Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: F7SpZvRsI4eaxJVy1x6vNxN9LkcwfuYDeKhfG7gfDQI=
Subject key identifier: 3A:99:9A:37:28:EB:31:FB:B3:A6:6B:F7:E0:51:CA:D0:1C:D7:B9:4B
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 01960E3282BFA1DC83B60DD5EA6966984CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 041C
Signing time: Mon 07 Apr 2025 03:01:53 +0000
Manifest this update: Mon 07 Apr 2025 03:01:53 +0000
Manifest next update: Tue 08 Apr 2025 03:01:53 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: GWy0ji8j2TNhvB2Cddi2YitrI5u4QgD8mibzT/+j/Q8=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:32:82:bf:a1:dc:83:b6:0d:d5:ea:69:66:98:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Apr 7 03:01:53 2025 GMT
Not After : Apr 8 03:01:53 2025 GMT
Subject: CN=3a999a3728eb31fbb3a66bf7e051cad01cd7b94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:2c:bd:93:55:7d:9e:52:4d:8f:ba:6e:42:
3d:2b:22:5f:65:d6:c6:61:a8:8c:d8:53:4b:1c:ba:
78:0a:86:f0:8e:ab:8f:63:f3:b4:90:60:a5:6d:46:
5b:18:2d:38:8c:f8:1a:ab:32:1b:ad:21:0c:27:c4:
2e:b7:c6:25:a7:50:1f:71:99:db:14:ed:ed:81:a1:
2e:4f:5b:9b:6b:2c:bf:53:f5:29:1a:1c:59:95:43:
1d:d5:15:36:17:4c:e8:43:fc:57:76:bf:53:a6:41:
8e:60:50:59:36:ac:24:18:90:da:2b:21:3a:06:65:
10:f8:79:41:f3:9f:f3:cb:60:9b:9d:7d:26:a4:d9:
4d:50:c8:23:c9:4e:f8:3f:df:4d:9d:a8:d6:33:ac:
94:96:db:d6:c0:9f:a2:de:9a:c9:ae:55:54:f9:83:
a6:72:5a:be:5d:18:9f:43:b3:b5:56:d1:52:ea:96:
19:68:6b:0d:9c:ef:99:0c:28:0b:5a:22:bb:cd:af:
3c:80:36:40:c0:f3:86:ba:a1:97:eb:55:22:84:a4:
ea:45:0f:24:85:ba:6c:b3:75:28:dc:4a:99:7b:b4:
65:67:b3:a4:08:25:51:d1:57:e9:7b:8d:af:82:26:
55:89:bf:25:1d:4f:6d:70:e0:34:19:03:24:9a:87:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:9A:37:28:EB:31:FB:B3:A6:6B:F7:E0:51:CA:D0:1C:D7:B9:4B
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b2:5f:43:85:58:71:56:2c:2e:a8:b3:97:5f:70:5c:16:e4:
5e:5b:38:d5:d9:50:62:dd:c0:6d:b7:be:3d:a1:17:41:46:ab:
99:2e:d1:67:02:8b:e1:d2:8f:cb:7a:ef:98:79:72:a2:08:6f:
ba:8a:d2:37:81:07:91:24:e9:72:f6:08:14:ba:f0:90:73:62:
a2:ff:1c:35:ca:ed:4a:5d:e6:c7:2a:31:c3:1c:33:fd:7f:a4:
5b:bb:8d:af:b1:8a:d2:b3:a0:3d:34:94:6a:dd:f2:4d:5e:5a:
f7:a9:f0:14:65:e0:ae:33:5b:22:7f:08:a9:0f:8b:8b:af:c1:
ed:e0:20:83:df:24:df:16:6d:5f:29:cf:69:0c:62:62:7a:bf:
76:2a:5a:93:b1:d9:f7:33:22:8e:42:9a:6d:53:59:e2:bf:33:
d8:4a:17:7b:8f:09:ca:d2:91:ee:13:82:43:d8:b6:0f:6d:fe:
e9:cf:e0:0d:da:c5:0e:73:0e:f0:a9:57:b6:ea:26:7d:ba:e6:
77:9c:d3:cd:33:53:4f:00:43:5b:61:36:b0:a1:de:7d:e9:3c:
0e:53:94:b6:af:ed:9e:de:62:18:98:15:a2:46:f7:78:a8:4b:
66:6c:8e:19:4d:2b:c6:62:8c:b0:5c:06:86:56:01:61:95:8c:
71:3a:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:30 2025 by rpki-client