Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: euRi4QHDwLWvYB+tkqqvMJtu3rniSg7X4utH9UyPFHE=
Subject key identifier: 89:47:E5:4E:57:CE:D2:FF:F8:BC:65:C1:6D:E6:13:D8:A3:19:25:37
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 0196BF6EA220707487E1A3F085BCBEEB9694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 13:00:20 +0000
Manifest this update: Sun 11 May 2025 13:00:20 +0000
Manifest next update: Mon 12 May 2025 13:00:20 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: a/i3iOh99+VqpdQTU2Tp8QV6jWpdT9aQs+xb0fabh44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:a2:20:70:74:87:e1:a3:f0:85:bc:be:eb:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: May 11 13:00:20 2025 GMT
Not After : May 12 13:00:20 2025 GMT
Subject: CN=8947e54e57ced2fff8bc65c16de613d8a3192537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:6b:6e:47:ce:47:47:42:d5:ca:56:60:3f:
ca:87:f9:fe:43:2b:56:f1:0e:eb:8d:66:17:a8:ab:
94:f5:33:6b:c6:04:d4:43:7d:e6:0b:07:33:5b:5a:
02:52:dc:c6:87:a8:ce:37:87:e3:df:2c:e7:b4:02:
f8:df:f3:db:3d:02:12:bb:62:c1:3f:20:b0:bd:05:
00:61:72:11:84:5d:8b:c9:90:2e:24:1b:ae:12:53:
1e:62:ef:21:50:d2:63:34:85:88:13:7b:db:31:ab:
fd:a7:d4:19:de:c1:bc:f8:da:7f:af:1a:51:90:d1:
d0:87:d2:6d:4b:62:5c:16:5e:19:e4:6b:23:56:68:
3b:a2:1d:bd:0d:3b:0b:f0:f6:87:d0:9a:1d:03:d2:
b7:a5:b9:6f:51:b6:63:6b:4d:bd:cf:76:ad:53:59:
20:f8:5d:7d:f8:e0:d2:02:1e:00:74:e8:0f:40:75:
e0:84:83:eb:e6:dd:c5:c9:23:87:f2:ec:3c:5a:bb:
3f:a9:9e:58:95:e3:1e:39:d1:a5:d7:8e:16:2c:e9:
07:2e:1f:21:cd:29:21:9a:ff:42:01:45:f2:79:f9:
85:e5:06:ad:f8:2e:81:57:68:fe:94:c5:98:56:ab:
75:c3:79:05:1a:d5:b1:2c:87:ab:f4:05:70:19:f1:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:E5:4E:57:CE:D2:FF:F8:BC:65:C1:6D:E6:13:D8:A3:19:25:37
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:43:e9:ac:df:3b:6f:6d:3b:7d:be:e3:8d:e5:9b:c5:30:d5:
61:4e:57:cd:ac:ad:2e:d4:ab:f6:f5:09:0c:60:cf:39:a9:5b:
5a:ea:c3:70:85:68:5f:1e:bc:73:35:ef:31:8f:ba:d8:92:27:
94:8b:63:f6:4c:67:6a:59:b8:aa:e8:e7:0f:d9:5c:31:59:16:
81:b5:3d:ba:c4:bf:64:3e:32:cf:c7:e4:50:97:bb:bc:81:c2:
b3:f3:1d:6d:09:07:6a:bd:23:ea:f8:a2:32:09:6a:67:2e:12:
b1:d4:4b:04:4f:47:67:c6:99:9a:b6:8f:bd:f0:f1:d8:96:5b:
fb:56:aa:49:60:2e:62:15:bd:6b:a9:80:03:e9:82:11:d5:2f:
c7:86:e9:03:6f:c1:18:a4:a4:ed:8a:39:66:f6:ee:7d:ad:b2:
3f:46:e7:32:00:8d:9b:d7:8c:2d:0a:00:c1:03:7f:13:66:69:
72:24:3e:6b:05:33:ae:78:5d:90:6f:ad:de:d8:ac:74:c0:ca:
8e:d6:aa:7a:53:73:c4:3e:55:94:40:7e:56:ad:d9:5d:ab:9f:
af:ef:0f:a6:58:cb:d7:be:41:3a:80:c4:9a:4e:0e:6a:5e:07:
0d:82:2e:b8:e0:43:71:80:04:ae:77:63:04:1e:8c:fc:a2:c1:
00:24:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:47:53 2025 by rpki-client