Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier: gc2nUQeoERXuPwaK1il5Gh7VeLeB3LUSci2l5+r+ZAM=
Subject key identifier: 42:4A:BE:C2:6A:C8:FB:31:20:DF:5D:4E:47:55:DE:C3:BC:59:10:DA
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 0196564A6D5D74F6FF090F7F9CAF1E38C157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number: 150A
Signing time: Mon 21 Apr 2025 03:00:40 +0000
Manifest this update: Mon 21 Apr 2025 03:00:40 +0000
Manifest next update: Tue 22 Apr 2025 03:00:40 +0000
Files and hashes: 1: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (hash: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=)
2: QPWAwQFNqSZZic2_WlAPH58qqA4.roa (hash: skiFt149qEZ92Md1xg5hAbPh0VVNiYKSR7UbnADB92E=)
3: fHkoAZxOrb4jS9uptQ9di3MomH4.roa (hash: OuL9G7DUjjtpe04g3KNS/iW0YgxTMwqsjJxCgrATRoE=)
4: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: 1f5b6klCRPF3bAOJ14/iQb9lLBMg2jJz+q8SjPYsbhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:6d:5d:74:f6:ff:09:0f:7f:9c:af:1e:38:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Apr 21 03:00:40 2025 GMT
Not After : Apr 22 03:00:40 2025 GMT
Subject: CN=424abec26ac8fb3120df5d4e4755dec3bc5910da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:10:a7:71:8c:4b:15:ab:d7:51:ff:f7:af:
58:a5:5d:87:c3:2f:63:3e:cf:08:a2:ff:0b:58:8d:
31:df:d6:6b:42:1b:c9:cc:52:d3:a7:18:bf:91:b4:
7d:2a:8b:43:ad:38:71:ff:7c:7a:10:ea:4e:bf:e8:
d3:88:75:28:7d:36:02:c4:89:4c:77:0b:74:1e:10:
c5:22:62:3f:13:8e:ec:e5:17:ce:a9:74:1f:2f:60:
4c:f6:b9:03:98:b4:0e:00:52:02:87:d4:49:08:3b:
56:dc:46:f6:3b:64:17:c4:e7:a7:d1:da:ed:cc:de:
95:5e:50:a1:07:8e:6c:80:5d:7d:27:ee:7b:e8:15:
b9:2e:53:2a:e1:77:1f:79:c9:71:d8:cb:08:77:39:
a7:d9:0e:87:8a:fd:2a:d8:04:6e:d8:dd:86:46:7a:
76:c7:d7:b0:10:20:e6:28:51:12:e0:ca:d3:0f:f2:
00:b6:41:68:9c:cf:24:0c:9d:97:3a:16:18:e8:06:
6b:32:fe:54:d7:d0:84:16:8f:dc:e7:93:e5:10:c6:
5d:88:a3:fc:e2:89:f8:dd:5a:09:f0:f7:9e:3c:97:
a9:b0:22:47:5a:11:22:6c:f3:1a:4f:df:df:2e:81:
78:03:28:24:44:fc:76:33:da:32:5c:08:bd:1c:1e:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:BE:C2:6A:C8:FB:31:20:DF:5D:4E:47:55:DE:C3:BC:59:10:DA
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7f:c8:99:55:6d:ec:0a:3d:d4:08:94:d0:98:d6:ec:1a:93:
7d:8e:2f:3d:8a:9a:99:ca:61:54:b7:1f:55:7f:87:95:2b:8a:
20:3f:96:a6:d3:db:c5:a0:fa:87:d9:0f:5b:e7:a5:ae:78:d9:
30:8c:49:5a:47:96:4f:22:9c:e7:a0:f9:8e:24:bc:61:4d:a4:
ef:8c:91:7e:59:6d:c5:ee:ab:db:76:96:fa:4e:47:4e:42:cf:
f7:ba:14:91:17:ff:f6:0a:1e:f4:99:88:fc:4c:9f:67:a4:19:
99:2b:87:58:29:d0:6d:55:07:1e:0f:29:83:59:ed:62:2e:36:
46:91:58:55:43:84:a6:b5:3d:5c:0d:82:64:0a:82:e6:7f:2f:
af:fb:af:19:e7:24:23:8a:9f:fe:e7:9f:f1:8f:b2:23:9a:c8:
1e:55:32:c6:b6:93:41:c0:d0:c4:48:c4:cd:97:d4:61:36:f3:
ca:dd:b5:d2:dc:00:d3:32:f7:85:ce:87:50:6e:44:66:13:af:
4a:08:0a:93:8a:b2:53:61:34:94:5c:d9:e5:38:14:a1:9a:99:
a2:6c:bb:10:2e:81:c4:ac:a5:ab:a9:f3:e6:07:19:15:33:95:
00:e0:c0:79:fb:87:e5:00:f6:cd:c6:a1:68:9b:44:8d:ef:78:
17:2b:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:28 2025 by rpki-client