Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: NfS9WRrZIEqHKWUvNjBLKZYZhe2dOg13gOfMOMLb7Xw=
Subject key identifier: A3:FB:33:CC:E0:BE:BC:B7:09:ED:1D:F2:03:58:C7:45:45:AF:74:8E
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 019611A09854799AC1804A275E273992D140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 14DE
Signing time: Mon 07 Apr 2025 19:00:59 +0000
Manifest this update: Mon 07 Apr 2025 19:00:59 +0000
Manifest next update: Tue 08 Apr 2025 19:00:59 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: rkGNVJeh5ajVaecn8s5HVWUPumTuFVAZCx9GO6s8JdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:98:54:79:9a:c1:80:4a:27:5e:27:39:92:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Apr 7 19:00:59 2025 GMT
Not After : Apr 8 19:00:59 2025 GMT
Subject: CN=a3fb33cce0bebcb709ed1df20358c74545af748e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:11:88:4d:ce:73:e4:7b:fe:d3:7c:68:4a:
a4:eb:94:d3:a4:58:ec:23:ea:a1:51:f5:a5:a7:f4:
fb:51:69:c7:df:de:4c:46:6a:ca:dc:98:fe:86:10:
5e:11:6e:3c:36:db:b6:b0:15:5e:bb:c6:91:bb:cc:
27:56:3e:fd:e9:6f:10:c4:4b:ba:0e:c1:e9:28:c1:
0b:1f:46:e1:a0:1f:67:c5:d6:15:a0:03:17:ea:fb:
24:60:21:e3:e7:5a:bf:ab:4e:38:e9:21:6b:9b:4a:
13:bf:ad:80:6a:29:02:02:86:40:9e:17:3a:8b:bf:
7b:d0:f2:0e:e5:73:15:7e:41:2d:50:dd:12:ee:26:
e0:af:96:2f:42:03:6a:ed:70:79:ec:1f:4e:c8:4c:
2f:db:df:c1:bc:df:d0:72:7d:96:ee:59:9f:e5:02:
e0:43:02:94:45:10:c0:d1:74:49:e0:bd:3c:cc:47:
11:a3:65:b1:42:d6:17:52:b1:e2:a1:0c:2a:24:18:
44:e7:26:4b:9a:6c:96:b7:f7:14:63:8c:cb:25:b1:
2a:1d:03:25:1f:75:1e:95:ac:61:ab:40:70:a2:17:
9f:45:72:03:59:f4:1e:f7:d3:cf:80:af:63:89:43:
09:06:42:ee:17:ae:a9:40:8f:9e:a9:cc:d3:c5:82:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:33:CC:E0:BE:BC:B7:09:ED:1D:F2:03:58:C7:45:45:AF:74:8E
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0f:f3:eb:98:db:fc:84:3d:ea:55:bd:de:aa:6a:e6:89:12:
5b:f9:65:7a:56:c3:b1:ad:5f:10:0b:11:49:7e:43:ad:39:47:
e3:6c:3f:cd:91:af:17:f3:bd:3a:c7:a1:0a:6b:16:a4:4e:d5:
c6:00:a6:8e:0c:9b:c2:70:be:13:38:b9:19:fc:e4:02:cb:27:
d1:3c:1e:21:fd:72:9e:87:ce:8e:e2:af:3b:ec:e1:69:d0:a4:
4f:4c:c2:37:7d:01:5a:44:be:e4:55:2e:21:42:6d:f1:2c:77:
34:ee:e6:95:57:df:65:a9:09:b0:91:6d:ed:23:1f:7c:b2:13:
85:64:4b:3e:09:38:de:8b:71:82:82:7d:9f:d1:43:d3:a4:e9:
d3:26:6f:e7:34:db:00:43:a8:f5:eb:c7:cb:3d:dc:fa:e1:c9:
d5:6f:9e:6b:08:84:e0:8a:6c:ce:41:2f:68:7f:8a:37:7f:06:
0d:4a:f9:fa:62:ec:07:71:cb:72:35:ec:58:81:7a:bb:49:29:
23:f8:f6:05:64:6f:20:18:92:b8:0b:bd:94:f7:dc:78:85:5c:
f3:76:38:8f:43:71:bd:3b:c4:9d:92:5a:50:45:db:04:16:b0:
74:78:d3:6b:00:2f:b6:7d:6f:a7:89:8d:dc:59:2c:c8:2e:9f:
78:90:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:35:12 2025 by rpki-client