Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: rPNpdW+IQea0SvQXj6QXOZItf/KlyOgOBvHA/5xhJZA=
Subject key identifier: E3:F1:74:D7:FD:0D:C6:DC:7C:9B:F7:34:05:3D:AB:EA:17:6D:89:4A
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 0196564A699521B6A83CE73018AC595C105B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 94
Signing time: Mon 21 Apr 2025 03:00:39 +0000
Manifest this update: Mon 21 Apr 2025 03:00:39 +0000
Manifest next update: Tue 22 Apr 2025 03:00:39 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: gfMOKij0htuJZpNpZu/HRJC+jhvshnCTOsvEp+ZX45I=)
2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:69:95:21:b6:a8:3c:e7:30:18:ac:59:5c:10:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Apr 21 03:00:39 2025 GMT
Not After : Apr 22 03:00:39 2025 GMT
Subject: CN=e3f174d7fd0dc6dc7c9bf734053dabea176d894a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:0c:83:97:c8:50:36:b3:e7:bd:0b:1d:a8:
36:c2:33:d2:f7:cb:6d:ce:6f:7c:9c:ce:4b:42:d6:
74:e6:e8:0b:27:e0:8c:fc:69:67:37:85:ec:c4:88:
2a:ff:36:bd:d2:37:0a:c3:88:51:6b:f4:ec:68:74:
43:aa:a7:a3:af:e4:d6:0c:90:be:44:4f:42:f2:2f:
68:0b:94:ad:90:25:21:45:95:58:bd:61:a3:20:e1:
13:20:22:a1:19:51:fd:c0:2f:5f:d8:61:f0:9b:cf:
b0:d5:ca:bc:7e:9d:56:8d:fd:32:8e:4c:2f:10:fe:
f0:be:37:68:7f:84:7f:92:39:41:b8:b5:29:6a:2c:
4e:aa:10:15:f3:75:a3:88:07:90:0e:b6:60:54:66:
4d:72:ec:d7:d9:3b:6f:23:b1:17:82:d1:ee:0a:46:
3e:d2:6a:08:8a:c5:ee:12:52:45:28:23:fb:7c:b1:
2a:e2:05:2e:66:56:3c:a9:c2:d9:09:43:c7:46:5a:
cb:e2:46:31:23:b6:44:10:08:d1:25:f6:5a:92:54:
34:1c:27:46:23:da:ad:e2:02:68:41:d6:1e:a2:df:
f7:99:55:9d:f1:a2:60:2a:17:ff:66:c9:c1:f6:51:
8e:5a:0b:3e:32:82:10:c3:62:6b:f2:4d:12:ce:4e:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:74:D7:FD:0D:C6:DC:7C:9B:F7:34:05:3D:AB:EA:17:6D:89:4A
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c9:fe:8a:da:2c:93:3a:32:3e:3d:65:c9:5e:98:46:d6:ea:
67:bb:12:25:55:83:39:11:98:4d:c4:cf:fd:46:9d:9f:9c:84:
b1:c4:7a:5d:87:87:f4:bd:80:a1:f9:ae:93:7f:12:fb:97:0c:
dc:af:7e:cb:55:fb:24:83:5e:63:86:b9:c8:0f:5b:46:d2:b7:
45:96:68:b5:93:f5:a2:fb:1c:9c:61:79:9d:f6:b8:58:a9:2f:
be:9c:66:b0:93:21:84:de:6a:66:fb:70:c0:ec:be:da:05:76:
31:7b:e5:75:ae:3f:87:ed:42:9f:b2:ae:2c:c5:38:af:9f:9b:
0e:5f:6d:ed:a2:e6:21:1a:88:b7:9d:20:0b:34:9a:e9:af:48:
b0:80:0f:06:1a:61:18:80:f4:f8:49:5a:96:73:58:e5:74:b0:
d5:23:72:ba:7a:9c:2a:bb:31:ca:bc:01:24:2c:3b:aa:61:f1:
19:0a:22:72:a5:88:31:14:c1:62:23:84:7b:e8:ee:07:fd:10:
f9:08:1e:c5:00:9a:f6:ac:35:50:3c:21:91:e7:34:d1:16:89:
f5:e1:a7:f3:ec:e6:66:2f:d0:dd:73:c7:c3:16:60:22:f7:67:
44:db:d6:2f:9c:d0:0c:17:2b:cc:a8:c5:c1:52:bc:a2:0c:a6:
7c:e6:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:24:32 2025 by rpki-client