Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: gEDxkmRqxbAuzeMo0rI8dZ4geBDWG6KJ3Mw9s4Ht1tw=
Subject key identifier: 6F:8E:B3:FF:3F:C3:A3:50:16:4E:41:ED:B3:D2:F0:61:6F:DE:09:87
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 01958C611917C01B3000F5326142290D1A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 149A
Signing time: Wed 12 Mar 2025 22:02:08 +0000
Manifest this update: Wed 12 Mar 2025 22:02:08 +0000
Manifest next update: Thu 13 Mar 2025 22:02:08 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: qLcBLHCI6zdyjTtH/+v7aHcHk6B60YFUQE6BNs55BPg=)
2: u5o61NHYqb9zvWGtzBZuF5M5RPI.roa (hash: QUfZge2NwNEyq5T77dMAINVgz9WIkvB5rSQcXwRMvkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:19:17:c0:1b:30:00:f5:32:61:42:29:0d:1a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Mar 12 22:02:08 2025 GMT
Not After : Mar 13 22:02:08 2025 GMT
Subject: CN=6f8eb3ff3fc3a350164e41edb3d2f0616fde0987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:7a:d9:ff:fc:21:6b:f8:31:88:5c:22:35:
27:5c:52:99:a3:09:1a:d2:63:15:69:f1:96:de:4b:
78:ab:91:2b:a8:1d:50:2c:17:9f:5f:5e:fd:52:78:
9d:ef:51:2e:37:ed:16:55:27:c1:c9:38:7e:76:17:
40:02:c7:b1:2d:80:a8:93:76:39:35:40:c6:89:da:
9c:c2:69:e6:95:5f:4f:44:8c:76:6e:92:72:7f:d5:
87:40:a5:25:5c:79:a7:eb:fb:07:aa:9c:f3:fa:03:
6f:7e:da:fc:30:e2:a8:ee:da:a8:46:b6:8a:9f:98:
7f:66:7b:c4:a7:cc:08:b7:5b:9b:bc:fd:6d:d6:fa:
3a:5a:1a:51:d2:5c:56:a3:26:40:81:47:33:49:cc:
a0:54:87:77:e2:39:5e:34:b9:43:8a:ac:14:87:c0:
01:d2:1d:a5:ee:9d:04:f8:4d:9a:aa:e8:64:ab:18:
5a:2f:96:5a:57:93:37:6c:d0:8a:ff:18:89:dc:2e:
56:2e:61:91:68:99:e2:7e:93:0a:f0:75:a4:73:9b:
6d:48:b3:b2:c7:c1:69:61:d9:9a:47:98:51:6c:45:
7a:1b:e9:91:c1:37:f3:6e:58:ed:12:8a:28:10:89:
3d:c1:64:d0:2e:b3:18:1a:11:08:98:f6:e6:61:06:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:B3:FF:3F:C3:A3:50:16:4E:41:ED:B3:D2:F0:61:6F:DE:09:87
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:87:8e:28:38:bd:ca:12:9a:7f:08:2e:2c:e7:53:9d:c6:6c:
49:88:7e:f2:3a:76:dc:d4:c2:8f:c6:bd:e5:f2:67:c2:56:c3:
5c:3f:89:af:a9:21:bd:46:b0:f5:bf:fb:3b:50:d7:8a:20:d6:
1a:c6:2e:8c:b4:35:6f:c2:54:94:de:0e:87:4a:61:5b:d4:c9:
d2:d3:67:8b:81:d4:92:c4:0c:93:24:1c:30:4a:94:ad:14:ef:
8e:1b:90:39:b6:78:b6:53:52:b8:cd:1c:46:0e:92:10:0c:19:
39:4b:15:e6:4c:ed:04:a8:97:5b:2e:b4:22:19:a2:eb:03:04:
e7:61:9a:df:1d:72:07:0a:5c:28:08:e8:0a:f8:57:b0:53:d5:
59:75:f3:d2:7d:9e:4a:80:05:db:61:ad:83:96:cc:1e:a4:b5:
4a:63:d5:c1:91:38:c7:2d:71:d1:0d:b0:22:02:cb:5f:84:7d:
97:ed:cd:fb:8c:4c:ce:1c:e2:9c:83:d7:0d:79:db:12:66:6b:
ed:6c:d6:18:70:90:fa:37:a5:90:21:09:0f:c5:20:55:94:d2:
24:0b:9b:fe:ca:85:5e:ef:a4:1a:77:f6:29:c4:e6:20:38:39:
2c:db:c1:44:31:66:3e:fa:ee:76:ca:a5:e3:2d:19:45:6c:af:
3c:1e:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:42 2025 by rpki-client