Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: /ntidfS5eHJrkocEZdQb9mIs17trWqksFv3pu8uVoeE=
Subject key identifier: 9B:9F:89:19:44:B0:97:F4:99:29:E8:48:E7:D8:86:7D:C0:42:CA:83
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 0196C4CC572C163B4B0DF163719FD371F66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0C72
Signing time: Mon 12 May 2025 14:00:48 +0000
Manifest this update: Mon 12 May 2025 14:00:48 +0000
Manifest next update: Tue 13 May 2025 14:00:48 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: PHp0jjHOp3yMfmN4kuV5tQj2gVRrvnkjkVU656SZBbo=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:57:2c:16:3b:4b:0d:f1:63:71:9f:d3:71:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: May 12 14:00:48 2025 GMT
Not After : May 13 14:00:48 2025 GMT
Subject: CN=9b9f891944b097f49929e848e7d8867dc042ca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:41:6f:b3:c4:dc:d0:9c:0e:51:b7:8a:cc:
4e:b7:b6:e1:ab:f5:ff:b1:fe:02:f1:ea:03:a4:e3:
56:c2:32:92:e0:e5:40:99:45:fb:7f:52:a4:d3:95:
de:6b:66:b3:c7:61:75:f7:a4:56:74:f2:63:21:96:
25:95:b2:7b:4f:d8:02:d2:ae:9a:db:27:8d:48:8c:
73:73:b8:67:93:be:93:79:c0:4c:36:5d:31:e8:2a:
b0:53:07:ed:5a:ce:f7:3c:9f:9c:5e:4b:77:4a:89:
5a:d1:76:1a:c6:a6:78:b0:00:ae:ac:17:5b:48:cc:
91:89:48:02:76:13:7c:0c:c1:6f:10:93:59:11:0a:
68:b9:3b:db:76:14:d4:b2:d7:78:d9:07:3c:12:9c:
6d:0f:8b:d8:bd:42:aa:1d:ac:a1:d0:06:7d:7d:ca:
69:d1:b4:81:b3:51:f7:09:e5:2b:83:cc:7a:38:de:
95:54:f1:f2:79:aa:23:9d:22:74:0e:cf:5c:b8:97:
a4:57:e2:fc:50:ac:81:e0:88:96:d8:eb:bf:c5:e5:
15:7f:e7:6d:2f:12:45:f8:76:fd:6a:3b:a6:df:ae:
18:85:57:bc:43:a0:a9:63:fa:21:42:8a:18:58:24:
13:23:39:9b:2c:2c:eb:7b:ba:fb:26:fe:9f:c5:49:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:89:19:44:B0:97:F4:99:29:E8:48:E7:D8:86:7D:C0:42:CA:83
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d4:16:ae:c6:60:f8:3c:69:7d:12:d7:75:e6:6b:be:04:d2:
3a:1b:86:dc:da:e6:e9:5c:5d:13:4c:9a:1c:ef:06:ab:3b:d0:
89:55:16:44:36:a7:c1:66:7f:cd:dd:9f:83:60:60:4d:ba:40:
b2:04:d1:43:93:b6:44:af:08:db:15:f2:67:17:c2:c7:da:5b:
5a:c0:1d:71:af:1d:65:b5:14:f7:74:60:3f:b2:76:2c:08:44:
92:d2:f7:c9:09:b1:28:2f:d3:be:ae:78:dc:73:14:95:d6:b1:
61:02:92:08:58:17:ee:37:d7:07:e0:bd:b7:cd:66:be:ae:f9:
ca:4c:0b:d1:e9:f3:60:88:3f:f4:17:03:af:ba:05:96:9d:9a:
bf:0c:2d:d0:f9:b2:24:f9:93:fc:9e:18:d8:41:ec:e1:0f:e7:
ee:4a:06:33:45:77:1b:80:51:24:6c:e3:f6:1f:a1:bd:ef:ec:
4d:01:5b:83:95:5c:3f:fe:38:04:ea:40:02:9f:17:ff:26:cf:
85:a2:3b:78:93:a9:9e:82:5c:2f:b5:4d:60:77:74:30:8b:8c:
d5:8e:bd:4b:1f:f9:66:72:63:28:9d:92:bb:2b:62:6a:51:78:
2d:69:6a:35:3a:41:96:42:15:c2:65:1f:1b:da:7d:43:39:df:
a0:50:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:44:32 2025 by rpki-client