Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: RbwVZHsIy2fSAy0fpPu0R0608lvJ/160u6Cmz5wNgMA=
Subject key identifier: C6:EB:1E:C9:2D:B7:7F:41:4E:D2:D9:AF:91:A4:76:21:15:53:A9:62
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 0196D13E9DD4E553F647179F5E10876C49C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1543
Signing time: Thu 15 May 2025 00:01:03 +0000
Manifest this update: Thu 15 May 2025 00:01:03 +0000
Manifest next update: Fri 16 May 2025 00:01:03 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: 3kgLeJiSGdzeOvaVgnsKsjiSBTLEGMec/v9B9J9xntY=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3e:9d:d4:e5:53:f6:47:17:9f:5e:10:87:6c:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: May 15 00:01:03 2025 GMT
Not After : May 16 00:01:03 2025 GMT
Subject: CN=c6eb1ec92db77f414ed2d9af91a476211553a962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:c9:91:d4:78:4d:1f:37:48:18:04:91:85:
d6:87:1e:c7:9d:3e:9c:a3:64:a5:dc:21:33:b3:89:
ae:5c:e5:82:84:85:e0:71:2b:81:5e:c6:34:00:43:
f6:0b:0e:f4:bf:41:13:81:28:c7:28:dc:2f:56:f7:
b8:ed:cb:c5:f8:cd:54:ad:34:06:79:23:5c:0e:10:
b5:6d:34:3b:07:3c:1e:ce:35:ed:8c:d2:11:11:62:
cf:fb:cd:b0:76:c9:0c:22:96:49:25:68:d2:09:16:
8b:0b:5e:e5:a8:9a:2c:bc:b3:9e:6b:cf:ee:92:be:
c8:d7:f2:79:47:a0:7f:c6:ef:e7:6d:24:0e:fa:fd:
40:30:4f:c2:b7:f1:88:de:06:e0:aa:ae:71:70:21:
dd:7f:3e:e4:3c:6a:b3:ce:00:b9:65:7c:45:87:63:
5d:ae:44:ae:4a:03:eb:cd:8c:64:50:4c:be:ec:40:
66:8c:f9:1c:8f:16:72:d9:9e:48:94:ae:92:a8:d0:
43:4f:14:06:e6:09:f2:73:b0:a7:b7:19:01:d8:21:
e9:05:54:d8:a3:32:03:d4:64:f8:89:fa:4e:0b:76:
b0:26:ee:80:62:d0:0a:ce:15:cd:73:13:99:e3:c4:
39:36:b5:9d:4c:b2:10:96:de:78:d2:f7:3d:23:b3:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:1E:C9:2D:B7:7F:41:4E:D2:D9:AF:91:A4:76:21:15:53:A9:62
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:54:de:e1:cb:3b:ab:7d:55:b7:21:69:a8:27:14:32:1b:
42:a7:c9:df:3d:8a:dc:2a:a7:24:5b:79:f9:4e:8d:46:7b:5d:
90:90:d0:f6:d8:2a:4d:9a:27:2e:d0:f5:17:9a:11:62:c4:c2:
27:5e:22:2e:d5:9d:6c:81:3b:10:0c:5b:73:5c:d1:d8:29:5c:
be:67:02:fc:b1:a5:91:92:96:23:b6:a5:fc:30:c3:f2:e8:dd:
53:8b:4f:cc:3d:6f:83:0b:2c:97:54:6f:9c:f0:cf:8f:bb:67:
dc:61:7b:31:97:4b:8c:4c:7d:c0:80:32:06:74:ac:1d:9d:72:
0a:e7:cc:72:0c:6c:a9:af:99:60:11:c6:d6:59:2e:52:dd:28:
cc:6a:df:9d:af:7a:25:f9:fb:ea:b8:19:91:a7:09:9f:d4:43:
6f:69:d1:5b:ea:6f:58:2b:2a:34:e7:fe:55:d2:b0:f8:15:58:
7e:c5:80:d4:20:c7:16:cb:e3:61:dc:3a:64:2b:3e:79:17:ee:
e8:fe:b2:84:3b:7e:95:93:ce:55:eb:af:90:c6:c5:4b:d4:27:
82:76:80:de:13:4a:78:99:c9:28:6c:fd:e5:bf:83:33:89:11:
32:58:35:6d:99:d5:2f:87:85:97:60:ba:aa:fd:b3:95:7d:44:
9c:56:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:25:12 2025 by rpki-client