Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: agA5Ven8aDmetvKepnJnqA/UnNhMwWZXCpKiuJBjczM=
Subject key identifier: 29:1B:3D:25:F1:2D:4D:55:3E:E6:72:42:98:7C:BE:70:7E:61:4C:23
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 0196ABE84A19572F7C58B1DD6C286D40B4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 0F66
Signing time: Wed 07 May 2025 18:00:49 +0000
Manifest this update: Wed 07 May 2025 18:00:49 +0000
Manifest next update: Thu 08 May 2025 18:00:49 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: YsPti0e1x+zr10e+vINRmXqWREtVgOwX4iwAG193S7E=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:4a:19:57:2f:7c:58:b1:dd:6c:28:6d:40:b4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: May 7 18:00:49 2025 GMT
Not After : May 8 18:00:49 2025 GMT
Subject: CN=291b3d25f12d4d553ee67242987cbe707e614c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:0c:b2:b4:c5:04:f7:93:95:cf:1b:e5:b1:
27:6b:da:dd:87:07:d2:d9:49:79:86:71:d2:a4:ec:
25:4f:64:42:84:db:13:0b:cd:cb:cb:a3:4f:67:d0:
f4:c9:ca:07:ea:ec:fc:ef:e6:fd:d6:7b:67:0e:8d:
dd:72:2e:84:b2:a8:3d:b4:75:af:91:8a:a7:62:f1:
64:94:f6:1c:84:8d:b6:48:67:77:95:4b:18:f4:15:
7c:b1:f4:a8:27:39:a8:47:d2:d0:df:5b:06:9d:d6:
f6:26:63:7a:22:e2:13:7a:f8:4f:ab:34:53:9b:77:
20:c8:9a:bc:e8:b5:df:9c:42:d2:5d:cf:f9:7a:d6:
76:3c:9a:ac:4f:02:71:3c:04:00:bc:54:84:3c:05:
91:25:aa:f8:f8:ed:55:c0:9f:47:40:ef:1c:82:59:
77:05:97:6c:9f:95:da:6a:b9:d6:bd:b8:81:8d:60:
81:9c:7e:79:2a:0a:c8:be:ae:86:80:04:e4:53:cc:
ff:84:5e:05:25:7a:94:41:7b:62:7d:b2:54:15:23:
34:18:aa:58:49:d4:53:ca:24:94:e8:c9:42:18:2b:
89:3b:d5:7f:43:26:ea:16:47:47:4f:ce:1f:4a:90:
73:93:09:95:78:b9:c3:ca:cf:a3:87:23:24:78:6b:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:3D:25:F1:2D:4D:55:3E:E6:72:42:98:7C:BE:70:7E:61:4C:23
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fe:ec:92:65:28:3e:00:06:c9:64:24:36:f6:de:e5:32:d5:
67:8d:06:ed:62:8f:e2:7f:3d:d7:95:e8:e6:f8:48:7d:79:53:
ea:d9:9b:23:da:d5:a5:88:56:e8:d8:42:c9:e2:6f:8d:7d:9d:
da:14:5b:b9:9f:5a:97:e7:b0:54:0a:b4:2f:0d:89:8c:08:24:
32:0a:c7:37:86:46:5a:1d:69:7a:97:89:5c:80:0f:8e:f8:dc:
11:77:78:57:1a:49:19:ba:11:94:74:f0:bf:53:bd:78:46:d5:
38:9a:3d:fd:d6:8c:47:19:be:e2:7c:7a:6c:e8:0d:19:3e:e4:
87:40:00:ef:38:1a:7b:e9:9e:3d:68:05:34:1c:9a:8e:5d:2e:
1f:c1:1a:22:5a:ec:ff:fd:8e:1f:6e:b1:df:ed:2f:ba:fa:d6:
2f:19:0e:ee:0e:36:4d:8b:4e:60:25:d8:2d:22:5e:19:ff:ad:
74:d1:34:9d:0b:91:6e:7e:b6:60:b6:2c:48:d7:a9:7b:8b:41:
e4:76:ef:01:8f:85:41:b5:e7:26:77:18:9c:cc:0b:87:b0:22:
a9:6f:3d:98:79:ac:2c:bf:2d:f9:02:7e:71:31:94:24:5b:08:
73:dd:04:8a:fd:d4:61:5b:3b:5b:e1:cc:9d:29:71:95:f3:e4:
d6:47:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:21:48 2025 by rpki-client