Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File: Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier: xZ8CFcmdz8pa5aMEIVcQ5u36M9ufJnBeQhGuntJG+Z4=
Subject key identifier: AE:41:98:B4:9C:98:B0:8D:FE:5E:70:24:5B:04:03:9D:91:18:2A:04
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 0196575D0967C87DDC1F9B9024D6E09B5BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 08:00:37 +0000
Manifest this update: Mon 21 Apr 2025 08:00:37 +0000
Manifest next update: Tue 22 Apr 2025 08:00:37 +0000
Files and hashes: 1: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (hash: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=)
2: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: /ZTmkosH1wkT5P+OF3EI6IOofLgdAehQaVVVB0PyHcw=)
3: Yhyd6_3--40XbUHLiYyj2qr-Yoc.roa (hash: 1oOXBnBBaEwXQlaBh7+MdVkKyYQvik1W61cIDXTDdBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:09:67:c8:7d:dc:1f:9b:90:24:d6:e0:9b:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Apr 21 08:00:37 2025 GMT
Not After : Apr 22 08:00:37 2025 GMT
Subject: CN=ae4198b49c98b08dfe5e70245b04039d91182a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:89:09:3c:1b:95:48:af:0a:14:ea:94:af:
7e:40:23:9b:08:c1:41:0b:ff:b8:cc:f7:be:9c:93:
bd:4e:05:ba:32:af:1b:d8:76:7b:4d:11:19:3a:70:
cb:43:95:96:ea:c6:a2:6a:ef:ed:08:24:92:f1:a0:
dc:39:65:d1:6c:ee:e6:d6:99:bc:52:cc:8a:88:44:
b0:0b:ae:1d:8a:34:13:66:0e:52:18:b8:16:6d:e9:
bb:fd:52:c0:e6:58:2c:da:d7:35:02:f9:ce:1c:b7:
e4:80:69:3a:c7:46:4c:36:d1:4e:65:2e:ae:ed:b3:
90:9e:a7:0a:e2:c5:38:7b:3f:a9:4a:42:04:fa:33:
7a:c8:ab:e5:4a:c7:f0:07:ab:f6:12:2f:67:73:15:
60:96:84:68:cf:5c:d9:47:4d:99:f8:0a:43:5e:66:
bd:78:48:8e:a4:c2:e6:56:2f:a6:b9:7e:33:1d:d6:
0e:c0:8b:f0:8e:5c:f1:61:c3:a3:9d:11:da:a0:c4:
4d:75:47:84:72:c3:bc:45:c4:38:6b:94:da:2d:9c:
ce:2a:c3:03:98:3c:33:72:a5:ac:de:a6:c0:b5:37:
28:fd:40:37:b5:43:72:4d:23:f7:1a:4d:5f:d8:d9:
54:5f:b1:96:e9:04:38:91:a4:50:b5:ff:a0:6b:61:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:98:B4:9C:98:B0:8D:FE:5E:70:24:5B:04:03:9D:91:18:2A:04
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cd:ea:a8:ab:db:d0:ad:9f:eb:8f:ed:de:f8:61:ef:c3:b4:
58:d2:68:2f:0a:db:76:bb:8e:80:9c:7d:0f:f5:06:cb:1c:ab:
61:51:61:a5:34:81:c1:be:a0:82:7e:b3:27:40:73:17:75:14:
5f:5d:5f:0b:e9:24:d6:2b:2b:08:d7:68:42:bc:e8:bc:c7:6a:
08:30:23:c2:07:eb:b5:9d:4e:e4:32:df:60:89:8b:80:8a:27:
ba:7c:5b:43:c4:d1:1e:a0:f8:b3:a2:ba:64:a0:4a:91:a2:a9:
b6:21:8d:06:2c:d4:1f:57:7c:66:45:d6:95:a4:aa:bb:1f:80:
c4:6e:9f:51:97:99:d9:23:5c:0a:5e:41:2f:55:08:a9:99:ac:
3f:42:68:67:b3:fe:56:46:ae:69:0e:57:a8:dc:01:d6:a9:c8:
f5:0c:eb:f1:76:66:77:bd:9b:f0:b1:4e:b8:e2:c4:21:74:16:
0c:76:62:fd:41:c7:26:e2:58:b7:fb:63:63:ec:4c:df:37:dc:
ef:9d:69:1e:7d:9a:6f:c4:1d:6c:1d:97:f3:a8:49:35:e7:41:
04:b2:f3:5c:f4:48:5e:03:4f:25:51:15:d6:9b:18:41:6d:bb:
4a:af:54:fb:7b:3e:fb:c9:e8:89:8e:73:4f:fb:83:31:25:cb:
7b:fa:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:17:09 2025 by rpki-client