Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: k1l3hzacAM7nyXnCJK5l+Vh2DsMaiBRPD7+c+J8HYm8=
Subject key identifier: 7D:97:0D:0D:00:1B:67:FB:69:8F:6E:0D:6D:0E:CB:E3:30:DE:67:D8
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 01964A7D0CE3FB062FA277DA369BFEFDCEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 1489
Signing time: Fri 18 Apr 2025 20:00:31 +0000
Manifest this update: Fri 18 Apr 2025 20:00:31 +0000
Manifest next update: Sat 19 Apr 2025 20:00:31 +0000
Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: wubTJ5qtjbPED33VkQznrM9E+CUF9xVhat+3gbhVwgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:0c:e3:fb:06:2f:a2:77:da:36:9b:fe:fd:ce:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Apr 18 20:00:31 2025 GMT
Not After : Apr 19 20:00:31 2025 GMT
Subject: CN=7d970d0d001b67fb698f6e0d6d0ecbe330de67d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:38:ca:1a:8e:28:7d:32:23:15:5d:25:6a:
12:82:cb:f0:26:bc:15:e3:49:cf:bf:64:0f:88:a8:
72:19:11:c1:ba:05:ee:92:ef:4c:11:32:92:f4:fb:
7a:c5:38:8f:9b:b0:bc:5d:44:d0:58:31:10:97:94:
bc:f9:97:f0:5d:25:55:60:e4:62:9b:2a:8f:71:05:
4f:40:0f:df:18:d4:c1:89:77:14:3c:13:5b:72:ff:
19:dc:03:d7:9d:f0:20:87:e3:f7:a4:1c:27:17:7e:
c4:79:ff:b9:7a:8a:b1:74:a5:91:18:97:1b:97:83:
79:82:0a:25:88:60:e8:8f:fa:d8:3f:b9:d6:f4:de:
52:49:47:1f:c4:9d:d7:b6:d5:74:5f:ac:30:aa:a9:
05:52:60:03:ad:f5:fa:76:d6:a5:5f:24:93:53:d3:
21:50:35:89:a2:1b:df:fa:90:fc:33:7e:42:33:2f:
53:a1:96:c5:c4:24:a3:1e:e8:81:fc:84:69:e1:93:
c5:31:e0:26:82:38:2e:14:62:a0:91:6a:95:f9:48:
63:4b:e5:46:2e:9e:58:76:76:12:9a:cb:d9:c5:2b:
69:df:7f:22:22:7c:f6:21:5b:0b:e4:ee:42:fd:55:
18:eb:75:15:9d:3a:df:57:ef:2b:43:f7:02:9d:e8:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:0D:0D:00:1B:67:FB:69:8F:6E:0D:6D:0E:CB:E3:30:DE:67:D8
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:da:47:da:e4:fe:01:b9:de:2b:e3:bd:7a:bb:01:a4:46:61:
a7:fd:03:0b:c3:0a:df:63:e8:9e:0f:af:b0:71:b4:fa:b5:bb:
ae:d5:ba:f4:ac:21:77:62:dd:a7:96:4b:50:77:a7:7c:9f:11:
96:e6:eb:60:71:33:3c:a6:eb:59:eb:54:25:a7:6b:52:67:6b:
60:52:2a:dd:46:8f:af:cb:d2:3e:b9:b4:2b:cb:10:f6:00:ed:
cc:0f:e9:ea:32:70:4a:16:8d:fd:7c:dd:31:13:f0:20:0d:4d:
23:48:27:73:b3:fd:a0:cf:d8:3a:e3:43:cf:fa:14:06:11:0c:
b6:35:d6:18:cc:6b:98:d4:94:ca:75:99:77:45:fd:de:e8:56:
05:a0:67:f0:f4:9f:72:d7:e6:29:ec:4f:0b:13:f2:eb:92:7a:
b6:c8:1d:bf:57:b8:3c:a1:31:9d:fb:20:d1:18:3a:4c:ee:3b:
f8:fd:6f:78:4f:f4:76:d8:4e:24:a3:05:e8:a3:31:65:97:ea:
7f:61:96:08:b8:de:b8:6b:43:c9:d8:34:d3:f4:de:d5:b3:1e:
9e:c4:26:11:96:b1:36:51:62:91:c0:fa:4f:4f:bd:b4:fe:3c:
7a:c0:e8:bd:40:b3:fe:f3:ca:c6:c7:56:30:b0:e8:dd:16:ea:
88:f2:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:24 2025 by rpki-client