Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File: V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier: yYs4zgVfjEBFsYSfo52oIZvW00+oQWlAodK2PJ/j/V8=
Subject key identifier: 75:07:A7:FC:8E:D2:A1:59:25:4C:C4:96:DF:7C:FE:C7:D1:88:E5:29
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 01964DB5244043653B65FF3C062DE2D33E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number: 071C
Signing time: Sat 19 Apr 2025 11:00:38 +0000
Manifest this update: Sat 19 Apr 2025 11:00:38 +0000
Manifest next update: Sun 20 Apr 2025 11:00:38 +0000
Files and hashes: 1: RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa (hash: DKmpWhYiScUgITQkVLFk78lbIWZwU/oZxtOXJ3y76t0=)
2: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: PPStPZbMItJKZKLMdaLSVvRHXH2HBjMSw1MUl5ECHg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:24:40:43:65:3b:65:ff:3c:06:2d:e2:d3:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Apr 19 11:00:38 2025 GMT
Not After : Apr 20 11:00:38 2025 GMT
Subject: CN=7507a7fc8ed2a159254cc496df7cfec7d188e529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:dd:0e:d7:1f:b9:9c:8b:42:03:32:9f:74:
f6:b9:23:14:4a:f6:88:16:a9:bc:92:69:ec:ef:5d:
e4:9c:75:43:7f:31:23:6e:9d:15:79:ef:35:de:92:
4b:79:c4:fd:74:39:8c:56:ce:ed:ec:4a:07:43:83:
51:9e:c2:6c:b2:a8:41:d8:86:7c:8f:6b:38:18:36:
51:92:34:f2:37:3a:7c:d8:fb:62:6f:74:62:fe:67:
5e:dc:71:ba:95:51:3c:48:60:d7:2d:44:2c:0e:9d:
db:ba:46:08:94:cd:7a:80:96:0a:a6:b9:e4:cd:77:
34:39:ad:fd:b0:3c:de:42:aa:0e:48:8d:62:91:3f:
42:14:3e:72:b1:c3:6f:70:ad:ea:f8:54:d1:f9:8c:
de:07:68:f2:fd:a2:6a:fe:83:e2:30:28:fd:6a:17:
60:ce:ac:4d:6b:08:91:7d:37:57:67:ec:6d:2d:8d:
3e:f0:4b:f4:13:c3:e4:69:b3:97:51:57:8c:09:ca:
18:34:11:27:2b:cb:58:9e:86:8e:b8:79:23:e7:69:
ff:42:10:40:f6:e9:88:13:1e:b8:25:6b:45:71:d6:
b5:a6:64:d6:2f:e2:d5:ba:ee:9a:f5:ce:40:7a:b2:
96:4f:d0:70:6b:5c:90:49:f0:1d:41:c7:cf:a6:f3:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:A7:FC:8E:D2:A1:59:25:4C:C4:96:DF:7C:FE:C7:D1:88:E5:29
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:2a:b3:6d:22:fd:d4:bf:c0:8b:be:97:a5:81:02:de:b1:
c8:b8:59:24:e7:2b:18:7b:79:a4:33:af:4a:47:a6:f8:77:99:
b1:97:3d:17:9b:26:3f:39:4e:65:28:5f:ad:9d:74:d2:ea:30:
41:81:7c:16:9f:64:bb:00:00:bb:cd:bf:f0:73:fe:e1:85:42:
cf:75:b2:1a:c4:56:f7:d2:4b:cb:b1:e3:50:a3:e0:bc:cf:57:
71:71:bf:b6:07:8b:96:e2:e8:9a:71:3c:fb:13:b9:4e:a7:f6:
66:0b:ec:6c:53:91:40:92:ce:a3:f2:15:72:95:c0:62:29:cc:
37:79:20:f8:0d:05:d8:82:64:9b:e3:c4:8e:a2:e4:00:7d:f7:
b4:9f:a7:76:bc:d6:0d:7c:a8:4e:ed:c6:67:6a:7d:90:49:07:
6e:da:8e:53:fa:5f:3b:85:cf:e0:89:1f:1f:a2:e6:15:24:33:
63:f0:7f:55:31:59:19:33:aa:73:bf:6b:29:63:d4:59:8b:0b:
78:b8:de:38:04:4b:61:82:3b:0f:8c:16:84:26:e5:7e:41:f7:
07:23:9f:7a:59:bd:d7:a0:0d:d8:06:43:53:1d:b1:23:ff:e2:
3b:5e:03:29:a9:76:f7:4e:35:e9:d8:f1:62:fb:58:2a:56:b7:
5e:fd:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:35:25 2025 by rpki-client