Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File: dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier: NJR3tMhUVo315et9SJP49VrzfZ2fnOl9OogXAyW8Hbk=
Subject key identifier: E6:A0:19:98:A5:A8:0E:C8:3E:D3:90:73:C2:1D:D9:E3:75:29:64:EB
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial: 01965CF16EF3FE8A531EFB0C16C56631A4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 10:00:48 +0000
Manifest this update: Tue 22 Apr 2025 10:00:48 +0000
Manifest next update: Wed 23 Apr 2025 10:00:48 +0000
Files and hashes: 1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: FAxhrTikvM8wr0lmwljVyNIVo8Jd+v8Idx9JVXIskI4=)
2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:6e:f3:fe:8a:53:1e:fb:0c:16:c5:66:31:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Validity
Not Before: Apr 22 10:00:48 2025 GMT
Not After : Apr 23 10:00:48 2025 GMT
Subject: CN=e6a01998a5a80ec83ed39073c21dd9e3752964eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:04:f9:7d:8d:ed:4d:a5:cb:af:2c:1f:54:
f3:fd:3a:d9:b4:c9:fb:89:8d:aa:9f:de:64:49:45:
73:df:79:cd:ad:49:35:5a:51:1c:43:e4:97:d7:a0:
8c:65:1a:c5:7c:bc:50:a1:0a:a7:d6:8f:c9:e5:5b:
7a:1b:2e:db:ef:ad:39:f1:93:38:1d:a5:54:62:74:
f7:ef:9b:cc:ee:42:97:2d:ba:cb:45:8a:df:75:11:
4b:70:e2:cf:35:c1:bf:52:91:10:ba:bf:59:7c:72:
8e:d0:4e:fe:dc:bf:fb:30:6e:ba:ff:67:ce:32:bf:
1d:c4:12:e2:5b:fc:18:2f:45:0a:39:8d:4c:19:16:
18:55:7d:00:d9:75:a1:4d:b8:71:d4:58:97:66:b2:
c5:05:4a:04:32:5f:bd:28:08:c0:23:9b:1f:7c:60:
3a:7c:94:ad:07:69:df:50:df:7b:a0:20:e5:b5:a0:
28:e1:63:ba:1c:9a:f8:03:94:cd:53:5a:18:99:e2:
e9:a8:12:a5:14:07:37:76:a6:e8:cd:ff:7c:37:0c:
53:40:0c:d4:9f:1b:22:8c:1f:25:cb:8d:39:26:dd:
bc:24:35:a2:d1:06:eb:e8:d8:83:87:a3:08:bf:9f:
56:94:b2:cb:9c:b9:d0:97:4a:32:72:cd:53:35:62:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A0:19:98:A5:A8:0E:C8:3E:D3:90:73:C2:1D:D9:E3:75:29:64:EB
X509v3 Authority Key Identifier:
keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:9c:b5:f7:a4:40:75:e4:70:22:83:94:8a:19:68:f8:21:
7b:ee:01:3a:38:b2:8b:d2:86:56:97:41:e3:70:fb:2c:7c:a3:
c5:e5:bd:f9:7a:4b:68:62:9c:26:e5:24:23:be:b6:70:de:64:
c2:51:f4:7a:78:5c:52:91:fc:30:82:54:4f:b9:1a:03:e2:dd:
6a:09:be:58:41:56:b8:2c:54:fb:ab:86:0d:68:d5:21:83:40:
67:9d:7d:be:45:60:26:25:7b:f1:d8:6c:97:e4:02:26:01:3a:
c4:e4:67:c7:cd:b4:8c:5a:dc:01:a4:a1:48:ac:91:0c:5b:93:
87:e6:9d:d8:c9:f2:41:7c:3c:08:c7:c3:0b:dd:2c:49:d6:38:
63:6e:3f:ce:46:db:08:3a:83:8a:28:ed:fc:01:e9:cf:31:27:
a7:75:c0:6a:f2:f7:f6:3c:36:57:53:17:0e:6c:35:f8:2a:59:
f4:ca:b5:db:43:f9:10:a4:b6:cc:b9:f3:89:b5:81:c5:d4:5e:
e3:ca:1f:14:a0:8d:d0:ba:e7:f9:62:0f:85:aa:91:50:f8:ce:
f6:24:1e:40:18:87:18:35:ed:ba:be:bd:65:aa:f3:76:54:ce:
a8:2c:e0:c5:18:54:e7:b4:6e:e0:91:4e:92:15:27:a3:58:71:
68:c8:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:53:00 2025 by rpki-client