Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
File: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft (raw, json)
Hash identifier: adjOvzwIA9PeUrmHQbj2wyECX+94ri85FdUgqFUrGmQ=
Subject key identifier: C5:67:71:4C:55:58:DD:F5:B7:A5:E2:05:AA:9F:A0:B0:C8:78:01:A4
Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
Certificate issuer: /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Certificate serial: 0196C4CC38A9464D0E5E7E36FAB0677ED402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
Manifest number: 32
Signing time: Mon 12 May 2025 14:00:40 +0000
Manifest this update: Mon 12 May 2025 14:00:40 +0000
Manifest next update: Tue 13 May 2025 14:00:40 +0000
Files and hashes: 1: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl (hash: EPlsSIwtXXqVHBJ4tesgA58pRSXhDL8SnsOXfHsuHcU=)
2: BcelUhdXxacAQU97XkdcwjtJzVg.roa (hash: XXQpfHpkHgSaCtL3AHunwK9n34HNeTtzIRJIEYTmJHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:38:a9:46:4d:0e:5e:7e:36:fa:b0:67:7e:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Validity
Not Before: May 12 14:00:40 2025 GMT
Not After : May 13 14:00:40 2025 GMT
Subject: CN=c567714c5558ddf5b7a5e205aa9fa0b0c87801a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:48:a6:de:f0:06:d1:b0:ab:9b:6c:7b:12:
d7:6d:f0:ff:18:e9:f3:28:84:52:e2:8b:72:65:80:
2f:8a:78:bb:86:a8:84:dc:73:b4:a7:06:f9:f2:07:
8e:cc:d7:3c:1f:3e:7b:67:5d:86:6c:80:a4:5b:4b:
03:fe:30:c4:71:ef:f0:6b:16:2b:29:48:30:88:37:
80:fc:52:64:f0:7a:04:10:cb:bd:70:47:2b:45:1e:
61:30:dc:80:8f:69:ba:1f:7b:56:5c:dc:04:ca:4b:
39:1f:74:74:72:d6:1f:0a:ae:dd:89:bf:bf:81:11:
7e:d9:a1:de:8c:3e:4e:a4:f4:45:1c:85:0f:43:b9:
91:44:25:e0:81:79:72:99:c0:20:f3:72:af:2f:04:
67:bb:3a:bd:b8:ad:e9:21:4b:c1:bc:b4:3c:b7:d6:
cf:13:82:92:0d:8a:04:19:be:ce:d6:a7:2b:3c:7f:
29:a8:f2:55:29:4c:5b:d6:43:dd:d4:b2:92:d8:bb:
16:4c:8a:3d:70:bc:e3:5c:36:77:47:fb:9b:fb:b2:
e3:c9:05:bc:a6:a4:48:47:6e:2c:96:e7:f5:33:4b:
de:fc:4a:df:0b:30:5a:bd:79:ce:cb:4f:ce:ac:f0:
d8:0f:19:86:b2:a4:59:59:ac:82:1c:38:d6:38:d6:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:71:4C:55:58:DD:F5:B7:A5:E2:05:AA:9F:A0:B0:C8:78:01:A4
X509v3 Authority Key Identifier:
keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a8:9a:cf:42:81:7a:f8:de:9c:f4:71:73:07:ce:72:fc:ca:
92:fa:c9:14:d4:bc:37:b6:65:99:74:6d:6c:d8:8b:13:b9:63:
67:e7:2d:e8:4f:18:df:8b:83:03:56:0c:9e:da:90:cc:64:aa:
91:40:21:32:c2:1e:7b:5d:9f:fa:9b:ab:29:80:e6:e2:51:eb:
bc:38:09:e6:b2:75:81:b9:3a:c1:28:90:5d:a5:ef:6a:45:1a:
3d:8c:6b:2b:85:ee:b1:b3:18:b3:91:54:26:08:36:af:ff:45:
53:2c:4e:8c:5e:e1:e8:48:b0:49:a0:57:16:32:e3:f7:34:0b:
79:9e:ed:fa:73:09:54:f8:6c:73:0b:99:5a:9c:14:ad:fb:6c:
26:0f:03:21:dc:a1:89:71:ad:c2:09:0f:04:55:2d:a0:ea:7a:
b5:d5:ac:37:d5:3f:44:4b:c4:e6:5a:df:cf:92:84:f8:85:74:
8e:ca:94:4b:b9:69:0e:cd:f1:c4:0d:3e:35:a3:65:74:e7:bc:
12:6c:9b:fd:20:90:69:7f:5d:fa:23:cc:4d:e8:00:59:e9:cf:
8c:63:a9:b8:e4:4d:af:dc:df:1d:1a:1b:9a:9e:7d:2a:93:5f:
77:1e:ac:67:24:08:50:1a:6a:bc:0f:58:a1:6d:05:4e:b9:f3:
ce:c6:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:05 2025 by rpki-client