Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: VrMs4g6cL47HG+txlS+XNWNoSenAOQKWXmHgwD4et/k=
Subject key identifier: 65:F1:FA:47:B2:F3:D7:54:25:AC:00:9A:F7:7A:20:74:C8:5D:2E:E3
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 01964D46F0FA88D9A886DAF3DC843FC72D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 0F35
Signing time: Sat 19 Apr 2025 09:00:16 +0000
Manifest this update: Sat 19 Apr 2025 09:00:16 +0000
Manifest next update: Sun 20 Apr 2025 09:00:16 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: jhznROX0okDYoM3L2euYW15G5338f5+elxolcR16kTo=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:f0:fa:88:d9:a8:86:da:f3:dc:84:3f:c7:2d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Apr 19 09:00:16 2025 GMT
Not After : Apr 20 09:00:16 2025 GMT
Subject: CN=65f1fa47b2f3d75425ac009af77a2074c85d2ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:03:63:ac:2c:01:ed:73:69:8b:57:e5:ef:
6f:a4:71:a7:93:20:3b:e0:f6:be:67:ab:06:69:e6:
09:56:8e:51:f9:03:c1:fb:92:bc:6b:67:9d:84:a1:
0e:92:69:ea:01:9b:b1:34:29:ff:d1:74:84:7b:27:
8d:a7:29:d6:ef:dc:6e:2e:a3:e3:69:a9:d9:b9:00:
5f:07:d9:39:a8:bc:25:48:fb:51:40:99:a2:2e:85:
c8:1e:5a:58:9f:fd:8a:9f:e8:bd:ae:c5:4a:d3:11:
ae:1e:cc:3f:4a:85:dc:21:be:c4:2f:54:55:9b:ff:
12:f8:c3:e2:35:67:2c:63:cf:4f:0a:9f:26:a9:0a:
70:ba:74:99:08:27:30:39:b3:a4:00:d7:32:48:ae:
8b:ea:f6:31:e4:37:0d:5d:47:c1:1f:41:6b:31:7e:
75:88:50:ef:a6:c4:3b:fc:a9:7a:a9:bc:fc:53:48:
c5:7b:94:18:98:dc:14:bd:db:8c:db:52:8d:89:b0:
07:63:e6:eb:a6:89:5c:3c:d0:18:89:5c:14:49:d9:
ce:40:f6:2d:32:0d:0e:e7:fc:b0:dc:29:1b:f6:8c:
85:c2:e1:10:55:ca:44:64:62:b3:a6:a5:fd:cf:61:
5f:91:33:07:1a:e0:db:7f:2a:f2:7c:c4:76:86:0f:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F1:FA:47:B2:F3:D7:54:25:AC:00:9A:F7:7A:20:74:C8:5D:2E:E3
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c2:d0:0e:c7:36:f3:7b:3b:fe:24:6d:8a:f7:c8:f2:c6:a1:
90:00:3d:71:5c:b1:4d:1c:f0:1f:79:50:26:af:c9:40:5c:56:
a8:bd:57:f7:35:bf:ae:45:3a:35:54:b6:67:3f:01:55:e7:61:
77:b9:6a:54:6b:cc:dd:c8:be:24:38:29:c3:16:6f:55:5d:6c:
a4:78:46:10:a0:70:9a:1f:f8:ca:60:4b:8d:fe:59:d5:82:5b:
42:99:ae:78:0c:37:20:16:45:3c:30:e1:8e:15:a7:1c:e0:46:
94:a6:ac:8c:94:bf:f8:0a:8b:5c:5d:ff:89:b1:01:1f:df:89:
24:92:55:b8:43:6c:ec:eb:f8:6d:fc:90:02:4f:5c:eb:e8:bb:
53:5a:34:6f:34:1f:bd:8f:7c:a8:6e:de:0d:72:a6:ed:ba:48:
99:94:e5:76:ff:9e:a5:5c:f5:17:63:38:93:0d:e2:a2:d8:36:
7f:0c:71:88:fa:bc:47:aa:9b:de:fc:0c:fb:ee:56:3d:02:6e:
d8:93:76:54:72:8a:ab:55:be:09:4a:15:a4:09:4a:9d:77:0a:
b3:ab:15:8a:8b:8a:73:9a:45:52:b2:40:fe:c6:58:52:d7:4b:
91:d3:29:5c:fe:ae:95:a8:2a:23:90:d8:8c:ac:b3:36:8e:ba:
c1:c7:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:24:42 2025 by rpki-client