Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: H+fKTODnWp7k7+SqqhLVo9tGC2sM7P+GlFQaSIBk9Yk=
Subject key identifier: D2:42:77:42:31:0F:53:F9:4F:47:67:F2:3A:69:B3:F1:B5:76:A5:E7
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 01969F3F729FEFB7E6530192C3F528057894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 07:00:57 +0000
Manifest this update: Mon 05 May 2025 07:00:57 +0000
Manifest next update: Tue 06 May 2025 07:00:57 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: PO4ZPv6v7kw+VmUoN0khB553X/4dghlIk2NW6cdNWAI=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:72:9f:ef:b7:e6:53:01:92:c3:f5:28:05:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: May 5 07:00:57 2025 GMT
Not After : May 6 07:00:57 2025 GMT
Subject: CN=d2427742310f53f94f4767f23a69b3f1b576a5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:b6:12:9c:18:e9:4d:1e:93:5f:35:04:71:
9a:b7:ff:64:7a:3c:54:30:76:e2:92:f0:72:f9:81:
bd:4d:78:0d:7b:5f:50:76:d3:b6:10:81:dd:89:c5:
c9:1a:57:3a:46:a8:d8:28:4c:35:a6:86:45:4a:bb:
9d:39:1b:4e:8f:6d:57:71:50:00:81:00:14:d2:1b:
64:6a:ea:36:14:00:55:76:8f:11:db:bc:5b:58:8b:
2f:e3:38:6f:3e:ed:27:5d:4e:e6:87:c3:96:99:7b:
5a:34:77:55:cc:ee:b5:28:c0:09:6e:25:e0:5e:b8:
a5:4c:99:3c:97:3b:2f:1e:51:55:f0:1e:5e:dd:6d:
25:c6:38:0d:cd:c7:b9:0c:40:ea:cd:db:7a:5b:3a:
f6:20:da:f2:45:bf:b4:e7:b9:83:ed:68:4d:ac:63:
ce:95:3a:b4:c7:6c:a9:a0:55:a8:ef:9a:48:47:b3:
df:c7:12:69:14:3f:74:f8:cc:74:56:67:ad:9e:09:
fe:71:8b:06:74:6a:df:46:c0:42:a7:84:05:91:cf:
27:13:56:70:d8:85:4d:93:22:86:78:7c:b6:40:ef:
da:03:f9:ca:ee:e2:dc:f2:6d:25:27:55:0e:7b:47:
54:62:de:c4:a0:99:f8:39:fb:3e:ff:4c:82:a8:b2:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:77:42:31:0F:53:F9:4F:47:67:F2:3A:69:B3:F1:B5:76:A5:E7
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5e:f6:df:4e:1d:13:f2:d6:8d:41:19:0d:15:18:dc:26:d3:
8c:74:ba:1b:1d:1e:dc:ec:7a:d8:11:2c:31:ab:de:7b:6e:6a:
e1:54:3d:03:c8:a5:85:6e:4c:c3:69:32:80:b4:f6:aa:ed:05:
7a:08:be:83:0a:92:69:31:31:e0:63:9c:b3:b6:cc:b9:d2:56:
b7:d3:87:d4:18:97:c8:56:20:0b:9d:d9:42:14:fd:01:c7:95:
31:43:1b:f4:a1:a2:97:02:87:82:a9:de:72:d4:94:b8:06:d7:
2e:06:f1:47:a9:a4:e0:a7:87:93:96:5d:71:d0:e7:0b:84:28:
09:88:de:f0:c7:b7:84:16:f4:de:90:82:f0:0a:82:dd:1a:ad:
4f:53:be:c9:41:c6:76:cc:f2:a1:ed:2c:5e:a7:44:08:c9:0d:
ae:0d:39:dc:da:23:02:ea:1e:f8:23:69:31:57:68:2a:8a:82:
8e:16:04:0e:cf:03:66:58:1e:a8:b1:c6:fe:60:a1:4f:5b:27:
36:0d:25:0d:e6:13:ee:88:53:27:9e:60:dc:19:39:cd:9b:be:
9d:79:61:13:5a:3b:a9:76:da:9b:cb:47:11:e5:6d:db:16:94:
2a:53:81:ff:1c:95:be:4c:93:d6:a6:f7:ba:c3:17:1b:2a:4f:
b3:a8:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:53:52 2025 by rpki-client