Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: Tmx6J+OUzqQxX0sOIOuVM3wb5+EvaOxV+HY3egPQrs0=
Subject key identifier: 88:22:C1:EB:2D:F1:F8:87:57:79:B6:B3:A7:AD:A1:93:B3:BC:79:F5
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 0196A42EA61B86FCB63CB6048EAD47D11329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 06:00:42 +0000
Manifest this update: Tue 06 May 2025 06:00:42 +0000
Manifest next update: Wed 07 May 2025 06:00:42 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: f1Xv4N+4HpMb77snoSDwlOdh7DGmgNNCpzIkec3a6xM=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:a6:1b:86:fc:b6:3c:b6:04:8e:ad:47:d1:13:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: May 6 06:00:42 2025 GMT
Not After : May 7 06:00:42 2025 GMT
Subject: CN=8822c1eb2df1f8875779b6b3a7ada193b3bc79f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:e3:d4:52:47:4e:55:7a:c9:2d:ca:c3:dc:
03:05:41:7b:17:77:74:09:32:eb:a8:ee:ed:45:44:
fc:86:5b:58:a6:c2:6c:76:c2:30:9e:86:71:81:45:
35:af:09:dc:84:e1:38:4c:be:2d:cf:07:37:d6:f5:
b0:bd:34:bb:67:d0:a2:10:ea:2f:2a:05:17:92:e9:
ae:53:7e:18:f1:4b:62:f5:04:4e:a0:bc:9c:0b:75:
25:21:3b:c9:cb:40:9c:1c:27:84:5c:76:ea:35:b0:
ab:4a:6e:16:ce:bb:ba:ce:35:10:8e:3d:b8:8a:e2:
99:b9:c2:22:fc:ec:9f:ec:2b:02:82:9a:84:21:2d:
42:c1:4d:8a:d7:03:83:dc:cc:5f:a1:3b:e4:02:30:
11:d4:50:13:40:fc:9d:25:9d:8e:6d:28:7c:8c:b4:
bb:85:b4:e4:e5:ad:43:2c:e9:9d:d6:21:22:0d:ed:
4c:7a:f2:73:8e:64:d2:59:7a:c5:3c:69:2b:fa:d0:
79:c6:76:ec:40:1e:57:71:7c:cf:ef:01:2d:12:36:
91:a1:d7:57:1e:ed:47:f6:0b:23:c8:1b:33:a2:6d:
c3:93:35:0d:ea:b0:dd:8f:58:0d:3a:28:00:93:d9:
26:79:31:ab:71:40:a5:5d:9e:9c:b1:97:df:14:d3:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:22:C1:EB:2D:F1:F8:87:57:79:B6:B3:A7:AD:A1:93:B3:BC:79:F5
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4b:6e:a5:f7:f8:23:19:5f:46:17:e9:ee:69:34:e1:df:0d:
2b:ff:ad:00:71:c4:5e:0a:f4:4e:4b:86:4d:36:ba:1f:39:4a:
12:e0:cd:2e:9f:e1:30:9f:a0:d3:62:4b:4b:5e:93:3e:b7:b5:
da:32:11:07:38:d4:ab:ba:8f:c4:80:72:c5:00:04:38:15:01:
c1:d6:f8:11:1c:14:a3:d9:87:e3:ef:dd:e7:5f:a1:13:3b:aa:
cc:86:0e:80:c4:a2:eb:db:bf:86:49:15:0c:aa:8f:55:e1:dd:
d0:d5:d7:3b:d5:30:a1:10:32:f2:68:58:86:dc:60:e3:86:fc:
02:ca:e1:22:8a:08:c7:fc:21:6b:9a:2f:62:c1:dc:2a:df:cb:
6f:e5:6e:04:47:eb:83:40:65:a7:ec:c8:79:40:61:f5:d3:5a:
92:e4:20:b9:ea:67:f2:3d:3c:22:ba:84:52:52:53:f1:ab:c5:
48:2c:cd:76:e5:d0:b7:5b:b7:73:5f:14:17:04:e1:33:69:8d:
ac:fb:af:3f:2b:05:39:a3:71:7e:47:5f:af:da:13:07:11:dd:
3d:80:35:a8:ba:e0:f3:e7:62:5b:b6:b2:e2:6d:ef:a2:61:3c:
a6:93:71:08:00:a2:57:a3:6d:a7:b4:92:06:29:7a:47:fc:62:
c3:29:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:25:54 2025 by rpki-client