Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File: dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier: nNVHldz7czB0FUkVHPE6PpYILW6/pO+olFdO5HjbiT0=
Subject key identifier: 03:DA:CD:0F:71:C5:1E:81:CA:F0:3B:21:06:44:75:78:D6:37:2D:75
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial: 0196598257A0A1EBEBEBB7700FB03A8FFA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 18:00:36 +0000
Manifest this update: Mon 21 Apr 2025 18:00:36 +0000
Manifest next update: Tue 22 Apr 2025 18:00:36 +0000
Files and hashes: 1: asFNeSBZiInH59YAo8NnFAX0FVI.roa (hash: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=)
2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: I1TYjcy4WrKiHgPqBLxShp0761nngfJRvihHmHDzLME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:57:a0:a1:eb:eb:eb:b7:70:0f:b0:3a:8f:fa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Validity
Not Before: Apr 21 18:00:36 2025 GMT
Not After : Apr 22 18:00:36 2025 GMT
Subject: CN=03dacd0f71c51e81caf03b2106447578d6372d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:21:fe:b4:eb:bb:2c:8c:7b:bd:ad:c1:88:
d5:ef:49:ad:86:fc:c9:11:00:98:26:34:f2:8d:a2:
e0:8f:77:ed:4b:30:63:0f:36:8f:7f:e8:47:35:fa:
99:7e:62:c6:fd:dd:b9:fb:d5:0e:c0:50:47:58:4e:
c0:62:13:e5:4f:34:8a:dd:88:71:28:e0:3c:cc:86:
4a:90:10:40:64:5f:06:be:98:03:0f:ad:f0:2e:88:
30:8a:fb:17:70:59:f4:f4:68:95:33:c6:d9:11:65:
e1:c3:11:0e:68:75:8f:1f:e9:70:42:4e:c6:72:fb:
ec:b7:15:ef:d3:b9:4d:d4:88:c2:69:ff:23:10:4f:
3f:93:36:4e:e4:c0:84:5c:c6:b3:5f:1c:91:e6:a3:
95:3f:1f:8a:2b:2a:84:b5:81:8f:d6:1a:76:18:75:
1d:38:88:10:ad:38:d5:6b:b4:23:7c:49:7f:03:b9:
4e:6c:10:09:9c:89:28:5c:84:a0:cb:b1:51:82:5b:
97:4e:ba:9d:24:5a:32:eb:0a:35:6a:e0:27:e8:56:
6a:6a:80:2d:8e:2d:0f:4e:39:4b:11:ae:82:f1:ed:
9f:3d:e2:69:c2:60:57:69:25:45:e7:84:d7:0c:9d:
04:de:c0:e5:32:99:1a:03:b3:a7:e2:ab:c5:34:f6:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:CD:0F:71:C5:1E:81:CA:F0:3B:21:06:44:75:78:D6:37:2D:75
X509v3 Authority Key Identifier:
keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4d:51:f9:51:1c:a4:a6:26:28:55:70:43:44:5b:1a:44:18:
d6:e7:65:79:72:7e:09:9c:56:aa:b8:d1:67:10:9d:50:75:f7:
f6:d3:db:1e:5e:1a:62:dc:18:17:ff:30:dd:41:0b:02:d9:68:
c0:54:a8:63:65:75:69:bc:b1:ed:eb:b1:d0:7c:36:a3:0f:e6:
a7:e4:47:65:7b:60:53:52:f2:46:e1:c4:62:dd:4d:20:2d:38:
b2:de:34:e7:84:54:ec:5c:01:b3:4b:7f:2f:f4:02:67:d0:d3:
ce:a2:f2:29:c8:d0:38:2a:5f:a7:de:04:bf:e5:ed:e3:d5:93:
87:00:cd:65:9d:3c:4f:af:b2:26:7e:74:5b:b4:56:01:51:d5:
40:a9:af:d0:aa:7d:74:a8:64:0b:4f:11:5b:60:c3:eb:aa:f4:
27:d6:c4:71:1d:91:25:f2:46:6a:17:b7:6e:b5:9e:f5:75:97:
81:66:91:02:ca:5d:ea:a4:55:33:1e:08:73:2e:13:cd:0c:99:
67:2e:93:c6:b5:df:b6:98:6c:a7:56:73:6a:d5:d5:cc:04:01:
45:14:4d:39:66:e5:ac:09:b2:8f:c3:96:c9:2e:db:3b:c2:e6:
0e:06:cd:36:82:7f:0c:19:cc:d4:91:8e:01:3f:65:fe:c9:01:
79:a9:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:18:40 2025 by rpki-client