Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
File: 1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json)
Hash identifier: vVKhAjJ0F6zAbHSAJqffo2J1a3h7KpjBdre77XDiLSg=
Subject key identifier: BA:6D:00:40:70:30:55:6C:D1:A6:3D:A6:8A:BD:53:38:47:A9:AF:71
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Certificate issuer: /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial: 01967CE9D79A956C338E2C4AE70006D77978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
Manifest number: 057A
Signing time: Mon 28 Apr 2025 15:00:21 +0000
Manifest this update: Mon 28 Apr 2025 15:00:21 +0000
Manifest next update: Tue 29 Apr 2025 15:00:21 +0000
Files and hashes: 1: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: JYZWn2BdSdClGht1DlNYSkiMWLQBhLIgQxZBQh65BKQ=)
2: A4__EnOrPLl7kNPioZRAoADCUG8.roa (hash: j1tmGfrA6af9fNUjjjOcwfDjish7mieiLkXoaO5wFfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:d7:9a:95:6c:33:8e:2c:4a:e7:00:06:d7:79:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
Validity
Not Before: Apr 28 15:00:21 2025 GMT
Not After : Apr 29 15:00:21 2025 GMT
Subject: CN=ba6d00407030556cd1a63da68abd533847a9af71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:b2:d7:2c:b6:4c:8e:d7:b4:50:94:fa:8e:
a4:ec:fb:89:f8:72:da:59:bf:60:c4:81:fe:80:43:
4e:a0:2b:f5:9c:ca:5d:f6:8c:16:08:fe:19:fb:21:
d0:ce:62:c1:9b:95:64:94:19:bb:cb:c5:da:4f:e0:
10:bf:bb:28:aa:9c:96:b0:ce:91:70:29:d9:34:b2:
13:35:69:0e:8c:c2:57:69:eb:53:9b:a8:cb:c5:59:
fe:b0:2c:8a:49:9a:ef:1a:58:56:01:13:52:cf:02:
22:24:34:1c:9b:a2:ae:4d:1b:b8:46:de:11:aa:af:
d8:9f:a0:d4:bb:29:46:cd:b4:12:68:b4:3d:26:57:
d7:9a:c3:ff:39:cd:d9:f7:52:29:1a:b7:ea:38:bd:
37:8a:d7:92:cc:7b:fe:78:88:85:d4:5e:9c:aa:af:
37:60:a9:0e:47:cc:a9:4c:28:fe:eb:fc:87:ca:d0:
2a:9a:76:d6:91:67:56:b3:9e:03:e9:6b:5b:15:25:
6e:ba:c9:99:23:f7:c9:9e:3c:5f:9c:d3:92:7f:ac:
77:29:1b:8c:11:8d:3a:8c:43:e2:e5:12:11:e2:5f:
be:be:9d:24:42:8c:db:d8:98:ee:d2:48:0a:f3:5c:
64:66:96:34:23:e2:1f:6f:66:b0:31:08:b7:d9:44:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6D:00:40:70:30:55:6C:D1:A6:3D:A6:8A:BD:53:38:47:A9:AF:71
X509v3 Authority Key Identifier:
keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:29:e8:69:4b:8b:62:93:dd:27:34:ae:e9:e5:7f:c9:55:
ae:91:70:77:ab:22:25:f3:3c:fa:43:7f:ad:14:51:49:57:77:
57:8b:d7:22:93:e4:5d:ea:1d:99:cd:4d:fb:2d:6d:89:fa:6e:
73:62:42:cc:87:75:10:71:2b:04:b0:dc:42:93:c7:16:7a:31:
2c:b2:64:dd:3f:c7:6a:ee:96:33:63:92:22:5e:79:72:42:cc:
4a:64:c7:81:b9:ba:e7:52:3c:64:0e:a7:59:c0:3d:0a:c5:43:
b5:53:a5:c7:a9:d4:0a:c5:c7:8d:bf:48:1f:5f:f9:e6:45:25:
b4:5f:d7:18:ec:6b:c8:45:a0:c8:70:ba:cd:9c:86:20:0f:09:
87:1e:b6:d2:00:66:80:1a:c0:58:a6:d8:40:48:9f:b1:a6:6b:
3d:2e:f5:ea:af:d6:05:22:d4:70:ab:ad:85:e8:e4:d9:2a:ee:
cc:b6:8b:56:d9:54:36:31:a7:cc:1b:1c:20:cb:b3:1f:d7:c5:
72:29:89:6c:25:cb:55:d6:9a:b9:98:cf:97:9e:cd:43:af:2b:
c0:97:99:78:2c:78:89:d5:c8:0d:0f:06:c1:51:c7:7f:49:68:
24:07:3b:21:dc:ad:0b:ce:7b:5b:f1:1a:61:2c:29:5d:a8:00:
52:cb:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:01:46 2025 by rpki-client