
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier: SZgut6z3tkkrpdlrQBSvpUUCHjgkNb+TNlXpb4j4l4M=
Subject key identifier: 3F:01:25:38:0D:EC:84:0A:51:C2:1E:A7:F2:66:5C:59:3E:30:0B:82
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 0196526D990393970BE0C094D5A7721F7245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 09:00:36 +0000
Manifest this update: Sun 20 Apr 2025 09:00:36 +0000
Manifest next update: Mon 21 Apr 2025 09:00:36 +0000
Files and hashes: 1: CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa (hash: wxQvo+G+ZM9xHSY4rXReEADz55sy+G82AZg77QhhlvE=)
2: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: zB/TYhoReHHQd4HyQO/b/ZSr3SqOmIJuIgHSfygLJyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:99:03:93:97:0b:e0:c0:94:d5:a7:72:1f:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Apr 20 09:00:36 2025 GMT
Not After : Apr 21 09:00:36 2025 GMT
Subject: CN=3f0125380dec840a51c21ea7f2665c593e300b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:dc:93:5a:e1:b5:91:2c:f9:9b:da:8c:2e:
63:e2:00:3a:ba:d3:d9:87:38:31:27:11:1b:51:e1:
98:04:45:30:55:13:23:cf:74:ef:e2:75:13:fa:4c:
1e:07:4f:d3:29:33:42:7b:a4:4b:20:f4:1d:65:2d:
5f:23:79:3c:de:7d:cd:aa:b3:23:6d:ae:ed:34:b3:
13:ba:eb:2f:51:b3:2f:18:a5:60:e9:48:dd:f8:6f:
48:04:95:4c:d0:99:cf:51:c7:fb:b8:ce:9a:64:f4:
84:b0:28:dc:4a:49:36:62:84:2b:2c:13:8a:cd:ab:
a3:e5:27:3e:20:6a:87:17:49:86:e7:74:b0:bc:eb:
60:6b:3a:08:07:ca:da:f2:0d:94:32:9f:e7:cd:0e:
6c:a7:c7:fc:15:52:ac:ca:c8:d3:89:3f:bd:15:05:
80:8e:a9:55:9b:d3:82:13:0e:07:5c:1a:aa:60:8a:
f1:41:37:d1:29:99:6c:83:5e:4d:8a:8a:ee:56:d6:
02:79:9b:f7:f5:01:bb:9e:3e:cf:cb:61:ef:d2:5b:
4f:86:f0:ca:d7:48:16:bc:c6:a9:b2:45:5b:e6:19:
b5:4b:c6:8d:71:5b:0e:c7:11:63:84:61:29:4c:2a:
fa:24:90:a8:aa:cb:63:87:60:7b:5a:aa:c5:2b:34:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:25:38:0D:EC:84:0A:51:C2:1E:A7:F2:66:5C:59:3E:30:0B:82
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:16:25:a2:9f:1a:f3:f4:f3:b1:46:11:d5:ae:21:25:21:
b8:9f:4d:25:d0:8d:b5:35:ac:96:5b:95:2d:36:06:80:50:b5:
73:7e:61:e9:46:d7:b0:9b:82:8c:3f:83:c2:a1:65:bf:f2:6c:
4d:dd:e0:f6:6f:5b:72:d8:d3:d3:9a:e1:80:ec:16:3e:eb:d2:
1a:22:55:81:83:f4:c7:30:2b:52:48:70:64:a8:5a:d3:d5:7a:
41:0f:da:87:27:0b:ec:bc:f8:8e:9a:11:a8:e4:9d:da:1f:cc:
0a:2d:90:a9:e8:34:d5:c3:a6:e1:e8:4b:70:2a:9c:83:f4:a0:
00:93:bb:a2:ec:49:a1:fb:80:1e:09:91:e5:d0:d2:1f:3b:fb:
f3:c2:07:fc:f3:0e:e4:da:6a:43:ba:52:78:0b:71:a2:2e:67:
21:51:bb:fa:6a:62:77:d7:30:5e:a9:63:8a:61:73:ff:0c:d8:
22:45:37:e4:df:f0:b0:8d:76:24:a4:9f:0e:8f:e8:6b:ce:13:
8d:a6:83:81:f5:1e:4a:83:09:fe:a1:1a:6c:7b:35:50:ac:5c:
39:2c:aa:3d:99:83:e7:e2:81:13:9c:9f:5e:36:0e:93:4e:fe:
95:50:55:52:79:29:43:16:d1:7c:a0:9f:c8:d2:f5:e4:32:6a:
8d:cf:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:52 2025 by rpki-client