Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
File: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft (raw, json)
Hash identifier: lQwxczN8+VlG+o8+GD6Z52W6obj8F61Dv12P9LhTp4k=
Subject key identifier: E2:4B:AB:D8:D5:9F:3E:BF:20:9B:F7:71:5E:76:FC:80:CF:89:2F:96
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 01969E633181312764A6C1E935A85DD23F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 03:00:22 +0000
Manifest this update: Mon 05 May 2025 03:00:22 +0000
Manifest next update: Tue 06 May 2025 03:00:22 +0000
Files and hashes: 1: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl (hash: X2CK6kK1p9Vlys35k7nnxAZaJImfrfh7x4WXDa+YrkA=)
2: LYJYFx2T8LJuRb12iyxKMr93evo.roa (hash: YqeTPnX1EtI+d0+m7mdzwt1Rn2TJyLXd1g7Ztcm9f4Y=)
3: Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa (hash: 6auuGJzllRElAKkh+2dzfD1kSlIMjRra0ICkRJJ17wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:31:81:31:27:64:a6:c1:e9:35:a8:5d:d2:3f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: May 5 03:00:22 2025 GMT
Not After : May 6 03:00:22 2025 GMT
Subject: CN=e24babd8d59f3ebf209bf7715e76fc80cf892f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:e3:69:62:6e:bb:52:ba:2c:43:2b:09:1c:
df:d1:06:47:8c:3a:8a:e7:94:5a:74:76:88:6b:e3:
99:50:74:73:89:25:a2:1e:a4:42:eb:8a:5c:f5:6e:
5b:40:f0:19:26:df:b3:f2:65:11:ee:40:05:94:42:
9a:f5:80:62:d5:d2:65:0a:b8:1a:4c:5b:05:fa:a7:
3d:74:1e:0b:cb:bf:c1:ba:44:58:a0:9d:9b:78:89:
14:69:c7:f8:5b:94:1b:22:4b:f2:2b:46:23:4c:6b:
52:de:e4:b8:a5:bd:8c:32:71:c4:56:c0:bb:0a:51:
42:fe:c3:bc:bc:e3:bc:09:0c:f8:04:10:6e:f1:a7:
54:f5:3c:5a:ab:87:37:8d:f4:24:8f:d8:d3:f4:32:
cc:b7:00:20:19:ba:62:45:2d:7e:58:78:ac:9c:51:
95:4b:ee:9f:55:07:c5:d9:30:ed:5f:12:30:ec:c7:
a9:ba:1a:f2:8c:91:c2:60:55:3b:a0:65:90:6d:da:
c4:7b:87:7e:13:a5:77:69:ff:a5:d6:d0:ed:5e:51:
42:36:6a:31:21:b7:13:67:be:20:6b:82:59:15:d3:
1b:f9:61:15:4c:ce:25:62:d9:e9:34:3e:32:9d:ab:
c7:2d:ef:79:fd:44:12:11:ba:0d:74:dc:79:d2:03:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:AB:D8:D5:9F:3E:BF:20:9B:F7:71:5E:76:FC:80:CF:89:2F:96
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:64:e3:f9:7e:84:10:6c:b5:91:b5:08:7b:3e:4a:a2:f2:b6:
d6:e4:53:40:c9:0d:5b:8b:78:e4:9b:96:0e:9c:52:c9:ff:04:
e9:94:60:af:f4:18:eb:34:22:3c:f1:59:a7:b0:7d:09:ea:42:
2c:41:47:52:c3:59:df:26:79:31:68:76:f0:fc:bb:8c:cc:a4:
95:47:2f:e5:cb:2b:a8:5c:14:b0:d6:0b:1c:4e:fb:57:38:45:
2f:15:dd:79:5b:6b:66:a7:1f:11:63:8c:f9:0e:52:c0:e4:45:
dc:5d:e0:72:6b:c3:f9:67:8c:9f:8f:08:ae:d2:a6:bf:a0:55:
53:1b:48:06:cc:0a:d6:23:54:c9:a2:88:7e:0c:87:5d:8b:aa:
25:15:9e:47:9d:8c:92:6e:9a:f1:bc:f0:61:55:eb:3c:76:94:
64:8f:a6:77:8d:58:ee:99:26:af:50:f2:5a:b6:39:70:18:dd:
06:5b:f4:aa:9c:73:8a:43:9f:62:f1:59:f7:07:50:b5:df:0b:
7e:f9:87:f2:22:8c:54:be:6f:a4:55:d7:ee:7b:53:2e:cd:d3:
11:ae:c6:aa:9e:6c:92:f1:f5:c2:0d:9b:46:26:f8:42:1a:25:
3e:3a:35:2d:9a:5b:61:71:20:6e:f1:7d:d5:a5:7f:f4:00:6f:
e4:9d:68:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:48:36 2025 by rpki-client