Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File: 1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier: YM72L/YvTqKiqesai0gcduqQOQURn7sYoJiVmaFTa+0=
Subject key identifier: D0:15:AC:71:A0:30:EE:6B:E7:17:7A:A0:0C:93:8C:72:44:2C:47:11
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer: /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial: 01968D6FC1FC96A475BB8F8A5694078DE863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number: 151D
Signing time: Thu 01 May 2025 20:00:33 +0000
Manifest this update: Thu 01 May 2025 20:00:33 +0000
Manifest next update: Fri 02 May 2025 20:00:33 +0000
Files and hashes: 1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: X6tFUHrnV7bhA/jN/Pn7RLh6mDKk/V1Nx5wFAinHV5E=)
2: evwk9Zfy0oSug_OT-JqAYLVFN48.roa (hash: p8vwbzaWZAlgsI4s0YE3pDc8vzWrcDuiDp7ZJjKpleM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:6f:c1:fc:96:a4:75:bb:8f:8a:56:94:07:8d:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Validity
Not Before: May 1 20:00:33 2025 GMT
Not After : May 2 20:00:33 2025 GMT
Subject: CN=d015ac71a030ee6be7177aa00c938c72442c4711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:a8:1b:4c:27:e2:c8:3a:e4:f0:d1:3e:50:
32:ff:80:9a:63:fb:05:ec:6e:b7:8f:94:f7:91:bb:
13:6f:3c:7a:0d:1c:cc:0a:d0:ac:5e:b0:99:79:2a:
78:dc:ed:4b:93:18:ba:17:f8:7f:79:61:04:aa:c4:
5c:2c:22:52:21:37:b1:43:67:8b:1d:d4:15:a2:eb:
bc:c7:7d:7d:29:c5:bc:a5:7a:1f:c9:06:a1:59:d6:
95:40:17:e3:22:f9:4e:d3:0d:1a:c7:b8:3a:f6:39:
ed:bb:ce:1f:f3:cb:2f:a9:a6:9e:84:e0:4f:7b:6c:
03:a5:0e:b1:0b:8d:b2:eb:5c:02:00:e4:8b:f8:65:
ed:cf:a5:e3:6d:11:8d:a2:e0:33:52:24:c4:95:9d:
4a:8d:83:24:90:56:5a:4b:5f:5b:be:47:0a:16:01:
ae:04:36:e1:3c:56:78:23:39:c0:5e:25:77:79:15:
00:fe:ad:49:09:b0:08:3b:bc:46:3b:01:9f:0a:86:
47:7b:54:97:a8:e3:28:3f:5c:47:07:6f:df:84:f4:
24:e8:91:6e:ec:04:e3:2b:7c:4a:7c:22:a7:a9:c0:
5e:d4:ec:a4:c0:0c:5f:69:8c:ed:d7:c3:fb:e5:e5:
0a:21:0f:ed:0a:4c:0f:c1:67:c4:98:f6:ba:79:4d:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:15:AC:71:A0:30:EE:6B:E7:17:7A:A0:0C:93:8C:72:44:2C:47:11
X509v3 Authority Key Identifier:
keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:11:bf:3f:62:49:94:85:b3:2e:cd:ef:48:73:e2:82:3c:27:
ca:12:1c:2f:27:e6:1f:37:c5:ec:d1:96:f9:ec:e6:ac:a1:06:
37:08:2b:4a:e9:1c:1c:67:75:e9:74:69:d8:3b:bd:c2:e6:03:
f7:ec:3f:8d:97:ea:f7:8a:43:3d:23:cd:43:bd:27:85:e0:e6:
0c:53:69:30:4d:3b:b5:e4:85:50:b1:3c:31:23:a9:47:48:02:
ef:3b:9c:15:83:e9:d4:e9:ea:8d:c1:d2:8f:52:6d:40:1c:c9:
17:e8:a3:ad:1f:3d:ac:2e:dd:14:46:a8:32:dd:2f:72:64:90:
cd:43:51:58:0c:b3:88:2f:09:9e:c2:a3:db:41:45:51:b8:4f:
3f:c9:2d:77:af:6f:8e:cc:11:df:fd:71:65:1f:e4:f6:09:a2:
1f:7c:e7:99:64:fd:18:d3:fc:2e:38:db:16:56:2a:0f:64:c0:
e2:81:86:6f:7f:6c:78:d1:03:85:49:be:7a:4a:9e:b1:47:05:
69:86:5b:e7:1d:2a:72:ba:38:9b:0b:4a:bd:a3:77:ff:17:f5:
0f:36:64:2b:73:51:70:51:24:18:87:f1:65:c0:ba:fc:2f:13:
24:77:71:dd:ca:a9:e4:51:12:a3:17:d3:b8:cc:6f:2b:66:e9:
03:b0:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:50:13 2025 by rpki-client