Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: KgxQyR/4wnOLpeSkxGrFOkau7b0xgFpp4oU+jCjxL+c=
Subject key identifier: F3:D6:D3:91:CD:CC:9F:A4:D3:08:4F:B5:F1:2A:1C:FE:19:91:B1:0B
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 019647452FE6DA48D145AE82090226D187DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0C31
Signing time: Fri 18 Apr 2025 05:00:38 +0000
Manifest this update: Fri 18 Apr 2025 05:00:38 +0000
Manifest next update: Sat 19 Apr 2025 05:00:38 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: 0IPlE+ddYGZ4oSYMB41Gp6/7uJKrmDPqQ+CW6jZ1N1E=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:45:2f:e6:da:48:d1:45:ae:82:09:02:26:d1:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Apr 18 05:00:38 2025 GMT
Not After : Apr 19 05:00:38 2025 GMT
Subject: CN=f3d6d391cdcc9fa4d3084fb5f12a1cfe1991b10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:89:0d:b4:1c:df:60:ea:ad:08:d6:11:ad:
4c:f7:43:ef:b3:d4:40:96:96:c2:e9:20:b3:7a:eb:
9e:3b:64:09:f7:b1:62:78:76:74:68:75:81:94:06:
79:d6:be:33:d4:70:9d:a9:0a:b5:c0:6d:db:ff:c5:
ce:60:e1:cf:53:66:62:6b:ef:f2:6f:5f:48:29:4b:
f1:60:1b:23:82:5b:11:b9:78:a9:27:3e:36:18:43:
dd:0b:0e:65:48:44:8f:80:d9:ac:d5:ea:e3:96:bb:
82:cf:e6:92:36:b7:03:8a:7f:c6:cd:da:53:7e:07:
81:c9:d8:9c:58:0d:38:b8:48:8b:29:42:83:3e:54:
6d:b1:1f:0b:3a:59:e6:31:46:61:c8:96:8e:8e:b0:
57:a8:15:5f:3e:a5:1b:fd:41:98:e6:b4:04:79:97:
cb:b0:8c:ee:47:6a:a7:7e:f9:dc:2e:e1:f5:7d:b8:
02:85:2f:45:29:a9:f5:13:c0:54:aa:6c:b6:e4:1d:
c1:60:b8:e6:37:16:ca:ae:d2:79:ea:15:9a:b2:cd:
bd:5e:d9:dc:d1:c9:a7:21:d6:f5:20:33:79:b3:5e:
4a:ad:fc:fa:64:25:c5:a2:f2:fe:c5:38:0e:37:6c:
b9:46:89:69:4d:2c:0c:40:2c:fe:6d:85:06:14:de:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:D3:91:CD:CC:9F:A4:D3:08:4F:B5:F1:2A:1C:FE:19:91:B1:0B
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2b:51:a6:80:b4:cd:ed:ee:84:6d:d4:3f:c4:3e:6a:a0:37:
ba:e3:68:7c:59:e1:aa:d8:ee:0f:65:cc:e7:fe:96:07:5c:36:
62:12:95:4c:66:ca:87:6f:04:d6:9f:58:d8:b2:9f:2a:62:a1:
33:60:44:25:20:9f:eb:5a:48:d5:69:31:98:5b:ec:34:33:6f:
4b:77:d4:39:96:5a:4d:b9:92:55:5b:76:4f:91:79:1b:43:a1:
b1:1f:30:a2:b1:a5:3b:4f:e4:75:20:6e:77:36:12:8e:dc:b7:
7e:5e:38:f1:6f:5b:1d:5e:b7:08:bb:2a:68:36:5e:1f:3c:9f:
6b:2e:d8:b5:27:65:7d:25:01:00:d1:ce:12:42:c5:2f:86:51:
91:ff:0c:45:5e:7f:f3:a1:31:89:10:fb:26:f9:29:a1:15:b6:
03:22:e6:17:5e:85:a7:a5:ef:f7:60:fc:61:7b:26:54:5e:ee:
d8:f9:6b:09:94:fc:03:53:c5:4c:05:d5:34:73:e7:0d:8c:c3:
de:41:37:7e:8b:df:7d:83:52:76:8e:25:73:26:f5:97:5c:7b:
62:98:62:7c:77:75:a1:5f:00:32:b4:c9:6c:12:a0:9a:9b:d4:
91:8e:0f:93:cb:49:53:1a:ea:92:37:1f:fa:17:ea:b9:77:65:
f7:64:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:38:36 2025 by rpki-client