Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: iHpldinoec/FcSM3MBWw81vTZXXjrCtdkl7B/odAisE=
Subject key identifier: F5:E0:67:4F:E2:99:74:C8:16:E7:17:8E:AA:9D:FF:D1:4A:82:C1:41
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 019655A5E7077D5100C18A2520C805B7AED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 02B3
Signing time: Mon 21 Apr 2025 00:00:57 +0000
Manifest this update: Mon 21 Apr 2025 00:00:57 +0000
Manifest next update: Tue 22 Apr 2025 00:00:57 +0000
Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: lhdFKKRY6g9gHCdftaKt/BwH3PZfCiX4JXMIvT8Go1Q=)
2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:e7:07:7d:51:00:c1:8a:25:20:c8:05:b7:ae:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Apr 21 00:00:57 2025 GMT
Not After : Apr 22 00:00:57 2025 GMT
Subject: CN=f5e0674fe29974c816e7178eaa9dffd14a82c141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:e5:8c:a3:42:0f:f0:2e:ef:f3:8a:4d:c4:
3f:60:d9:2f:55:36:3b:82:dc:ea:c4:29:20:5e:ef:
fe:a7:90:ce:c9:59:5c:b7:c8:48:ff:25:70:91:32:
67:6c:d7:8c:35:47:9d:c7:5f:5a:aa:64:0a:cb:52:
ab:48:33:b7:15:fe:9a:1a:73:3f:d4:9d:19:61:ef:
2d:a8:b5:00:e3:b1:d0:07:1f:4b:0e:87:29:ac:7e:
8b:69:a6:4f:42:bf:d9:2a:5a:df:dd:63:fd:83:25:
61:87:77:98:b2:e5:c3:16:9a:d4:40:a4:b9:b6:b3:
b1:16:e6:c7:af:6f:8f:e8:a3:95:4a:1e:c1:f5:5c:
d0:cb:72:da:fa:0d:c7:5b:75:c8:08:33:16:14:b5:
e6:f6:85:a7:e3:10:f6:41:2c:69:5c:31:09:d2:26:
f5:27:57:23:ca:c6:d7:c0:f4:58:3a:15:fb:c4:50:
6b:f6:c9:0d:d8:72:74:e7:76:7a:cb:22:63:c5:c7:
e4:98:90:ea:ee:b8:41:ad:6a:de:60:f9:3a:b7:73:
e0:b6:e4:cd:42:54:ff:20:7e:7f:94:52:b3:bb:19:
3f:35:66:78:fd:1b:93:5c:fd:33:f1:31:14:37:71:
5f:93:c9:b3:12:c9:20:14:54:a9:82:f2:e8:0c:3a:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:67:4F:E2:99:74:C8:16:E7:17:8E:AA:9D:FF:D1:4A:82:C1:41
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:04:c3:bd:09:2d:b3:f3:86:08:b3:fb:78:2b:e7:70:5b:00:
1b:1c:1a:19:4e:e9:ba:aa:81:a5:f7:e8:50:83:f1:10:d5:b6:
2a:12:6d:87:94:6f:4e:88:bf:47:cf:31:fa:c5:18:bd:a6:e9:
45:c3:99:06:cc:f4:7b:6d:a9:ed:f9:e6:70:a3:fb:53:a4:82:
dd:1f:81:ae:6a:ef:0d:24:22:01:b1:5c:ca:cc:50:81:9d:ab:
a7:6e:1a:b5:02:cd:c0:02:90:da:00:1d:d6:49:51:bf:e0:6a:
7b:08:72:e6:b4:50:6c:c4:48:37:a1:e3:16:f1:39:8a:39:12:
e1:70:4f:4e:c9:28:04:9c:a4:d3:e1:01:a1:72:5d:72:1f:43:
83:17:71:1d:b2:1a:9f:ff:45:8e:85:4c:dc:59:61:bd:a8:aa:
61:7c:0e:bd:bf:0e:ed:8b:63:61:b7:4f:0b:51:b2:92:29:8f:
94:0b:9e:19:ad:6e:76:5e:b0:be:9b:3b:1e:b1:18:52:29:f8:
b6:9e:5f:01:e2:c6:4e:5c:9a:4c:db:0b:59:56:b2:63:bf:a7:
f4:7a:c0:a4:76:31:f5:91:80:1a:a5:32:49:29:27:73:50:0c:
09:9e:48:b2:e8:80:18:19:ea:82:76:16:f4:9f:90:47:b3:bf:
1d:d6:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:21 2025 by rpki-client