Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier: 5j53leqplYPhhZREaX1PGLSCxDQKRj+wGFOkIlCW6xA=
Subject key identifier: CC:94:25:1B:1B:4B:42:8C:6B:03:20:74:D1:29:5C:BE:15:5E:14:26
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial: 019652A4D6C9A8DB7E29849613F8F1A65557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 10:00:56 +0000
Manifest this update: Sun 20 Apr 2025 10:00:56 +0000
Manifest next update: Mon 21 Apr 2025 10:00:56 +0000
Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: kV7tib/erGqSLoFM8I2Y3z+4jzyhmZQ6UBnu5AfKaw4=)
2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:d6:c9:a8:db:7e:29:84:96:13:f8:f1:a6:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
Validity
Not Before: Apr 20 10:00:56 2025 GMT
Not After : Apr 21 10:00:56 2025 GMT
Subject: CN=cc94251b1b4b428c6b032074d1295cbe155e1426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:88:e1:c4:17:cd:7e:70:03:8c:a3:ed:0e:
2d:b7:6a:87:6a:a4:1c:43:e2:4e:8b:1a:e8:1a:fc:
8d:6d:17:b6:37:17:eb:d6:38:29:4c:d9:d1:16:88:
35:ef:44:40:bd:60:86:f0:6d:31:4d:55:7e:5e:84:
62:f1:d8:60:5e:ee:44:2d:1f:3f:ac:5b:bd:2d:10:
77:bf:46:38:7b:f0:58:c8:5a:20:bb:19:7d:7f:15:
a5:9a:e9:a7:fb:e3:23:e9:c1:2a:be:a5:da:f3:7b:
08:cb:51:2e:91:1f:21:a9:81:31:30:14:60:13:6f:
7b:61:3c:1e:e3:5f:5c:52:e4:59:d7:ae:51:37:75:
76:76:72:b4:b0:04:5f:aa:50:1f:e6:59:1c:e5:8e:
20:e5:4c:6e:0e:f9:5c:62:5f:b6:ca:cd:13:a7:e1:
29:42:e9:64:b3:35:bb:2c:ef:d2:63:6b:67:d7:c7:
fa:b4:65:78:e8:ab:e2:56:c3:18:df:8b:b4:7b:5a:
42:d6:96:85:32:52:8f:e1:93:c9:07:22:a1:c2:12:
a6:a6:bb:aa:08:e6:bb:c6:23:0e:79:2f:4c:78:33:
61:89:7f:4b:f1:ad:49:e1:7c:73:93:35:90:22:b0:
25:26:ed:3e:cf:1a:cd:ae:81:1c:d8:b8:f8:05:89:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:94:25:1B:1B:4B:42:8C:6B:03:20:74:D1:29:5C:BE:15:5E:14:26
X509v3 Authority Key Identifier:
keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3b:3c:97:2b:25:d6:ed:c0:3d:7f:f0:b7:71:1c:2b:53:e0:
c5:f8:95:47:cc:63:79:04:51:ad:44:16:01:fc:97:80:a3:ee:
bc:bf:53:c4:bc:72:bd:38:c9:e4:46:22:b5:e5:2e:0c:68:68:
49:bc:05:a7:9d:2a:27:7d:33:1d:e4:aa:d7:55:e2:23:78:87:
fb:0c:fd:bd:e3:69:bf:f6:09:62:cb:49:98:c9:6b:39:c9:04:
07:b6:92:df:db:42:35:cf:0d:3e:61:0c:fb:b1:56:47:05:bf:
61:52:68:06:ea:10:1f:72:71:6b:de:c2:a5:45:31:8b:b8:8e:
f1:99:c3:ab:6a:b1:bf:b0:be:32:f5:e0:65:83:ae:ee:e5:57:
bd:87:ef:67:2b:36:9d:fd:b2:76:5f:8a:62:b1:51:28:06:5e:
24:1f:bc:95:5b:51:75:e5:63:32:2b:b1:97:70:cb:5d:1d:23:
5b:74:02:5c:f6:80:f2:23:47:87:ca:15:65:a4:dc:bf:53:47:
f2:58:1f:5f:26:3a:02:bf:22:1d:ef:eb:f6:98:4f:e8:c7:ca:
21:b4:34:47:3e:8d:37:58:fa:13:3d:ad:e2:9a:b3:f5:88:0a:
3e:3b:28:c9:56:d6:2e:b2:ac:f6:ec:0e:ba:30:cd:cc:86:e7:
2a:84:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:49 2025 by rpki-client