Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: amJzE9YmlYlrjGU6DrqLZ0MDTUW7r2U44NHRCuIxctk=
Subject key identifier: 5E:14:54:7B:69:B9:0E:10:97:3E:F4:89:C6:77:0A:71:31:45:D7:AA
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0196C45E88D08BEA71A42D67D947D3F9E9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 14CA
Signing time: Mon 12 May 2025 12:00:51 +0000
Manifest this update: Mon 12 May 2025 12:00:51 +0000
Manifest next update: Tue 13 May 2025 12:00:51 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: tW4QGuKQ4IoeNEzQtyKeglp5ySVG2qCwhB/bHIg6C/k=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:88:d0:8b:ea:71:a4:2d:67:d9:47:d3:f9:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: May 12 12:00:51 2025 GMT
Not After : May 13 12:00:51 2025 GMT
Subject: CN=5e14547b69b90e10973ef489c6770a713145d7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:fa:4f:00:f4:d2:e4:1b:18:84:70:73:26:
8d:a1:13:d9:7b:2b:30:38:23:b8:ba:0c:a5:87:ef:
2b:08:29:9f:48:f1:02:ae:53:72:db:ec:16:96:60:
37:a7:38:1b:a5:c1:7a:c3:80:43:b3:9f:fc:1d:41:
3c:03:0a:70:e7:95:fe:e0:13:bc:cd:88:8e:91:6b:
a3:e9:a8:7a:ea:c7:dc:8f:64:ac:9b:7f:d9:31:ac:
29:40:08:81:26:89:9f:9a:ae:bf:18:3a:0e:2d:fb:
a8:75:c6:00:62:c5:ad:fc:b5:18:d2:75:e6:2f:05:
5b:c5:ea:88:b4:d6:44:b3:9c:75:96:64:10:6a:60:
43:a7:9e:b0:61:8f:b3:79:78:d9:b2:c0:17:0e:47:
05:91:ef:53:bb:ad:00:ff:97:9d:a7:4a:63:4d:86:
ec:71:34:64:72:02:75:66:b6:33:1c:b0:76:72:a0:
a4:64:d0:fe:c0:9a:0a:3e:03:30:a4:de:4a:b6:3c:
9c:5d:19:ca:c0:ec:cb:dd:68:e3:07:c2:e7:8e:a2:
4d:cc:c2:b1:6e:e6:a0:76:6a:1f:ab:3c:1e:24:b7:
fb:ac:32:54:34:05:59:62:0c:23:4a:3e:1f:10:57:
e1:b6:2c:a1:e3:5d:0c:7d:9f:b4:eb:80:fa:d8:e7:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:54:7B:69:B9:0E:10:97:3E:F4:89:C6:77:0A:71:31:45:D7:AA
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:97:e3:1a:37:c3:d4:68:ca:51:ce:c1:fe:7b:36:38:b8:7e:
46:f0:29:db:b2:40:65:2f:41:76:41:76:c7:58:82:8b:d9:a5:
c3:80:82:3c:a8:5b:a7:cb:1d:2d:77:94:9b:97:d0:47:5f:13:
74:68:6f:62:23:52:ca:4b:e8:bc:a5:05:9f:24:d2:9e:9d:6e:
a2:24:98:ff:99:c3:ff:e6:de:24:29:c0:8f:ef:c7:9b:1f:8a:
ed:00:d4:bd:e2:c2:a7:bd:70:d9:33:3c:2f:89:41:f4:80:a0:
8a:03:83:bc:89:66:12:20:c2:69:85:9a:5d:27:1b:2a:b4:3f:
6b:e9:30:30:fe:9a:03:d6:31:99:69:f3:99:2f:e6:78:08:90:
37:0f:8a:aa:a8:7f:52:5e:5a:b5:5f:46:5f:32:f2:ca:db:0f:
07:7b:aa:64:e1:3f:46:22:f8:da:c2:8d:70:a9:a4:0e:59:66:
c0:d1:8b:8d:31:15:0f:24:8e:14:34:bf:7c:29:fe:4a:71:fe:
00:5f:02:54:08:0e:9f:77:6d:bb:c9:00:3f:80:ab:1c:0c:9a:
fc:31:b5:0d:fc:cf:6d:4b:5e:02:de:a1:cc:f3:2a:79:80:34:
dc:f1:fc:73:b4:43:7e:3c:e4:18:ea:1a:78:1d:87:26:b9:b2:
83:71:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:37:44 2025 by rpki-client