Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier: DWOcLvA6wmNFuBtSXiADM1VCaYxBg40kOEtDUCIt3HU=
Subject key identifier: 01:AC:3A:54:2D:A7:63:BC:E0:40:79:C9:46:8E:20:87:A4:42:E3:42
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 019656EF2A3B480B84830024D463D9F83FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number: 17
Signing time: Mon 21 Apr 2025 06:00:36 +0000
Manifest this update: Mon 21 Apr 2025 06:00:36 +0000
Manifest next update: Tue 22 Apr 2025 06:00:36 +0000
Files and hashes: 1: 1-of8pnTOP0J8yCsHZmocQfT7mIM.roa (hash: 0Lq0vU+tQx9q/SkpzGWQvm0P7tr0nnJgKO8aL6LRtlo=)
2: 1MA9viEbnkqns-jv1uGgSDf_hss.roa (hash: B67bul7AJskFHt7w3WE7vDo8ygcPvZu9TvB+6EzuGlE=)
3: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: llgiUwGtgOWQbyJ3Zm/wU1kWIPxwghR6xtqQgxCuL9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:2a:3b:48:0b:84:83:00:24:d4:63:d9:f8:3f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Apr 21 06:00:36 2025 GMT
Not After : Apr 22 06:00:36 2025 GMT
Subject: CN=01ac3a542da763bce04079c9468e2087a442e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:27:86:8b:18:5b:e7:72:e3:8a:3e:48:f7:
38:19:c9:1c:e2:77:a3:37:3d:87:a0:c1:04:22:50:
70:1e:b1:6b:d5:e7:e1:3a:ba:c0:38:0e:e0:06:c2:
98:d3:41:d4:8e:ec:f3:19:ba:1d:5b:1c:c1:61:df:
a2:b9:11:e1:ce:9c:23:8f:41:50:cc:21:05:39:b3:
61:72:3a:7c:cf:bc:17:19:5b:c0:74:16:27:b0:5b:
c1:f3:4c:f6:13:40:4e:0b:47:07:4a:84:ca:28:c1:
1e:af:74:56:0e:7f:8f:90:11:56:ca:c1:0b:64:5a:
84:4d:f5:13:59:ef:95:1d:fd:b7:30:7b:24:88:c8:
dc:47:a3:a7:84:f3:b9:bf:bd:ee:58:bc:96:7b:58:
49:80:a1:95:39:aa:2f:95:f2:c0:90:ba:9b:98:49:
6d:38:1d:28:f5:dc:71:d5:bb:9b:0f:a1:89:81:1e:
e1:21:48:df:00:0e:b2:1d:b6:53:f9:3e:bd:3f:57:
46:7b:41:6f:47:09:4d:bb:32:ce:b7:d0:fb:8e:1b:
92:ac:58:f5:1b:30:c2:e2:29:ee:65:78:b2:a5:2e:
9d:e0:c7:a4:9d:36:27:69:aa:5d:5b:86:60:2f:10:
3f:64:a6:3f:b5:92:6e:22:eb:92:de:78:69:a2:d7:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AC:3A:54:2D:A7:63:BC:E0:40:79:C9:46:8E:20:87:A4:42:E3:42
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:66:3f:86:92:3a:72:5b:c3:9f:87:46:04:6a:68:75:48:de:
7d:53:ee:be:75:bc:fb:5a:7c:ab:00:7f:81:53:d9:50:56:41:
77:20:e6:6e:b6:de:d2:b9:b2:ec:49:b2:b8:13:f7:cf:1c:91:
da:01:a3:f9:6c:2f:e7:5d:ab:5e:15:d0:b5:af:9d:7d:9e:1c:
10:4c:d0:f5:ce:15:0b:df:b8:24:d4:4a:00:7b:b8:c0:cf:4d:
81:45:75:15:ed:ab:84:25:41:14:02:cd:df:4b:15:22:c1:4d:
35:5c:7a:bb:33:8b:f5:03:17:89:8c:2c:50:f2:68:b2:ae:85:
ce:9e:15:08:b4:f4:a6:23:30:0e:60:9e:95:0a:48:09:a0:74:
c6:b5:f6:b5:46:25:d2:32:08:01:05:e9:16:ec:6f:ca:0b:2f:
24:59:aa:a6:ee:2f:4a:58:18:04:e3:42:4a:53:15:46:6a:f8:
03:9d:1f:77:16:47:28:0b:7a:02:1f:ba:37:11:d6:fb:88:26:
d1:fd:18:96:15:64:6e:9a:81:37:58:9e:75:4a:08:1b:6e:36:
61:07:db:b4:eb:6b:f4:63:62:a9:3f:a7:63:df:f0:01:cb:fe:
c0:41:77:84:2c:e3:43:48:43:49:68:05:8c:38:3e:f5:1b:51:
28:03:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:05 2025 by rpki-client