Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: x6yE7p1Q1IVtovZTzKX5zIXju/smis8nINqilW6aoD0=
Subject key identifier: DC:B0:03:87:ED:E6:ED:E4:96:9B:71:21:E5:5D:D0:0E:EE:AA:17:80
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 01965236A675F98D9FDAFF0A2DB70CA307F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 1434
Signing time: Sun 20 Apr 2025 08:00:35 +0000
Manifest this update: Sun 20 Apr 2025 08:00:35 +0000
Manifest next update: Mon 21 Apr 2025 08:00:35 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: 59NkaE1gRidwSpUt6tuz0SYl9ZW4wfELBbOPaE0dy2o=)
2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:a6:75:f9:8d:9f:da:ff:0a:2d:b7:0c:a3:07:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Apr 20 08:00:35 2025 GMT
Not After : Apr 21 08:00:35 2025 GMT
Subject: CN=dcb00387ede6ede4969b7121e55dd00eeeaa1780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:3b:d0:95:e4:81:84:8e:76:44:9d:db:b0:
91:57:60:83:68:b0:20:ea:4c:7e:1b:c0:7b:34:6e:
74:7e:63:f9:41:d3:b7:0f:aa:5c:0b:58:e4:b6:d7:
ca:88:e3:24:54:eb:35:27:57:5f:5c:72:ba:5b:c3:
a4:7e:b4:4e:3f:0f:24:82:07:bc:31:db:e9:aa:37:
84:ed:0e:08:5e:47:4c:64:34:1c:99:65:4b:92:ca:
a9:21:84:72:5d:8b:b6:c4:35:c0:e8:c0:70:17:8e:
37:21:e3:e7:17:59:17:a5:0a:9b:f7:ff:5c:f4:3d:
4c:62:a9:29:d9:88:88:22:c2:e3:69:6f:e4:ee:75:
65:83:6b:1b:2a:03:57:0f:9f:9a:69:47:1d:64:ff:
30:04:10:d1:da:b6:cd:7e:82:d7:d6:9c:be:f5:87:
ba:4d:89:a4:a5:bd:d1:32:ce:d9:4c:ce:26:d7:0e:
ff:43:13:21:79:36:d6:9d:ad:13:79:63:8b:46:9a:
fe:5d:5c:d8:c5:19:4e:16:7c:8a:fc:54:16:f5:ee:
f5:b4:8b:33:1d:55:7b:af:d8:5a:63:0e:6d:df:eb:
c7:0f:1d:13:81:e0:37:f7:a7:f9:11:46:5a:d9:56:
18:82:f8:62:48:cb:77:5b:75:82:6b:b6:98:d0:c3:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:03:87:ED:E6:ED:E4:96:9B:71:21:E5:5D:D0:0E:EE:AA:17:80
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:5d:6d:07:64:2d:d7:8e:4d:e9:be:69:7e:af:76:b7:60:
d4:b4:8b:e0:4e:94:54:1f:52:1c:0b:6d:f7:b5:ec:e9:3a:00:
71:6c:b9:58:5b:e5:39:56:7b:41:0c:b4:7f:58:82:3c:6b:44:
8e:da:08:34:7c:e6:e4:0b:62:ab:8b:09:22:58:36:5c:f7:7e:
98:4f:bc:d9:3d:68:17:f2:e6:96:ea:06:ca:4c:8c:1c:07:58:
bb:dd:c8:47:84:71:d3:1a:b3:85:ac:cb:4a:ae:66:7c:b8:02:
91:ab:7b:a5:1b:17:68:90:1e:96:81:91:50:6d:fb:a2:51:43:
20:f6:6a:05:06:a5:24:3d:e7:41:0a:5d:6d:a3:b1:20:8e:1b:
c0:2b:78:b3:5e:0e:32:f8:1a:57:65:65:11:c4:44:04:f5:e1:
12:0a:75:a8:fd:22:fd:2c:b9:6f:c2:03:d6:63:6d:5c:d8:ae:
55:a4:f5:3c:28:79:0c:8f:30:0e:75:a8:35:53:ad:f7:ee:97:
38:81:e8:68:26:59:47:6e:8f:95:06:34:23:fe:71:6e:f9:3b:
5f:66:86:c3:5c:b7:c4:6d:8e:6b:af:76:03:a2:45:c1:e9:57:
c7:94:ae:d0:94:2a:c8:0d:b5:26:c1:5a:ed:c0:d2:f0:94:c4:
01:83:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:11 2025 by rpki-client