Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: rw4A64Y5u57VrSeJFLP8dDmGYdVFlDHqItdr8MAMn4I=
Subject key identifier: C2:9C:96:6D:55:85:C2:0D:05:C6:07:CD:D9:41:AC:88:B5:AF:9B:70
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 01965793FD17D18B00AD4F69D032F680581B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 09:00:38 +0000
Manifest this update: Mon 21 Apr 2025 09:00:38 +0000
Manifest next update: Tue 22 Apr 2025 09:00:38 +0000
Files and hashes: 1: 3PYL2z4dbYzzHpPINidA49XrquI.roa (hash: JjFcUQUaNejhXKTGMzFyL0WCBL9DGr3AsPUpC7MPyAE=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: cv3Ew6lPqJzjHSFz9PJpz/fKOZ9xhFK7gLVjwteRDDY=)
3: qmRq0nT8AUced9vBOL0NqELtGR4.roa (hash: oaWZu0SgsjdfLiw2WcN5Ite35plNpcdUa0JGc+hsxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:fd:17:d1:8b:00:ad:4f:69:d0:32:f6:80:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Apr 21 09:00:38 2025 GMT
Not After : Apr 22 09:00:38 2025 GMT
Subject: CN=c29c966d5585c20d05c607cdd941ac88b5af9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:97:ff:05:cf:7c:1a:40:b3:a0:c4:c7:6e:
4e:86:b1:49:82:f2:51:73:e1:07:b0:c3:55:64:3b:
dc:87:5a:42:de:e3:0c:3f:1b:ce:0d:51:91:69:93:
f8:1d:6e:e4:68:36:1d:e3:03:e9:53:9d:ec:4f:67:
b7:e2:eb:1d:82:77:ac:8f:a7:aa:72:2f:18:14:0b:
a1:fa:d2:30:4e:33:43:1f:50:d1:43:35:1c:9b:85:
e7:22:a7:34:34:52:42:ad:7e:19:02:51:17:c9:5c:
0a:f6:ca:d0:4f:25:a3:2f:70:b2:71:b7:cc:1c:8d:
c4:d0:ec:80:f5:b7:e3:4b:79:43:07:a4:69:c5:db:
cb:ef:90:72:06:8f:da:59:83:2a:47:16:79:f3:57:
3d:bd:6f:74:51:d7:ed:7e:fb:67:9d:7b:1b:9f:d2:
b8:c4:a7:a2:41:b0:17:04:fc:bc:7a:d6:d0:39:31:
9b:8a:b5:9a:a7:d2:50:16:ac:a1:e0:7e:b6:71:c5:
d0:65:2c:6a:95:ef:3c:b5:c7:39:93:cc:86:61:b9:
71:7d:a5:ab:28:42:f0:f7:72:2a:20:13:f4:d4:52:
5c:8f:95:c3:ce:e8:23:e7:f5:ac:5f:3c:b3:44:6f:
50:41:5c:e1:cc:1a:44:22:f1:83:b0:da:ca:36:70:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:96:6D:55:85:C2:0D:05:C6:07:CD:D9:41:AC:88:B5:AF:9B:70
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:73:1b:02:9d:8f:7a:14:10:ae:b2:ca:24:d6:4b:8e:dd:
5a:5b:65:b9:80:c4:bd:e6:b0:e1:44:db:5e:d6:00:c3:95:35:
9b:79:fe:b8:6b:7f:47:ee:22:9f:5e:64:2c:c5:b5:04:2a:d3:
ad:0b:60:66:9f:9e:72:5b:76:4c:2a:27:37:40:89:85:f3:a8:
dc:d8:ac:d1:8d:17:14:57:ca:73:c0:bc:a5:1a:18:c6:f6:90:
05:39:f8:f9:ff:fe:2e:6c:10:90:f3:41:b0:2d:e4:d6:68:83:
8f:d0:e9:fc:a0:88:78:76:a2:00:31:89:c6:ec:8a:1d:4c:33:
8d:d7:19:64:a3:31:16:af:5b:d2:e3:a7:aa:76:c1:04:c4:ac:
e1:0f:1f:6e:3e:dc:55:3f:33:54:41:35:1c:59:64:87:e9:f4:
7d:0b:7e:b1:7a:91:e8:9a:ba:21:d7:de:2b:ce:cc:47:8a:fa:
cb:13:0a:b0:2c:56:ee:4c:bf:11:53:a5:2a:13:5b:87:d7:fe:
9a:eb:02:da:68:a3:53:c7:b8:ee:d0:b3:f1:52:b2:7e:d0:9c:
c2:0c:85:e2:95:8a:63:3a:f9:a3:2d:19:bc:d7:f8:c8:a6:7a:
23:67:d2:68:79:d9:2a:83:4c:31:68:94:8d:e0:9f:6f:41:0c:
07:ef:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:19:39 2025 by rpki-client