Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File: V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier: kqd1MThQad9/9gBZVoJWG78xDo8M4g1tWliMhyXywoA=
Subject key identifier: 53:9A:25:DB:B9:58:E4:9D:28:CF:00:E5:4A:E2:E3:52:F4:15:34:A7
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial: 0196556E609936BC8A9B6213010DB6929D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 23:00:19 +0000
Manifest this update: Sun 20 Apr 2025 23:00:19 +0000
Manifest next update: Mon 21 Apr 2025 23:00:19 +0000
Files and hashes: 1: EQPOhUSrp_265j0O-uMyhE9jt_I.roa (hash: rrM5XgLKkJnvxVqnAYFYnHJh7gl05YTg1NaJpYIDwHg=)
2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: tkIfxFZ/nG6h6QUV/KOjEow0pGIDTeIUFx1lVNeE3t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:60:99:36:bc:8a:9b:62:13:01:0d:b6:92:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Validity
Not Before: Apr 20 23:00:19 2025 GMT
Not After : Apr 21 23:00:19 2025 GMT
Subject: CN=539a25dbb958e49d28cf00e54ae2e352f41534a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:50:28:e5:fe:ea:ba:70:87:90:df:1d:c7:
f9:79:cf:da:fa:bf:ac:3d:a2:6b:05:d7:28:db:1a:
4b:81:cd:0a:92:65:f2:fe:95:79:77:49:55:b0:dd:
2e:cb:f6:7a:6b:d3:a1:e7:6d:be:5d:31:1c:c9:6f:
73:e2:91:33:9d:7f:51:a8:e6:a4:59:b7:c3:ec:3f:
e7:89:a2:2e:6d:4b:84:6c:0b:82:e4:e9:82:17:2e:
8b:0f:6e:07:eb:26:db:99:62:06:ab:92:2e:ac:50:
f5:9b:39:75:20:b7:26:0e:cc:32:26:a4:1d:99:33:
fe:d9:41:10:18:ce:ac:58:34:a0:5f:2b:17:70:16:
bc:f9:ff:5d:e0:58:9e:e5:d9:4a:96:0b:a4:73:76:
d8:89:b9:18:89:03:8b:56:ce:41:26:a4:30:70:b7:
80:c4:fa:0c:3d:dd:ea:bd:2e:89:7f:ef:8f:33:32:
fd:d7:8a:33:39:a3:0e:6b:7a:a4:6d:d1:65:08:00:
a6:b1:1f:75:15:f6:52:8a:e7:fc:d0:f5:b9:3a:07:
93:dd:dc:ee:b3:e1:77:87:93:6f:5b:c4:5a:e1:d0:
93:a1:0c:7c:e0:53:c1:9b:33:ae:79:9a:ca:5c:79:
d1:08:7f:5b:49:3d:c3:0b:48:ae:2c:8b:f6:f9:1e:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:25:DB:B9:58:E4:9D:28:CF:00:E5:4A:E2:E3:52:F4:15:34:A7
X509v3 Authority Key Identifier:
keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d2:b2:03:91:fd:bb:7e:a9:a3:b8:b6:6f:56:c3:6e:ce:ea:
4a:86:dc:eb:9b:50:8e:92:ea:36:2f:e7:ca:b5:41:29:6d:ca:
ee:49:2c:b7:83:b3:0e:41:f7:49:89:ca:3c:af:fa:a1:88:f5:
fd:d9:c0:33:1a:b4:d3:55:b6:9f:5f:04:78:56:0c:16:21:33:
17:e3:cd:32:a5:8f:88:7b:4a:4c:8b:82:f4:3c:f1:2c:93:21:
fe:9f:48:20:f4:42:34:ff:41:a2:af:64:55:cf:35:74:a6:be:
8c:36:8f:1f:09:33:e8:99:d4:a5:ef:b7:a9:ee:8c:47:ad:2d:
9a:b2:35:be:2d:99:bf:06:af:29:10:7a:23:21:f3:5c:9c:dc:
66:e9:91:fd:c7:06:95:3d:5b:b1:1f:4a:13:d7:0a:0c:a0:02:
60:07:46:cb:58:d9:4a:17:8e:07:f4:c0:df:eb:ba:99:96:04:
ac:82:1b:69:52:d7:ba:1c:20:f0:1d:35:11:48:74:ad:0c:9c:
9d:53:5e:2c:fb:4c:4c:2d:ac:a2:ca:b9:59:68:6d:3d:56:d0:
46:f0:14:a5:52:90:f5:c1:27:81:9d:a7:a5:73:fa:0b:88:32:
c2:0c:d6:f3:2c:09:df:5b:50:d4:42:8d:b8:b4:36:4f:0b:96:
25:57:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:33 2025 by rpki-client