
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier: ZdwNnvrqqQ4yiuyEYuT3IMwHpzTIKWKFqrFLT/b5OJk=
Subject key identifier: 34:F6:FF:DD:24:E7:2F:F7:83:5E:D3:F2:42:E5:08:76:A1:CB:F1:7A
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 019653EE4A5C84C565E158DB0147A03A3533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 16:00:47 +0000
Manifest this update: Sun 20 Apr 2025 16:00:47 +0000
Manifest next update: Mon 21 Apr 2025 16:00:47 +0000
Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: eoxVBnCSU1eSCryr254FHE3zGCpFkqvyr96NyJZmlwo=)
2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:4a:5c:84:c5:65:e1:58:db:01:47:a0:3a:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Apr 20 16:00:47 2025 GMT
Not After : Apr 21 16:00:47 2025 GMT
Subject: CN=34f6ffdd24e72ff7835ed3f242e50876a1cbf17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:0e:bb:1c:06:6a:ad:b8:0d:5e:b2:ac:4f:
56:91:b1:f7:dd:7f:d6:7c:a7:b8:d5:cb:af:4c:56:
d2:00:6a:1f:80:d1:ee:81:b0:8a:8b:be:27:4e:d2:
5f:69:6b:27:0f:c5:e2:9a:10:aa:c4:40:98:87:b3:
c1:37:ba:22:9b:ba:b2:93:7f:eb:70:00:ee:f6:68:
b7:a5:d5:e5:2c:13:87:fa:4d:04:22:a6:d8:f3:fc:
ba:05:1d:21:79:8c:93:ef:56:3f:24:30:d9:b7:9b:
64:49:94:dc:1c:8c:57:99:b0:ab:80:5c:b9:2d:0b:
e4:8c:dc:bf:e0:ff:d7:f5:0a:1a:fe:2e:5d:5a:b4:
88:81:9f:a5:d1:08:01:3a:76:84:a0:9e:c1:f5:e4:
c3:8d:78:4b:fd:86:38:3b:f6:6d:50:7a:fb:ce:75:
af:e5:46:7a:db:26:cf:63:d3:c5:29:ea:45:e0:8a:
f1:99:6d:aa:92:f7:f1:86:0e:61:80:fa:b0:dc:d6:
c0:17:18:dd:52:13:65:87:4f:6a:06:7a:ee:78:f0:
7c:1b:0e:74:56:41:91:f6:c4:e9:3e:ac:ca:50:59:
0f:61:27:de:70:f1:7b:e2:a4:7a:d1:d8:89:67:2b:
f2:ea:ce:93:e5:cf:0d:03:86:7e:db:62:56:5a:ef:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:FF:DD:24:E7:2F:F7:83:5E:D3:F2:42:E5:08:76:A1:CB:F1:7A
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3e:a9:ad:95:24:26:ed:99:0a:9d:0e:2c:ea:f8:05:71:0f:
76:2e:88:6f:6d:24:91:d2:07:e5:ba:d8:55:3e:20:a4:2c:55:
16:c1:12:eb:8e:37:45:80:1b:29:ae:62:4c:e5:c3:fc:82:6f:
71:0b:ab:2c:6e:bd:87:b6:01:8a:dd:4d:e9:ae:8e:79:96:dd:
06:56:7c:a3:3c:c2:30:87:b5:48:c3:55:8b:16:c2:bf:b6:b5:
11:72:2e:fa:15:4a:38:8c:df:0a:75:49:1b:91:d8:34:02:f2:
59:ae:51:88:ec:f3:bf:93:70:ed:62:12:a4:cc:74:9b:6d:ec:
6c:f7:97:6f:6e:11:f3:f5:7f:b9:1d:5b:99:b5:1c:e0:88:52:
3a:b5:1b:19:dd:03:64:5a:84:45:cd:98:b4:e2:88:5f:12:fc:
df:ad:fd:48:ce:6a:9f:be:fe:b0:a2:42:ce:14:08:fa:33:6b:
46:71:f3:14:e8:78:c9:ec:4c:67:b1:59:07:24:4f:e1:a8:eb:
d8:fa:8a:3e:b8:60:f4:7d:03:d1:fb:8f:17:6a:99:a8:26:15:
96:2d:38:6f:bd:48:c5:74:1f:2f:4e:fb:ff:e5:86:22:2b:5b:
f8:52:6c:c2:70:47:0c:e4:1c:c0:9b:ab:9b:5a:08:85:83:e3:
b2:5f:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:04:46 2025 by rpki-client