Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
File: V_nB-yK84e8kHdfviSpRjQVmqKs.mft (raw, json)
Hash identifier: y+Vlj0EqRxRfY/bMuAP/MSU/p6oJLXAMqrfPh4HlUiI=
Subject key identifier: 8B:C3:CD:E5:2E:A2:8B:31:D3:8B:FB:99:16:B6:80:D8:17:60:C8:3C
Authority key identifier: 57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
Certificate issuer: /CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Certificate serial: 019655A5EDE15A082181C934D94E844AC453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:00:59 +0000
Manifest this update: Mon 21 Apr 2025 00:00:59 +0000
Manifest next update: Tue 22 Apr 2025 00:00:59 +0000
Files and hashes: 1: V_nB-yK84e8kHdfviSpRjQVmqKs.crl (hash: oa+Gk5Ab990tWg8PPFDpsdWdx3wJkdTVPfbyfBegfFo=)
2: fnzKoJIItFzpKqsa1DSC_YU9Oz0.roa (hash: VMMeskb+gseTxaGOSqruyC/TYUaQqqzUpJ/qPck/ehc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:ed:e1:5a:08:21:81:c9:34:d9:4e:84:4a:c4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Validity
Not Before: Apr 21 00:00:59 2025 GMT
Not After : Apr 22 00:00:59 2025 GMT
Subject: CN=8bc3cde52ea28b31d38bfb9916b680d81760c83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bd:24:91:f1:32:0e:4c:9e:b3:43:f1:15:f9:
78:ba:b8:d1:9c:3b:51:33:60:09:95:97:0a:0a:9d:
17:65:ab:9f:ab:d0:99:d7:8a:37:80:a9:ae:a0:60:
a8:1f:79:9b:7e:c0:2d:53:38:91:15:73:fe:e7:f1:
be:2f:b4:95:f4:9a:fd:00:60:fc:98:0a:cc:8f:7b:
cd:d5:40:1d:3d:9f:84:64:e5:8e:99:82:f8:a9:b0:
dc:2a:a1:15:53:57:a5:e4:80:45:7d:05:3a:03:3a:
7b:da:29:af:36:2b:ac:10:60:95:61:89:bb:1e:c7:
2a:10:05:e5:98:46:fe:4c:3c:51:c2:6a:3c:ee:a2:
72:f7:11:2f:82:c8:0e:63:64:45:81:37:30:7f:cc:
b0:68:cf:63:ff:5a:36:4a:91:40:c1:98:7a:ce:87:
6d:a8:42:ef:ad:e2:80:6c:eb:f0:96:5e:ef:11:19:
15:a5:2a:81:fa:ff:e8:cb:30:da:96:80:5e:7b:3e:
ac:d7:96:da:84:bd:96:c7:aa:b4:33:18:ff:4f:b2:
fe:81:0b:97:8c:7f:9f:89:2f:29:3e:49:c0:dc:3a:
95:b2:6a:77:dd:16:5e:4d:42:51:8f:3b:de:14:c9:
04:f9:fc:49:65:5f:bd:42:e0:8c:b4:c4:3e:53:0b:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:CD:E5:2E:A2:8B:31:D3:8B:FB:99:16:B6:80:D8:17:60:C8:3C
X509v3 Authority Key Identifier:
keyid:57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:a0:84:77:1a:e0:01:26:c0:4a:bb:4a:74:44:2b:18:40:
6e:46:d7:eb:29:dc:9e:4e:15:47:46:6a:8d:76:f2:bf:c9:84:
48:91:53:ad:00:82:77:9f:51:91:bc:f7:64:7c:53:23:ee:c6:
9e:b3:05:78:83:0f:0d:65:9d:27:c1:76:d0:09:29:a2:7a:f7:
64:d5:61:55:6a:e4:56:32:89:39:ea:60:82:6f:df:49:12:66:
d6:dc:5b:0f:eb:fc:f2:f5:f2:0c:13:b9:31:c7:6f:33:f9:37:
93:fe:76:33:a4:e0:9e:d4:b2:01:0b:b9:d0:89:64:81:f1:e4:
77:12:43:4b:39:53:18:ec:e5:9f:0a:79:df:84:39:79:0c:1c:
cf:5b:2c:47:9c:c7:eb:b4:40:84:6b:26:c3:2d:1c:45:79:4f:
f4:53:72:75:6b:19:41:04:5c:2d:ab:aa:d9:82:51:ee:fe:13:
81:b6:01:9d:f7:4b:e2:19:1b:13:f9:99:50:d5:76:e2:f2:d1:
7f:76:7a:0c:00:ab:ec:63:ff:73:d0:fc:be:42:f1:cb:e1:b4:
c0:11:ff:7d:33:59:b5:16:00:1d:33:69:3c:b3:24:66:e3:8f:
d5:7c:6b:58:db:f2:2b:cd:c3:66:1f:55:03:a3:13:46:60:25:
a0:e1:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:33:57 2025 by rpki-client