Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: xJ1swTBiUx9iAjQVJT7K7Pzh9cwBo6yPqv0cga/n1hc=
Subject key identifier: 6B:19:48:6D:DE:8B:0F:3E:B8:0C:22:4A:36:F0:B6:50:41:68:8A:4D
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 0196B823030CBFCA2C483AAAF8F68843E88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 03:00:24 +0000
Manifest this update: Sat 10 May 2025 03:00:24 +0000
Manifest next update: Sun 11 May 2025 03:00:24 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: plX124FeAgaNLKxzl4eXPpEFgdADu4wZ2sbA+P6dAsE=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:03:0c:bf:ca:2c:48:3a:aa:f8:f6:88:43:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: May 10 03:00:24 2025 GMT
Not After : May 11 03:00:24 2025 GMT
Subject: CN=6b19486dde8b0f3eb80c224a36f0b65041688a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:76:73:58:31:46:1b:a7:4e:83:77:2c:1b:
52:3d:c2:f5:02:ed:7b:6b:93:60:11:5e:fc:f3:04:
eb:30:50:fc:52:0b:1f:92:50:21:28:0b:53:64:89:
58:85:f7:c1:26:bf:89:6a:e9:c4:65:03:82:16:cb:
d2:e7:bc:10:dc:e8:d3:6b:97:b5:c3:26:00:23:6b:
98:87:59:e5:e3:13:93:4e:b5:5e:a7:6e:64:d4:52:
53:07:e5:99:b8:af:30:28:11:4a:87:6f:26:8b:ae:
70:fd:92:39:8d:5e:2f:28:39:83:35:7d:d8:62:2d:
35:3a:fb:73:66:92:8d:5e:08:be:21:02:7a:0d:1d:
f6:c9:ac:2d:51:ec:3c:b6:4e:26:bc:f8:e6:08:45:
00:cf:95:8c:b8:72:e4:18:7f:04:26:94:15:63:24:
30:a6:42:48:d7:79:5b:27:67:71:7c:a2:9e:e6:f9:
4c:f5:ae:73:bd:3e:74:4a:dc:32:60:95:fb:6d:01:
90:66:10:cc:73:ef:ee:8d:9b:fd:86:11:fa:88:2b:
c6:b2:2d:cf:04:04:2c:b6:65:86:b6:bc:ab:80:3c:
5a:5f:4e:21:1d:11:15:e5:9e:98:27:33:8f:f9:14:
74:d1:72:32:34:54:05:b7:1d:ed:0f:c3:33:44:86:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:48:6D:DE:8B:0F:3E:B8:0C:22:4A:36:F0:B6:50:41:68:8A:4D
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5a:a1:93:a0:19:fc:b6:6b:5e:fe:ca:c6:e2:de:53:fb:d0:
ef:90:3c:d1:26:ff:8e:c2:01:d7:57:f3:57:2c:89:cb:31:ea:
60:b2:7c:3d:7f:c9:8f:b6:5b:e9:d1:72:35:d0:68:0c:bc:ad:
36:aa:f9:d2:b3:21:94:e3:94:6b:8b:68:87:fe:76:3d:2f:45:
4a:35:f9:c0:01:21:a6:33:b5:00:04:89:65:db:33:71:48:dc:
29:c9:c6:d5:dd:e3:54:11:a4:b1:d1:c6:ce:9f:6b:c5:39:b0:
e9:69:6d:9d:bb:f7:6f:6a:68:ac:c1:82:3a:78:be:8b:6b:35:
e8:85:ce:1b:ad:7f:24:17:ef:6f:16:c7:5f:df:4e:7f:e0:f1:
c2:86:13:b5:e9:72:e4:53:e1:13:c9:62:7f:17:9d:7a:2e:86:
3f:c6:5a:57:8c:57:ee:ce:db:ee:8d:b3:e4:34:f8:db:0b:1d:
ac:44:76:e0:75:c9:da:87:b4:63:f9:89:76:86:e4:04:0b:af:
a3:15:50:34:c5:26:65:5a:10:39:12:f6:68:ac:32:0a:6f:fe:
3f:3d:43:5c:c7:e1:c7:b2:58:f7:8c:56:04:49:b6:16:03:8c:
63:c0:20:9d:af:a0:88:18:c3:44:4a:7b:5c:91:3f:c0:d1:bd:
09:aa:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:30:03 2025 by rpki-client