Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: vdpOR/gWWjL/yj22pPHd8Wd7mzJ0QNhedZBltw3lEJo=
Subject key identifier: AC:29:57:26:8A:AC:A5:93:47:B9:98:31:33:DF:74:D0:F0:FB:44:E9
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 01965424C27D20AC85041DDF2CE31CCD7CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 1095
Signing time: Sun 20 Apr 2025 17:00:17 +0000
Manifest this update: Sun 20 Apr 2025 17:00:17 +0000
Manifest next update: Mon 21 Apr 2025 17:00:17 +0000
Files and hashes: 1: VS9hlIblCqjoV7wOGER9HcFzw5g.roa (hash: ldQ9iAybiLA+phWuzQvG2tTPk8+fTFZlm2NUmijp+Ac=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: eKwF4fd0y8f2wYz33ejSLLPAA9v9DGQwZH+uRDTfWBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:c2:7d:20:ac:85:04:1d:df:2c:e3:1c:cd:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Apr 20 17:00:17 2025 GMT
Not After : Apr 21 17:00:17 2025 GMT
Subject: CN=ac2957268aaca59347b9983133df74d0f0fb44e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:18:ca:18:1d:9f:ea:b6:d1:e4:62:37:f0:
3e:37:80:62:08:c6:81:e0:3d:46:82:77:a1:64:00:
60:ac:d5:85:47:9c:62:fe:fb:eb:25:72:c8:7b:07:
39:59:cc:e8:f3:22:d3:d1:46:ae:c9:02:e6:84:70:
98:0b:62:95:19:b8:85:a1:a9:4d:84:c8:77:55:78:
22:ce:97:c7:6b:bb:00:4b:b0:9e:58:2d:36:c7:fc:
80:2e:a5:cf:ed:40:b6:be:21:b5:8a:c5:ea:3b:5d:
57:b7:ed:ca:6c:f7:7e:1b:29:c2:55:9e:8a:c0:83:
a1:57:fa:4b:81:f3:66:b9:4e:f3:22:e4:94:e0:67:
a0:10:3a:16:59:6f:ed:1e:a8:6c:f8:54:6b:14:f3:
76:e0:81:e0:36:48:e0:a7:3b:83:d8:8b:24:54:d7:
51:99:2b:ab:69:ff:24:bb:55:de:e2:c1:7b:6e:8e:
52:6d:7f:ee:79:5e:f6:85:ae:2c:67:71:ef:3c:cc:
6b:7d:1e:8a:bb:33:ab:67:e5:e2:9f:9d:9d:3d:27:
3e:a2:1b:4d:be:a1:07:00:e9:45:9c:50:7f:62:28:
e3:0f:4d:8a:2f:7b:31:11:69:a4:8f:d0:ad:36:4d:
6c:46:34:ea:55:29:a2:49:0f:e9:23:52:1e:23:fd:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:57:26:8A:AC:A5:93:47:B9:98:31:33:DF:74:D0:F0:FB:44:E9
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:19:89:22:7d:2f:a2:79:7c:fc:82:1e:f4:f9:01:c5:76:30:
f0:03:0e:8f:c6:2b:bd:c5:f9:73:75:0d:18:ad:a0:86:1f:8a:
46:bb:5d:6b:89:6c:68:20:c0:38:b2:73:7d:ef:39:16:7a:c6:
c7:f5:ac:ce:f4:3f:a0:05:be:8f:70:65:18:b4:3b:8c:68:19:
9a:6d:60:67:08:a6:e5:97:d4:dd:29:91:68:2e:5c:fd:0c:3e:
e0:05:db:7c:eb:67:dc:69:e0:01:13:25:1f:a1:72:1f:3f:5b:
43:9d:06:ca:d7:0f:06:9c:53:02:89:45:f7:fe:cc:57:a4:68:
fb:50:5e:6b:3b:4a:48:78:03:01:21:65:38:f8:46:62:59:cd:
33:9e:ea:7f:a5:96:1c:d7:32:a0:a6:6c:f8:d7:75:23:cb:37:
b5:58:b8:38:77:72:92:ab:ac:bc:c0:f9:5d:ee:c2:f7:09:16:
62:62:9c:35:cf:57:ff:dc:5c:e1:06:69:cd:8c:5b:7d:c0:26:
c3:75:ba:f5:1e:77:a6:b5:cd:ec:b1:00:29:98:e3:88:38:d8:
63:b1:78:03:05:1d:4e:90:85:eb:d1:1d:b3:cd:1f:80:45:dc:
d8:ef:64:d2:a3:3f:3f:34:ea:94:c5:ba:2e:f4:13:52:44:cf:
d7:0f:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:35 2025 by rpki-client