
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
File: 0vcAvspCZT5kq0NaLwpPPZpQFLA.mft (raw, json)
Hash identifier: onbp0PG4SfiXKfDByexArWNYTqiQDn0yYtFS/ZvPMAA=
Subject key identifier: FA:9D:73:42:BA:E8:5F:61:E2:15:09:FF:00:91:E7:C2:A4:5E:15:F1
Authority key identifier: D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
Certificate issuer: /CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Certificate serial: 01974C6A03C391012F53F930190FBBB67AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 22:01:45 +0000
Manifest this update: Sat 07 Jun 2025 22:01:45 +0000
Manifest next update: Sun 08 Jun 2025 22:01:45 +0000
Files and hashes: 1: 0vcAvspCZT5kq0NaLwpPPZpQFLA.crl (hash: tiojftien2zozy6CcIxH/53BDlNch3t8mVQrwNsP3VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:6a:03:c3:91:01:2f:53:f9:30:19:0f:bb:b6:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Validity
Not Before: Jun 7 22:01:45 2025 GMT
Not After : Jun 8 22:01:45 2025 GMT
Subject: CN=fa9d7342bae85f61e21509ff0091e7c2a45e15f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:4b:a7:44:a1:d6:35:7c:6b:f2:7e:42:fb:
b4:36:11:74:ab:8a:5f:2b:bc:ee:3e:81:04:04:46:
ae:5c:d8:be:a2:d4:95:bc:a7:ea:f3:6a:77:21:57:
a0:de:5f:7e:74:9c:2c:4c:91:f3:9b:05:9e:62:5a:
e9:a7:40:03:82:91:c9:3a:92:2c:cc:99:61:d8:00:
dd:26:37:26:07:54:de:ab:5c:51:84:7d:41:a2:62:
a6:0e:25:8a:70:9f:21:bc:5f:d0:52:0f:4c:00:9f:
93:bd:fd:cd:2c:e0:98:be:35:64:48:08:68:1f:77:
bb:19:cf:15:d4:e8:1e:aa:0b:6c:3a:4b:47:da:ca:
72:1c:98:07:b8:5b:e8:1d:a2:e2:34:65:db:ce:63:
56:f0:1f:b4:ab:1e:ce:1c:cb:5e:29:d1:d9:4e:fc:
a0:5f:f8:e8:1c:b0:8e:43:6f:77:46:1f:e4:ec:6b:
ac:65:0e:41:ab:a4:95:e2:db:e3:c9:8f:d2:87:96:
dd:95:e9:43:37:23:51:86:23:a1:82:1e:37:f2:8e:
ea:80:be:82:c5:be:cb:99:14:b0:21:ef:16:6d:bf:
06:28:38:80:0a:96:ec:34:39:6e:e5:34:fc:19:38:
88:19:53:bc:69:f0:c2:89:66:74:8f:6b:3e:fb:48:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:73:42:BA:E8:5F:61:E2:15:09:FF:00:91:E7:C2:A4:5E:15:F1
X509v3 Authority Key Identifier:
keyid:D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:dd:3e:16:c1:c7:99:3f:ad:e4:d0:1f:76:22:3b:46:7d:
86:d0:e8:db:25:01:a1:83:68:54:5b:7e:16:b7:42:40:f6:a4:
4f:49:14:ee:9b:f7:1e:5a:99:e1:91:a8:a8:e7:30:ff:13:c0:
fc:18:42:91:4e:e9:26:01:fc:34:a0:9d:75:49:65:1b:9e:5d:
7b:ac:1b:7e:b9:f4:62:3c:7b:2f:5d:dc:2a:a8:fc:aa:fa:2a:
a3:42:28:88:10:f0:6e:1b:68:9d:21:67:78:8e:2a:59:7e:6d:
ef:78:51:9a:1a:f9:5d:22:d2:14:58:00:d3:8c:49:43:a1:42:
07:6b:48:0d:88:ff:0f:31:c1:ac:ae:4f:77:69:b6:da:fd:5b:
31:7d:9f:c5:a6:59:dd:ce:92:55:a3:5e:7d:b3:65:92:21:33:
54:1e:c5:0e:39:88:41:b2:83:9b:28:0c:03:a4:37:10:50:fb:
65:2a:b2:11:9f:7a:5d:40:ae:ea:3c:29:63:e8:c3:d5:65:b6:
52:d7:5b:42:02:1c:a0:b4:ec:88:71:23:9b:e7:94:59:64:a9:
de:b8:74:3e:91:c6:20:22:d6:c6:96:9d:6c:8a:b6:73:5a:4b:
9b:d6:b9:b9:76:df:16:d5:fd:fc:aa:bc:46:6a:69:8b:95:f0:
26:0f:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:13:22 2025 by rpki-client