Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: Y0e1caA+TnfIL7ROy2Ai83lU52/g07H/dhSUSMUbRk0=
Subject key identifier: C9:CE:31:F0:71:47:85:68:9A:23:EC:FE:3C:98:E3:99:30:B6:8F:F0
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 0196BE5C8AECD8D52AF539381D92B74EB791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 146C
Signing time: Sun 11 May 2025 08:00:57 +0000
Manifest this update: Sun 11 May 2025 08:00:57 +0000
Manifest next update: Mon 12 May 2025 08:00:57 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: rv33nWbDKNdwXFu6ND6Xd7zytg41WAZE3oOozr9aFMQ=)
2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:8a:ec:d8:d5:2a:f5:39:38:1d:92:b7:4e:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: May 11 08:00:57 2025 GMT
Not After : May 12 08:00:57 2025 GMT
Subject: CN=c9ce31f0714785689a23ecfe3c98e39930b68ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:48:f4:f2:7b:de:8f:61:a4:59:7c:ae:43:
b3:08:bc:bf:5a:4e:47:a4:6a:40:8f:64:45:de:fe:
5f:75:fb:81:0a:fc:d5:fb:3e:dc:87:4e:72:0f:ce:
ce:ec:a1:77:83:27:cd:6f:19:29:b3:fb:78:02:6f:
83:7c:5e:dc:87:ab:fe:04:61:45:9e:8b:97:1b:af:
60:29:f5:05:3f:5a:06:12:2c:9d:0a:85:64:78:d0:
3d:f4:c6:59:d6:0a:b7:e3:a1:39:17:0c:61:23:7a:
5d:fa:00:f3:6d:dc:85:8e:2f:d8:c9:dc:80:dd:68:
fb:1a:ad:11:32:f0:cf:63:be:40:f9:c9:c7:5d:e7:
8d:75:cd:93:13:22:46:46:b7:05:40:bd:51:f4:62:
43:68:f0:52:10:7c:d0:78:51:44:08:e5:78:40:1c:
db:70:99:60:30:88:3d:8e:09:7f:f1:a3:20:80:1d:
bf:a0:d6:be:44:5e:28:0b:38:bf:38:b0:00:5a:b6:
99:07:28:b3:3f:f1:c3:14:bf:51:dc:82:7c:b3:84:
3b:54:51:34:18:c7:d5:2b:36:70:ab:50:fc:63:df:
27:09:bb:5f:c4:fe:a5:54:d5:29:ba:c6:43:5d:b0:
45:51:f9:87:7e:d8:db:42:05:63:51:4f:79:6e:bb:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CE:31:F0:71:47:85:68:9A:23:EC:FE:3C:98:E3:99:30:B6:8F:F0
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:96:ac:b2:02:25:ef:bd:5e:a4:49:1e:0d:29:7e:15:e1:
79:48:79:ff:59:12:3f:1e:88:d8:61:90:1f:7a:75:3d:49:59:
45:14:ea:53:c8:37:01:0d:b0:19:8e:ed:95:6e:82:fb:62:72:
f3:c1:71:01:28:63:56:d1:1e:d0:7f:bf:bf:4f:87:5a:cc:5e:
3e:06:44:68:c3:27:12:3a:1c:23:2e:2b:81:d2:97:9d:4d:ec:
a7:b0:fe:22:d0:cd:ce:c2:ba:b7:b9:6b:90:25:3e:48:9b:2d:
aa:23:e4:f0:48:77:18:9a:84:07:bb:83:aa:82:aa:f7:b9:ea:
c4:56:94:a9:f4:f9:c7:f6:68:50:21:0a:0a:a8:e4:96:83:4c:
fb:e9:b3:ad:06:56:f3:42:5f:f1:25:aa:44:a5:e9:68:5e:aa:
af:49:6d:24:b9:08:45:b5:73:41:1f:b1:97:7d:fe:33:69:c9:
ab:4b:7b:fb:ba:0b:a2:c6:9e:7e:a7:8e:4e:e4:1e:53:16:c7:
03:3b:b9:32:a9:33:89:9d:eb:93:9a:b5:28:fd:23:c7:aa:6f:
2d:89:c3:53:c5:7f:1d:7c:0b:bd:98:0b:92:a3:db:17:c5:6d:
5c:d3:53:4f:b2:fd:a0:68:34:34:02:36:ac:50:d9:40:24:aa:
7b:90:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:18:33 2025 by rpki-client