Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: fDeMcFlUZ7ahvJvH+6Rriy/xundZYlT8nlqZVb3UF74=
Subject key identifier: 5C:B2:DB:CB:19:22:61:AF:E7:DD:E3:0C:4B:94:B2:4A:4C:0A:74:46
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 0196BFA5BC16A541C59BECA8297244886A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 14:00:31 +0000
Manifest this update: Sun 11 May 2025 14:00:31 +0000
Manifest next update: Mon 12 May 2025 14:00:31 +0000
Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: 0wnsmnA521qyZ4ZydcJWxCdwn1iGSVGoUxt6LIweehg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:bc:16:a5:41:c5:9b:ec:a8:29:72:44:88:6a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: May 11 14:00:31 2025 GMT
Not After : May 12 14:00:31 2025 GMT
Subject: CN=5cb2dbcb192261afe7dde30c4b94b24a4c0a7446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:7b:ab:b7:6a:84:f6:6e:2f:2c:eb:b8:5a:
ce:01:bc:f4:98:79:35:07:1f:7e:30:f0:d0:5e:f1:
a0:ac:ce:0c:cb:53:2e:dc:c6:6a:90:64:12:63:a2:
30:ff:e4:18:c4:40:71:88:25:df:43:0c:1d:da:6b:
85:86:ad:c8:0a:38:c4:ea:55:e1:22:1c:f2:04:17:
c4:65:95:7d:8d:66:10:40:4a:dc:da:88:f0:7e:63:
e9:c4:44:fb:48:86:92:1c:67:5b:dd:50:cd:3f:b6:
40:62:9c:0a:66:a7:02:82:74:58:81:06:00:19:44:
24:58:e3:d8:3d:a2:59:c4:50:e2:e1:fa:c4:9b:5a:
e1:65:d9:94:04:be:10:5c:aa:84:1d:33:58:c9:18:
8d:20:79:b5:16:fc:29:a6:f2:45:70:58:c9:13:aa:
c2:94:1e:1c:f4:d9:77:d5:bc:0a:44:c9:bb:0c:47:
a9:d6:2d:e9:68:63:f0:f4:47:36:73:bb:af:44:fb:
f4:d1:21:33:33:95:66:d4:8f:f2:60:90:9b:ae:2a:
10:b0:2e:63:ea:88:49:f7:41:83:11:3f:35:13:13:
5e:d2:60:ce:2e:0f:77:7d:30:21:a7:f6:33:bb:ba:
07:df:4a:a7:00:d0:1c:c3:35:b9:51:70:12:52:81:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:DB:CB:19:22:61:AF:E7:DD:E3:0C:4B:94:B2:4A:4C:0A:74:46
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fa:a9:82:3b:df:6f:1f:86:d1:b8:02:26:ba:fd:c4:f7:4c:
42:bb:9c:85:9d:9f:99:48:8b:44:e9:f4:f5:38:03:90:0d:36:
6c:bf:55:52:44:17:25:e5:c6:7e:4e:b4:4d:16:4f:f3:f2:8f:
80:47:7a:35:5b:55:ba:63:a8:e8:92:2e:8f:a6:4b:d6:65:1b:
58:4f:d0:04:fe:08:bb:76:59:da:7f:04:e5:9e:50:32:45:c2:
df:b5:e2:b3:2b:5c:4d:d9:67:70:ca:56:b1:65:9d:ad:d4:f6:
2f:16:52:59:e9:02:6c:c0:0e:a1:07:b0:25:3b:0a:fe:b8:76:
b8:76:95:ec:32:c7:9a:6c:53:4c:9b:bd:ae:82:b4:38:5e:f0:
4c:b9:39:c7:5c:d1:50:c3:f9:2c:fc:ab:64:f8:d5:63:9a:c0:
5e:36:00:91:72:45:4d:5c:0d:7f:22:5a:5a:0f:95:ef:a7:f7:
63:28:b7:d9:6c:e2:b3:0a:65:9a:0b:fb:71:af:30:e6:8a:32:
d5:0b:e8:d8:7d:c8:5f:a6:f8:71:64:ea:97:77:14:48:76:08:
12:ef:69:b6:0c:57:5c:f1:f7:70:a3:c6:d4:3b:bc:2d:f2:d1:
18:e3:a0:25:cd:2b:d6:fc:16:2c:7b:21:0f:51:da:f4:db:33:
a2:70:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:12:49 2025 by rpki-client