Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: +FrBu/lvoJitDHge+wzu0hp2liQYZNB+QMkO5IsuVDY=
Subject key identifier: D2:FE:54:88:8A:3F:70:12:E4:1D:9A:E4:50:64:07:E5:92:A5:E2:DD
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 0196A277E80E2837829EF4DB28BA8ABB8D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 22:01:29 +0000
Manifest this update: Mon 05 May 2025 22:01:29 +0000
Manifest next update: Tue 06 May 2025 22:01:29 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: idP5egv6IexJsyxECpId1UEmFVr/jttDznHllQTZ0i4=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:e8:0e:28:37:82:9e:f4:db:28:ba:8a:bb:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: May 5 22:01:29 2025 GMT
Not After : May 6 22:01:29 2025 GMT
Subject: CN=d2fe54888a3f7012e41d9ae4506407e592a5e2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:85:a2:32:d9:bd:19:b8:e7:4f:4f:a5:ca:
94:ef:dc:d3:46:b2:70:01:34:2e:f4:50:c4:b5:ef:
4c:70:89:d1:30:25:14:0c:46:16:6a:5f:3a:d0:de:
cb:6f:24:01:27:5f:f2:a7:5a:d1:f3:94:de:c4:69:
00:25:ed:15:b7:50:2d:fc:a1:28:0f:fc:26:ec:0a:
76:49:a7:3a:c7:74:ce:ad:70:1b:ab:48:2b:4b:1b:
f5:32:50:05:05:45:f5:b6:5e:9f:37:3a:b3:91:ef:
cd:c2:b9:6f:ef:5f:de:6a:d7:92:0a:5e:36:1e:48:
2f:9c:9a:52:71:bc:f5:2a:d9:ad:7d:6b:27:4f:bd:
12:fa:0c:fa:cf:26:d7:52:3d:3d:21:eb:11:a5:c8:
21:d1:a0:db:49:ed:dc:da:d5:8e:dd:0d:0f:4f:2e:
23:31:dc:65:e5:8d:52:91:b8:53:ab:3a:bb:32:6d:
1f:60:6a:ad:40:d3:e8:0c:3f:d6:97:17:56:d2:77:
83:15:f7:f3:c6:ad:70:ab:6b:67:8c:3c:16:da:3a:
18:84:26:ee:c3:2b:10:8a:59:83:3f:84:21:32:3d:
61:d7:5f:c9:36:3b:96:5f:77:07:a3:64:53:68:2c:
e3:68:74:33:48:e8:3e:6c:4b:7e:a3:6a:2f:3f:cf:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:54:88:8A:3F:70:12:E4:1D:9A:E4:50:64:07:E5:92:A5:E2:DD
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d1:a0:65:37:0b:aa:7a:0c:f1:76:74:26:12:bd:7a:cf:58:
f6:51:0b:67:63:4b:63:11:de:f7:9b:e7:64:df:a0:f9:28:1d:
17:15:66:ed:b4:0e:dc:f6:df:d5:2e:ec:d0:01:0d:a8:f6:83:
9a:7c:7e:24:ed:c5:9c:79:70:c8:20:05:4c:81:48:a1:d4:c6:
09:61:ed:76:ef:9b:f7:01:c2:32:6a:aa:ac:89:72:82:6d:a8:
6f:bd:3a:98:11:86:5f:1d:00:00:cd:fc:3a:0f:f9:2d:6d:33:
d1:b3:e5:90:5e:00:f9:20:b4:1f:9a:8e:cc:04:c7:b1:18:32:
bb:98:e9:a8:4a:13:b8:57:14:b9:41:e7:ba:ee:02:77:d5:4f:
45:d8:04:c4:3d:63:5a:c2:cc:64:cd:b4:a2:ad:2c:74:f1:28:
7b:cb:e4:65:84:f1:ef:83:47:f3:e0:d8:08:bd:3d:01:39:57:
21:64:0b:0a:92:9d:e2:50:ac:db:4b:42:31:1d:91:4e:92:a1:
f9:bd:64:78:d2:97:6f:bd:a3:f6:9b:8f:b0:45:cd:30:00:9b:
8e:68:f1:dc:e8:c6:91:44:f8:5e:5d:df:46:18:bf:a8:dc:13:
59:c3:34:74:2b:2d:2c:41:7b:fa:09:50:ed:92:cd:cf:66:61:
3a:ee:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:53:30 2025 by rpki-client