Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: bfp4IrouGb0tGPrlbSUb2UVZBp7KOpB6CJsUDsCBcjQ=
Subject key identifier: 80:E4:50:ED:AD:F1:08:35:D7:8C:EF:27:62:45:8F:86:0E:67:A0:29
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 019682B53C30EDE43828E7C86AFF9B808144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 14A8
Signing time: Tue 29 Apr 2025 18:00:37 +0000
Manifest this update: Tue 29 Apr 2025 18:00:37 +0000
Manifest next update: Wed 30 Apr 2025 18:00:37 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: tOTFek6p28LuVp14sdbaOArGFz3deqU5Bzid0M4sGQA=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:3c:30:ed:e4:38:28:e7:c8:6a:ff:9b:80:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Apr 29 18:00:37 2025 GMT
Not After : Apr 30 18:00:37 2025 GMT
Subject: CN=80e450edadf10835d78cef2762458f860e67a029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:59:6d:fe:2c:ea:c4:c0:51:67:5d:69:44:
23:99:84:fd:a9:49:ce:75:d0:3b:1b:15:8d:c2:41:
a4:10:52:48:9f:d7:63:12:46:62:27:fa:5e:c2:4e:
68:51:6e:48:5a:b2:3d:2d:64:26:3b:bd:a3:0f:57:
1d:d5:61:60:19:fd:4a:4c:c0:82:f4:07:dc:ee:95:
f2:7b:8a:f0:45:b3:e3:f3:8e:db:cf:e9:52:c3:f8:
d4:ec:0b:85:66:8c:d0:c0:83:c5:6c:69:99:b9:ca:
96:ad:33:4e:66:f9:58:a0:14:6e:a9:9f:40:c5:3a:
ae:01:1d:93:4e:6f:aa:19:46:53:eb:bc:35:97:cc:
b2:e5:e4:41:53:1d:62:c6:fa:31:d6:8c:f3:34:74:
ce:c3:88:6a:1a:12:e4:7d:fd:7c:05:14:e9:99:ab:
bb:d7:3c:34:c5:52:3d:48:6d:7b:3b:d6:20:63:56:
8b:b1:a2:e5:73:f1:4a:6b:96:9c:e9:81:32:0b:63:
ec:ee:5c:d5:5f:01:4b:8e:e3:0e:c7:69:7a:63:0d:
eb:74:69:4f:c3:a3:4c:4c:ce:ad:35:f9:23:dc:07:
18:35:be:4d:27:1a:c8:62:87:63:e6:ab:b2:05:85:
2f:dc:6d:d4:45:b5:40:c0:88:15:ab:7d:c3:92:28:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:50:ED:AD:F1:08:35:D7:8C:EF:27:62:45:8F:86:0E:67:A0:29
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:ea:d4:64:98:49:29:26:a5:e8:87:0b:d9:39:10:e1:31:
6f:83:aa:4f:a3:61:00:6e:4c:36:38:c9:51:29:e3:ed:3d:3c:
26:13:da:df:76:84:47:84:16:37:3f:ea:38:e3:c4:6a:5c:8d:
1d:ad:44:79:79:33:dd:fd:d3:18:95:4e:2e:2e:22:83:65:bf:
dc:ed:9b:57:38:93:1a:db:eb:41:29:06:23:15:01:1d:1e:12:
5c:bd:a8:bd:f7:d8:8d:d7:75:ec:04:fd:ab:ab:bd:d7:4d:a6:
35:c7:b4:8e:13:17:4b:90:4d:49:a1:df:59:16:c5:76:2f:99:
2e:f2:01:0c:b5:5d:bd:8f:e9:17:d7:55:53:7b:1f:f1:99:ab:
cb:7f:91:78:59:64:22:c1:1b:06:ad:9e:08:fb:cc:75:f6:47:
ac:37:73:fe:d3:cf:36:4f:4b:f5:73:de:ca:2c:65:d2:bc:06:
91:c3:f9:9e:d5:75:44:d1:8f:60:c0:8b:0c:92:3f:e4:36:c1:
0a:5e:ad:2d:ef:85:a8:25:d5:02:e1:8e:40:5d:6b:38:76:54:
ad:fa:e9:9e:2a:91:12:cb:55:3d:83:e7:ed:b8:bb:58:19:f2:
c1:75:8a:43:fa:a0:1b:da:8c:5b:1e:e7:61:cb:6d:0a:70:b9:
a3:9c:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:41:42 2025 by rpki-client