Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: 83Cl4JtjVh5Zj35HnTBXVSCJX5YDJDbxOdX+hdT9heg=
Subject key identifier: EC:4D:05:97:5B:06:8A:D8:04:A9:73:1C:60:86:51:85:6B:0E:92:E3
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 0196564A32F7F23E7AD992868166ED22B330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 1457
Signing time: Mon 21 Apr 2025 03:00:25 +0000
Manifest this update: Mon 21 Apr 2025 03:00:25 +0000
Manifest next update: Tue 22 Apr 2025 03:00:25 +0000
Files and hashes: 1: 2UJUcXgEXfunFA21jmeL2YNS9MM.roa (hash: 6FVHb9+rMImArAonsBYihu+wIYZJbNNs1MntdRcJc2I=)
2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: o2VqS3ODz586zkfttnGqq2gqVLdVN5arJFdJQWoTfDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:32:f7:f2:3e:7a:d9:92:86:81:66:ed:22:b3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: Apr 21 03:00:25 2025 GMT
Not After : Apr 22 03:00:25 2025 GMT
Subject: CN=ec4d05975b068ad804a9731c608651856b0e92e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:8a:38:0d:44:f7:85:d3:9f:e0:fd:25:4f:
36:db:6e:59:d2:54:82:8e:21:02:0b:62:4c:31:b4:
cb:33:e6:5e:cf:25:88:dc:c6:e0:77:bd:a3:29:36:
3c:3e:92:37:7c:61:5c:90:c5:21:f7:b9:af:c0:ec:
2d:88:fc:0f:6a:2b:fb:2c:37:1b:4d:7c:62:81:30:
e8:e7:e8:06:0e:6b:32:1f:4b:06:01:f6:e4:3d:ac:
26:22:01:86:51:be:b9:c3:1e:85:83:13:31:92:a9:
8c:d0:90:2d:45:ad:41:62:ed:d8:6d:7d:db:c3:54:
4c:4a:54:b4:95:f7:cf:aa:5e:25:a2:ee:e5:79:fb:
d9:2a:09:6d:89:79:be:bb:bc:95:93:76:10:28:b9:
47:03:02:11:0a:13:1e:6f:4e:dd:63:0d:d6:53:51:
4e:e5:c5:46:6e:c5:77:1d:f1:c5:7a:14:76:86:28:
35:d2:62:66:7d:c9:47:d2:49:c1:9b:68:60:6a:d9:
d8:4a:1d:5a:32:18:6d:92:08:b8:f6:ca:70:16:30:
79:e6:ba:e2:36:55:e1:b3:db:df:cd:6d:c5:93:f5:
f7:2e:22:05:4e:93:8c:cc:68:90:a4:03:95:50:c3:
0f:02:83:81:f8:86:29:5c:bc:a3:57:3a:93:9b:18:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:05:97:5B:06:8A:D8:04:A9:73:1C:60:86:51:85:6B:0E:92:E3
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:7c:25:6d:12:2e:6f:dc:2e:f1:fd:eb:3a:3e:16:11:31:
0b:f7:cf:91:b7:45:88:35:41:2d:f0:b3:c1:9b:02:36:bb:d0:
2a:b6:64:d9:44:af:6f:7d:96:3d:50:db:68:f7:b9:4e:f0:b8:
e4:9b:98:85:e3:cf:e5:a9:de:2f:66:70:c2:a5:53:fc:0c:14:
d1:50:b6:ac:83:ec:d2:5d:f6:54:fe:99:4e:c7:19:b2:38:51:
e7:30:0c:6c:32:88:bb:58:8b:8f:75:c8:80:5a:93:91:7e:00:
c7:70:d1:c1:ee:4d:52:35:e9:71:88:48:8f:1c:2f:7e:d6:8f:
fe:4b:a4:e7:d8:1e:ab:b1:99:26:e8:c6:3a:62:ed:34:8d:ad:
c9:a7:01:99:46:d9:88:8d:05:91:eb:e5:5c:30:15:89:56:2c:
e1:fe:bc:b5:8e:f5:e4:31:a0:0d:09:59:47:d5:46:48:bc:9c:
c5:68:a0:b3:e2:68:3f:a9:7b:70:77:5a:f5:11:d0:1d:4d:c3:
6b:ab:e7:c2:c4:db:e0:fd:fb:25:0f:21:2d:89:8e:b9:bf:82:
dd:9d:06:3d:fb:88:57:96:bd:32:c1:59:10:eb:c4:01:7a:85:
fb:b1:75:e2:af:30:93:e4:cb:f1:ae:3c:8a:2c:91:ed:02:2c:
83:9f:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:18 2025 by rpki-client