not Before: Apr 30 20:00:47 2025 GMT
Not After : May 1 20:00:47 2025 GMT
Subject: CN=2d21f21930cbe136d4226cdd3a8b3a042fa26869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:98:6d:5b:46:00:30:10:2a:bf:7c:65:4d:
9b:c5:21:03:4c:0a:d4:30:cf:33:d5:25:a9:1e:01:
65:a9:fc:74:38:19:cc:22:69:ac:b4:0c:2d:99:f0:
80:ad:0a:ce:c6:40:16:d3:3c:93:61:3b:72:41:72:
79:0d:f8:04:dc:44:b1:ce:18:83:28:8c:82:50:4e:
86:3c:f2:9a:25:1c:2a:9c:a5:19:8f:26:18:26:f4:
52:80:f0:95:d8:0e:d6:00:0f:ef:17:1f:97:02:49:
02:d7:f6:a6:a7:97:77:ca:34:51:d0:ab:c7:73:ed:
73:b8:7b:3a:81:66:a8:e4:52:66:b3:e2:04:ab:11:
a2:80:3e:3a:3e:8c:78:06:bc:0c:52:8b:a2:99:25:
49:4c:00:d7:68:38:64:c8:df:e2:63:c0:ab:82:c4:
18:3b:79:89:52:a5:2a:30:e7:77:b6:ed:f8:01:66:
d9:34:57:4d:b2:43:5a:68:c9:7e:33:b1:c4:ef:ef:
b8:eb:0c:5a:bb:82:4e:8b:bd:2b:3c:fd:43:2e:57:
cd:48:91:52:a9:c8:8c:82:ee:90:ab:10:59:a7:41:
bb:b6:8f:ca:63:9a:96:ff:19:1b:cc:19:9d:83:04:
0d:7a:7f:30:4f:62:ad:24:58:9e:18:e5:cb:ff:7f:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:F2:19:30:CB:E1:36:D4:22:6C:DD:3A:8B:3A:04:2F:A2:68:69
X509v3 Authority Key Identifier:
keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e7:20:9b:90:33:f7:c4:5a:19:cc:f8:9c:04:82:bb:53:b1:
b5:1e:6b:5c:28:9f:77:ea:e3:e2:34:28:44:8e:44:00:2c:af:
dd:bc:2f:8f:71:3b:fe:d1:6c:77:35:21:74:2c:c1:6e:2e:e4:
f6:24:60:7e:e9:39:39:5f:77:3c:b9:15:a1:f2:ab:ff:eb:84:
da:ab:92:fb:37:c5:fb:c2:7e:ea:58:fa:b4:d2:9a:91:45:98:
57:8d:c5:7b:c7:bd:27:db:42:77:72:cb:50:63:14:1f:db:2d:
4e:dd:cc:43:fd:f0:57:da:76:7d:33:d4:cd:64:b1:27:cf:d6:
72:c6:cf:d9:d8:42:a4:5a:94:12:82:2b:6a:1c:2a:ca:02:f1:
41:98:84:b9:96:cb:c8:08:2b:a8:d1:e7:e4:ca:77:de:7f:bb:
3d:42:ff:14:80:b6:67:ad:05:0d:96:c5:66:10:3a:80:00:85:
81:9b:dc:17:58:f3:57:59:18:49:56:c7:71:3f:ad:e7:3d:b3:
77:9c:34:a7:b5:92:91:cb:7d:81:ef:25:ca:37:9e:36:dc:1d:
44:36:68:8a:61:09:48:46:b4:46:23:e0:c8:49:b1:10:79:8d:
3c:65:26:76:ba:64:0e:88:e8:b5:89:37:15:d2:be:22:4d:4d:
26:01:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:49:53 2025 by rpki-client