Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: fNpG+dzgRYC0Y471mXtvzudfBtjZUZ4xKlwTf/p/TAw=
Subject key identifier: 3A:91:A8:54:F3:0D:47:53:97:38:4B:80:78:C8:EE:72:73:9D:20:DC
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 019652A511F72F4DE870C6B39EF338995A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 07AB
Signing time: Sun 20 Apr 2025 10:01:11 +0000
Manifest this update: Sun 20 Apr 2025 10:01:11 +0000
Manifest next update: Mon 21 Apr 2025 10:01:11 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: E0exrOdL9usCXWqvTlq0iVDrsBxm4Ex+5tSWOea1KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:11:f7:2f:4d:e8:70:c6:b3:9e:f3:38:99:5a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Apr 20 10:01:11 2025 GMT
Not After : Apr 21 10:01:11 2025 GMT
Subject: CN=3a91a854f30d475397384b8078c8ee72739d20dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:99:3a:2e:a4:50:3d:cc:24:cf:79:b6:eb:
e6:ab:cb:40:0b:d9:ba:f7:61:eb:e7:7e:78:ec:73:
28:28:ec:77:fd:2a:3f:f5:c5:f5:39:4f:aa:a1:6d:
5d:e5:47:89:2c:d8:d4:7a:65:ab:5b:6f:ab:18:d7:
66:5e:74:95:b0:56:04:ab:5e:bb:1f:0f:cd:35:8c:
f1:04:d4:37:4b:c7:4d:6c:fd:eb:22:b3:21:6f:d2:
7f:6e:cd:76:57:31:e8:00:b4:65:5a:fe:5a:1e:d2:
6a:a0:9f:3d:d4:5a:42:55:ff:22:b6:db:ee:ca:0c:
cf:dd:f0:8f:df:a7:9b:b7:0d:4a:57:c0:6c:75:9e:
fa:a1:0a:bb:40:e2:9c:0c:2b:c8:89:81:75:b4:04:
c0:f1:fc:02:15:4c:bf:7f:48:2d:39:0f:d6:af:12:
0d:79:f3:5c:c1:a5:5c:70:37:59:40:41:f4:7d:6b:
98:3b:aa:cb:fc:4f:c5:ae:df:35:c1:1f:7d:ab:12:
66:31:22:1f:23:02:1b:3a:fa:54:f6:b8:4c:a9:d7:
53:22:ef:60:8a:81:a7:77:96:24:2a:da:92:d6:44:
c0:cb:aa:3c:ce:a5:38:ae:d2:f4:bf:a5:96:a5:df:
c5:5e:29:6a:de:0a:79:4b:f6:c1:d7:f9:90:56:56:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:A8:54:F3:0D:47:53:97:38:4B:80:78:C8:EE:72:73:9D:20:DC
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7c:80:52:3e:29:12:4f:7e:c3:11:a4:70:aa:bc:7d:b7:16:
b8:7e:63:71:4e:86:31:20:87:b4:77:a0:a8:8a:ae:1d:45:a2:
6c:72:3f:db:fd:63:24:05:e8:b6:76:de:2d:52:2f:b2:0a:45:
43:6a:16:1e:74:dc:d5:fd:66:46:d5:4c:59:61:51:ad:e8:45:
cd:5a:05:13:47:dd:81:c0:aa:55:c4:d2:96:0b:9e:60:0f:27:
67:97:89:d4:48:77:1b:c4:82:94:c2:32:51:04:52:32:f8:3e:
98:41:56:05:75:37:6d:47:eb:72:85:f6:47:d2:f4:1b:fa:ee:
22:6d:aa:67:f3:bf:83:13:2b:08:0f:14:f6:b4:b9:7a:1e:7e:
f0:7f:a3:66:31:8b:67:e2:78:67:7f:6d:63:73:96:35:96:07:
41:93:04:26:fe:4f:6c:0a:ce:1e:3a:be:08:11:0d:66:7e:83:
5f:a9:56:99:20:b7:80:7c:66:7c:44:9d:65:ef:a8:1c:a1:6c:
ff:e0:d6:7e:41:97:8b:07:c9:c3:69:a7:20:11:81:b8:e3:1b:
ac:15:1d:89:8c:e4:95:c2:59:13:c3:30:33:5e:91:df:3e:ea:
48:86:08:98:8c:99:ae:f6:f2:52:25:fe:c0:72:3a:4c:f5:07:
4c:d4:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:28:32 2025 by rpki-client