Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: dJaWos6ADzvhmZKo4uwql77DPSLtqhIG0uKwHq/OXoA=
Subject key identifier: 17:24:30:41:FB:5E:2C:58:27:FE:C4:55:C7:F2:7C:4C:0F:0A:B8:AE
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019657943FAF9B67CD010A3E0B836A7669DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 09:00:55 +0000
Manifest this update: Mon 21 Apr 2025 09:00:55 +0000
Manifest next update: Tue 22 Apr 2025 09:00:55 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: g+XvXWX5NS/YSrIvzDYMnDfiLlP9Bek0DKDXk8QZzys=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:3f:af:9b:67:cd:01:0a:3e:0b:83:6a:76:69:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Apr 21 09:00:55 2025 GMT
Not After : Apr 22 09:00:55 2025 GMT
Subject: CN=17243041fb5e2c5827fec455c7f27c4c0f0ab8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:8f:3c:c3:bf:83:c8:15:48:6b:1c:cd:7a:
69:a9:ad:20:d8:05:be:0a:e0:14:e7:3a:10:2f:ac:
6b:9d:5b:58:d4:2f:d6:54:4d:80:16:a3:01:4b:36:
9d:2d:91:d4:64:77:6c:7d:20:3b:f9:c0:9a:aa:cd:
99:8d:3f:81:5a:1f:af:3e:88:8a:85:3b:5e:7f:ce:
39:71:50:e6:88:e8:e4:20:69:88:f9:5c:4c:8e:bb:
49:98:5c:17:35:bb:d0:94:15:e9:20:a2:a0:fe:72:
0d:ef:c3:6c:05:9b:a7:2b:c6:e5:3e:c8:02:25:c5:
19:2e:14:25:0e:ec:b3:03:e5:6f:08:b0:6e:24:b5:
00:92:e8:93:fb:91:dc:ee:64:34:6e:3d:cb:8f:42:
1e:94:88:70:57:3c:8e:38:ab:00:04:9c:c3:4a:1d:
8a:e1:47:05:4b:92:96:b8:ae:09:a3:4b:1d:f7:2f:
98:c4:ee:7a:f6:f5:e4:6d:2d:49:fd:1d:f8:30:e8:
ba:2c:0d:d7:33:e1:e8:98:57:f6:41:56:98:02:43:
df:80:26:92:1c:17:0e:ad:e1:cb:74:ec:f0:8b:8f:
fc:98:ea:12:b4:3a:44:4b:3e:f0:aa:c8:76:ee:e7:
5b:80:31:c8:7a:5c:cb:fd:97:83:aa:9b:da:6b:bf:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:30:41:FB:5E:2C:58:27:FE:C4:55:C7:F2:7C:4C:0F:0A:B8:AE
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:18:5d:dc:63:85:27:bb:64:6e:89:c4:ba:16:85:e7:91:0a:
05:11:7a:66:96:2b:f1:2f:ad:11:df:2f:4c:df:18:43:da:21:
28:16:27:f3:90:8a:e7:d6:d5:50:75:a3:03:1f:cf:b2:4a:6d:
97:15:be:0d:7a:4a:c5:b7:0c:d6:5d:69:70:d9:bb:a0:af:38:
ef:bf:23:c5:f1:e0:94:b6:93:6e:d3:3f:b4:f3:86:df:c3:13:
af:7a:6c:45:16:94:df:da:44:af:f0:7f:3b:89:07:65:1c:d4:
56:90:3f:91:e8:05:86:07:15:fc:a8:7c:e0:a9:65:a4:9c:f6:
c4:59:97:87:1a:fb:99:e1:5e:62:f0:41:5c:62:95:81:de:d3:
05:e8:ad:e9:76:36:02:2a:96:37:12:8c:04:52:b9:bd:18:2c:
5a:8b:c9:9f:fd:79:f2:b8:dd:ea:20:83:e5:e0:0c:58:14:64:
b5:bb:4b:e8:76:70:94:b0:91:21:78:7b:7d:43:79:c2:e4:9e:
ec:01:d4:0f:36:54:5b:5c:c5:00:5a:ec:e4:66:4e:86:d4:f4:
9f:c5:f7:ec:6f:36:97:b5:2e:b1:d7:33:a8:95:e9:da:7b:d1:
a3:a2:b3:ae:1c:96:ba:60:84:17:95:6e:56:b9:05:6a:e8:74:
17:4d:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:38 2025 by rpki-client