Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: dveuyhlRJu3UmJ88yhdbH/QpxOXO8JoEGjtEV8yGr9k=
Subject key identifier: 65:AF:A8:48:35:15:9F:04:E0:11:9A:F3:43:0B:63:1C:AF:80:EB:4E
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 0196B258A33BCAB36F5B5CC42E1812E38DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0E1F
Signing time: Fri 09 May 2025 00:01:15 +0000
Manifest this update: Fri 09 May 2025 00:01:15 +0000
Manifest next update: Sat 10 May 2025 00:01:15 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: HOzQj5kcI/lmYHrFX9HERIJ/wZ0ylwz6lUq3C3pR+iQ=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:a3:3b:ca:b3:6f:5b:5c:c4:2e:18:12:e3:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: May 9 00:01:15 2025 GMT
Not After : May 10 00:01:15 2025 GMT
Subject: CN=65afa84835159f04e0119af3430b631caf80eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:8a:3e:a9:ae:0a:df:57:c2:a4:15:f8:df:
b7:73:79:e3:93:26:6e:d4:20:86:bf:5e:b2:9b:30:
83:05:ec:16:94:b4:96:d2:9b:06:e9:1b:81:3d:f1:
54:5e:60:e2:85:7c:a2:5f:10:b5:22:2e:c6:a5:35:
06:bb:63:43:f7:50:8e:a1:b9:17:f3:a0:b2:bb:b5:
8c:45:31:99:66:82:2b:cb:bb:38:7a:19:84:f1:49:
87:93:54:fd:86:78:3c:5c:ed:cf:30:97:40:57:35:
47:94:f0:bd:7c:b6:76:17:a3:cb:c5:24:20:64:7c:
01:8b:01:5a:b6:0c:30:fa:a3:06:be:6c:5a:76:08:
15:2a:72:05:61:8c:d5:e7:7a:7b:97:13:9e:61:c3:
c0:c8:2f:89:91:47:12:4a:1a:bf:c2:1b:bf:fb:c4:
8c:8c:fa:23:99:d6:f6:cc:f1:2a:ad:ad:0b:d5:3f:
09:66:c5:11:93:ba:a0:87:d1:29:8e:aa:3c:f5:f4:
a0:a8:eb:9f:76:d6:a5:04:32:a4:4c:9c:e1:9a:6e:
4a:ac:c2:aa:5d:a7:8b:99:97:b6:da:b2:f3:c0:1d:
23:bc:d9:e9:04:9e:a0:53:df:53:7a:5d:89:7f:31:
30:e6:3e:eb:7b:e6:38:96:6d:8e:8a:8e:1a:7e:c0:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AF:A8:48:35:15:9F:04:E0:11:9A:F3:43:0B:63:1C:AF:80:EB:4E
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3d:22:a2:be:c2:4d:40:28:38:82:e1:0f:e7:7b:e9:9e:87:
c2:3c:8b:77:e4:91:bf:32:23:f3:85:0a:b1:90:0e:91:38:be:
17:96:07:e8:15:78:7c:18:e0:e1:67:9f:25:8f:10:ec:af:84:
1c:ad:f9:7e:2d:47:b8:17:e0:9a:3b:05:57:3f:80:4d:d6:d6:
bf:e7:1f:03:ad:74:52:2d:db:8b:41:08:99:cd:c4:a6:d9:6f:
ef:40:96:ef:ab:7d:a4:d2:63:08:af:5d:00:ed:02:fd:7c:fa:
23:04:8b:80:26:7d:98:27:c1:20:8f:72:1a:c3:65:07:db:93:
97:48:eb:e0:68:c1:83:a1:05:8d:25:3a:11:41:0b:c4:c8:4c:
81:43:05:5e:1f:e5:2d:86:95:df:73:40:37:5b:67:4b:b1:12:
c0:f9:02:a6:1f:f5:a8:48:b8:68:9d:f4:6a:bd:3b:86:2a:7f:
4d:d4:c2:2d:d2:54:58:b6:bb:4f:21:c7:f3:73:e7:4e:cb:a1:
0b:12:71:10:27:94:65:ba:b7:7a:69:c5:17:86:42:d5:08:52:
67:2c:e3:73:6e:29:3f:68:dc:48:81:43:1a:00:95:5d:07:12:
c6:99:f3:5f:70:31:f8:87:66:7c:69:34:07:7e:d2:e8:50:7e:
a1:d4:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:54:14 2025 by rpki-client