Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
File: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft (raw, json)
Hash identifier: nzNNp5PbLiu4Gg7NnxDA2LqiWK8sBZQYgNjoeK7gn0A=
Subject key identifier: 7B:85:E7:54:AE:4E:6B:F3:DF:81:C4:26:ED:0A:7B:95:3A:1A:C4:D5
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial: 019644E88B86EBD7EAB9D6A1F35364E54A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
Manifest number: 0652
Signing time: Thu 17 Apr 2025 18:00:12 +0000
Manifest this update: Thu 17 Apr 2025 18:00:12 +0000
Manifest next update: Fri 18 Apr 2025 18:00:12 +0000
Files and hashes: 1: 0MC1362R9lRRGpq84ZgFyJggIsA.roa (hash: 2oe5jKK2VDNOSC6ja+1wPu+cY+lyRN63lTJAf4/SoR0=)
2: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl (hash: ixKvW0HKfgwRiLO5mAQorntyuuOZn3UAn6LPY0o5yPY=)
3: hxG-StCBPxemsj2qpKGT4GGzhQk.roa (hash: MYz1XQtFxhUeNPc3mCJTjKjV6pO6a8sxO3y4ixSgakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:8b:86:eb:d7:ea:b9:d6:a1:f3:53:64:e5:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Validity
Not Before: Apr 17 18:00:12 2025 GMT
Not After : Apr 18 18:00:12 2025 GMT
Subject: CN=7b85e754ae4e6bf3df81c426ed0a7b953a1ac4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:1c:2c:1f:a2:eb:af:ed:38:37:54:ca:21:
00:61:b1:06:d0:e7:0a:ce:9a:a5:c0:f9:24:98:30:
29:5a:ca:b4:90:68:9c:77:f7:8e:15:a8:82:57:74:
15:41:a1:00:67:d8:d4:3a:ae:d5:7c:98:b3:8f:a4:
ab:88:d8:3c:72:f9:08:a3:14:09:68:76:62:c5:c0:
a7:d5:25:bb:3e:94:76:e0:87:c9:ac:89:8d:04:ab:
8a:0d:53:42:99:d2:d0:94:a1:64:ca:19:70:8b:7a:
18:73:c6:c1:9c:3f:17:0e:91:be:1b:68:19:41:c5:
45:af:39:a5:26:2c:90:f5:d5:72:1b:09:83:73:ef:
a3:72:fb:39:32:db:70:0c:b0:9c:e5:70:c0:3a:db:
97:90:32:27:aa:00:8e:60:8c:ab:a8:4a:78:bc:20:
bc:79:84:7b:31:ac:27:97:43:65:16:ce:c9:a1:6e:
b3:87:c2:c0:6e:8f:9a:59:6f:2f:89:8d:d3:96:95:
bb:f7:85:e4:e4:6d:6b:6c:e6:df:19:23:9b:fe:85:
08:0e:24:8c:90:94:e1:eb:33:f4:56:4b:74:5b:eb:
78:e6:ed:1f:5d:eb:46:60:5a:7d:b6:3a:5e:91:17:
a6:c5:71:05:66:33:12:6f:4e:d5:bd:26:21:d4:48:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:E7:54:AE:4E:6B:F3:DF:81:C4:26:ED:0A:7B:95:3A:1A:C4:D5
X509v3 Authority Key Identifier:
keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:de:97:48:21:ef:8f:24:f2:08:ab:42:ce:ed:13:7b:10:
17:fc:69:8a:ca:c1:29:c9:bc:09:59:12:50:7d:b9:17:84:84:
15:77:cf:59:28:d4:57:de:a0:4c:15:d0:37:ff:a9:1a:31:48:
b3:96:30:d1:d1:cf:c8:e6:68:3c:91:a6:70:f3:72:e3:ab:8c:
34:eb:1a:2e:cb:1e:57:5f:66:6e:60:70:75:c0:c8:73:1c:a9:
45:6b:3b:cd:77:f4:bf:23:b7:24:e9:f3:e4:8b:71:43:3e:b5:
e4:88:19:3d:6c:5c:87:73:34:29:34:f0:f2:7a:5c:0b:ae:8d:
f2:27:c7:fb:ef:45:7b:7e:86:62:67:aa:91:1c:a8:31:e4:fc:
87:04:82:74:fe:78:fb:54:69:a3:16:d6:20:4c:c9:6f:8a:ad:
ff:c5:cc:a6:ac:5b:39:4e:e0:31:37:74:86:00:4e:a0:3a:d8:
6b:ca:0c:3b:eb:a1:8e:8c:ab:e5:c6:ba:45:0e:7c:27:f6:35:
f3:ee:8e:f2:c5:ba:e1:d8:f8:56:31:53:5b:c7:1f:18:84:f4:
e5:7a:60:a3:00:05:bb:e9:12:bc:05:44:7a:15:5f:ff:8f:5c:
7d:5d:fc:9e:e7:a2:8a:0f:3c:d6:83:e4:c6:78:c7:29:a1:a7:
e6:b1:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:39 2025 by rpki-client