Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: x5AamCu5z5p3519Jet3Auxu0SdqoW5zVg6JYfbglV0o=
Subject key identifier: 4E:39:8F:37:DE:77:D8:63:6A:B0:01:9C:56:8E:55:02:86:8A:70:C9
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 01965537BA92544A21BB9B35455F6C07BB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 22:00:37 +0000
Manifest this update: Sun 20 Apr 2025 22:00:37 +0000
Manifest next update: Mon 21 Apr 2025 22:00:37 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: 68HZVppRvgf2Ytiw8N0zv3mvgMOli/ioA1WMQ5fkFyM=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:ba:92:54:4a:21:bb:9b:35:45:5f:6c:07:bb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Apr 20 22:00:37 2025 GMT
Not After : Apr 21 22:00:37 2025 GMT
Subject: CN=4e398f37de77d8636ab0019c568e5502868a70c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:72:f9:ea:1c:02:34:37:61:3b:ea:8f:d0:
22:d8:1a:03:73:ce:7b:16:a8:e7:18:f0:36:c4:0c:
35:dc:57:89:2b:90:8e:35:10:ff:33:b7:49:70:b5:
6b:12:96:7e:72:a2:52:8a:b2:26:26:3d:95:65:95:
4b:04:93:c0:69:ac:14:df:38:13:b4:c4:e1:77:bb:
d8:e2:2c:eb:28:25:f0:87:a0:61:cd:0d:d5:36:32:
e2:f5:c3:9d:b4:bd:48:23:36:23:63:bc:0a:b0:14:
7d:03:91:a8:94:2a:90:31:b9:34:3d:bc:f1:f5:9c:
ea:3d:77:45:cd:06:9c:4c:e7:b2:5b:10:de:61:5d:
a5:32:57:be:7a:06:cd:db:c7:77:63:d8:32:e5:6b:
19:67:ce:fc:9f:30:ce:8d:84:a7:58:3c:62:bc:31:
cf:fc:a7:ae:65:72:84:34:68:41:1c:70:85:35:2c:
90:a9:67:e6:fc:f3:95:dd:82:c8:63:67:4a:6d:dc:
19:0f:0c:2f:43:65:00:3e:20:eb:76:8a:00:60:19:
37:5c:9f:fe:66:45:6f:96:58:e4:96:77:2d:02:46:
9e:96:23:c6:f2:67:db:d0:3b:c2:8d:fe:de:29:bb:
32:86:f3:5b:cb:fe:fc:51:59:70:9e:6b:d8:20:a2:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:39:8F:37:DE:77:D8:63:6A:B0:01:9C:56:8E:55:02:86:8A:70:C9
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:d4:6f:2a:63:75:8a:e7:db:fa:c1:fb:c6:b9:9f:bc:79:
b1:96:37:9c:e5:b7:51:ae:65:9d:cc:bc:29:67:5c:6a:4e:3a:
0f:3f:19:6b:f1:82:86:a3:c4:ab:29:10:ab:2f:ac:dd:71:fb:
65:d3:6a:40:b0:c7:33:47:8d:c5:b4:f0:6c:bc:5d:3a:26:b2:
00:1f:d3:8d:b4:03:d5:4d:5b:f2:65:dd:da:86:37:5c:af:51:
22:c2:af:12:49:c4:12:3b:8b:33:83:6f:a8:01:12:55:0f:aa:
09:34:74:23:d3:9f:5a:16:88:09:b2:1e:ff:9f:79:94:c8:75:
8c:3e:91:63:8c:43:62:f0:e4:84:77:d3:41:16:39:cd:7b:b4:
82:6c:72:fe:ea:99:23:31:83:81:d7:1b:28:e1:9c:80:68:b5:
a9:89:97:c0:6f:dd:d8:d9:5d:5c:fa:6c:7f:11:c3:84:27:ed:
17:3d:37:9d:5f:e3:99:ad:f1:29:f6:f5:8c:50:ba:ec:ad:08:
58:df:aa:e0:98:b4:00:90:5c:a7:63:d1:15:85:8f:fd:ba:6a:
71:aa:68:a5:8d:11:af:d3:0b:80:ee:e4:f4:e1:48:5c:bd:b8:
a7:1b:61:b0:fb:67:99:57:e2:7e:cd:75:35:62:53:9e:5e:fd:
92:ee:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:43 2025 by rpki-client