Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: xUEzMF8p8Dl3QDykSDegJD1CCPf4TaDCa1ANibZHNaU=
Subject key identifier: BB:FD:C8:CD:41:C9:F7:20:1B:C1:EC:15:3F:0D:F1:63:EB:27:15:F8
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 01958C975CCBBD6C9F12A75AFF56AF188D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 23:01:24 +0000
Manifest this update: Wed 12 Mar 2025 23:01:24 +0000
Manifest next update: Thu 13 Mar 2025 23:01:24 +0000
Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: i5ILyuY2lZqLEefdSGVCbmsPAeNFysvqesX8ig0Poms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:5c:cb:bd:6c:9f:12:a7:5a:ff:56:af:18:8d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Mar 12 23:01:24 2025 GMT
Not After : Mar 13 23:01:24 2025 GMT
Subject: CN=bbfdc8cd41c9f7201bc1ec153f0df163eb2715f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:43:41:d8:44:67:2d:05:dc:1e:de:f3:76:
52:1c:1f:1d:95:74:70:22:f6:96:9b:7f:fa:c9:b8:
3a:97:5e:79:9b:f3:68:4d:98:79:e0:1a:45:f0:66:
c8:a1:8d:c0:23:16:e7:08:d0:f9:fe:ab:be:5f:c5:
81:bd:16:b8:09:14:49:2c:fb:48:6e:b2:f9:17:ac:
42:90:91:d7:76:2e:5c:69:39:b3:8a:60:56:3f:da:
c1:d2:3e:2f:4e:fd:04:7f:54:d6:ee:cc:b5:79:fd:
09:52:b5:91:47:8b:1d:fc:88:53:99:0b:02:a8:a2:
fd:fc:bf:26:13:37:e1:a0:3e:e2:45:01:70:0d:e0:
b5:34:23:95:6c:d3:3d:77:dd:f0:b3:bb:ce:42:c8:
86:88:4f:2b:e6:94:19:7d:29:ae:26:6a:aa:32:18:
59:5b:8c:89:ac:f3:dc:5f:7d:7d:c4:f6:c7:0c:bb:
bc:a4:47:41:79:11:3f:71:f6:35:a7:9e:c6:63:f5:
cc:fd:e7:18:02:84:2a:e2:42:64:7d:a9:49:32:5e:
16:d5:28:39:f0:c1:eb:51:d3:1b:1d:5f:55:e2:d7:
46:d3:cf:bb:f5:b2:d3:77:ee:37:34:7a:cc:f9:fd:
c5:ef:db:77:59:f7:59:f3:f0:69:e6:3f:b8:58:7f:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:C8:CD:41:C9:F7:20:1B:C1:EC:15:3F:0D:F1:63:EB:27:15:F8
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:15:e3:23:75:8e:1a:28:26:2f:ab:06:37:6d:8a:c7:20:
1b:97:3a:a6:32:49:62:94:aa:2e:30:99:ce:fe:cf:14:cf:2b:
ba:5e:79:ce:01:46:d4:97:70:0b:6a:c3:d0:bc:91:f7:53:4e:
95:15:b3:3e:02:09:6a:00:53:e8:64:1e:68:81:02:c9:65:2d:
81:36:1d:74:c8:b8:24:f2:05:27:16:3d:d1:04:37:b8:be:bb:
eb:5e:ac:92:51:59:97:99:a1:31:ef:b7:e2:1e:32:ff:eb:76:
42:ab:83:52:af:1e:31:53:e9:55:e6:ff:c6:12:f0:5a:e9:dd:
32:ac:f7:b8:96:cd:dc:5c:fd:ab:b8:06:56:3b:76:e6:df:ea:
66:bd:58:16:a5:1d:05:79:9a:2b:41:91:9a:95:ec:06:7b:35:
73:f5:8a:ca:d1:0d:4e:fe:81:66:38:2f:6a:a4:51:d5:7b:bf:
7e:b7:52:f5:56:96:a8:10:2d:ec:db:4a:63:ac:64:69:ac:5a:
05:9c:1b:f8:98:f9:d8:3d:28:ab:95:5a:ef:a5:c9:5d:60:34:
2e:7d:ce:f3:53:74:59:c7:19:bb:87:a5:8c:40:a2:8f:70:77:
89:bd:e6:40:73:24:b8:14:e5:e0:fa:c2:26:43:9d:37:1b:c9:
d3:cc:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:20 2025 by rpki-client