Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: /zIL/QEPSN8DPjGYn6BD5hHWOKAxj2fSZ/gZrM/gWaU=
Subject key identifier: 6F:30:40:9B:52:CB:37:25:6F:A5:05:87:A6:9B:06:0A:7F:24:83:0C
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 01964C3500E8355F0F15DE58E2EDE3197216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 04:01:04 +0000
Manifest this update: Sat 19 Apr 2025 04:01:04 +0000
Manifest next update: Sun 20 Apr 2025 04:01:04 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: lXy5zpdSK1uzx/kWm9a9k+hqqjT21/0jQ+apOoa3ysM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:00:e8:35:5f:0f:15:de:58:e2:ed:e3:19:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Apr 19 04:01:04 2025 GMT
Not After : Apr 20 04:01:04 2025 GMT
Subject: CN=6f30409b52cb37256fa50587a69b060a7f24830c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:0d:aa:fe:45:9e:52:59:e6:fa:03:fe:b0:
56:71:14:9a:98:3e:90:e8:10:35:38:ea:4f:8b:b0:
eb:ad:37:e8:63:b0:a2:01:7c:5d:b8:5a:da:ce:b3:
1d:e6:1b:6b:c8:b0:ee:58:8f:21:6e:fc:a7:8c:94:
2c:3b:20:5d:de:92:79:3e:88:4e:2a:98:f0:fe:41:
10:58:cb:7e:4b:6d:fd:a4:c6:82:f4:39:78:8b:8a:
57:5f:d4:a1:ba:24:2d:cb:0d:03:7e:8f:9b:b3:d4:
2f:9c:16:0c:6c:9e:86:3a:e4:9e:11:55:75:bb:6b:
e6:a4:48:f1:c0:d5:91:63:6e:ed:a1:60:01:20:72:
71:af:5d:c1:00:30:7e:c4:ce:c3:78:23:46:4d:8f:
d2:76:98:bf:8f:85:4b:42:d7:60:76:1a:99:e6:10:
40:7c:0c:8c:e5:84:f2:36:3b:d9:58:82:04:8e:94:
1c:85:66:31:d8:df:4e:d8:b5:56:20:b8:d9:45:69:
61:1f:5e:a3:2f:f1:ed:5f:6e:d0:a7:46:71:ea:d3:
4f:e7:02:50:1c:db:9e:c2:0a:28:0a:8e:ed:62:51:
a0:71:9f:fb:ec:44:7f:9e:db:3f:25:5c:ba:e1:95:
d2:01:ad:1f:08:3e:31:33:bd:d3:1e:2f:21:66:10:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:40:9B:52:CB:37:25:6F:A5:05:87:A6:9B:06:0A:7F:24:83:0C
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9e:b5:db:c0:24:cc:07:ad:f8:86:d1:af:80:13:e7:bf:22:
44:57:ad:22:fb:a9:53:26:3c:8d:2a:2d:9c:f4:85:36:3b:e3:
98:f0:9d:b3:73:e5:55:61:32:e9:c5:4a:e1:cd:ea:34:0a:06:
ac:b2:6b:83:52:e9:ba:61:20:34:f8:4a:21:3d:60:64:ea:89:
5d:de:aa:0b:0d:76:99:5e:93:3a:d3:ab:a0:4a:c2:c9:3e:c8:
60:19:9a:eb:06:20:c8:84:1d:24:a8:21:6d:6f:54:b5:51:17:
e0:a6:b6:7c:e0:4a:e7:40:73:15:d2:cb:b0:4c:a6:28:a0:98:
c2:7d:12:c5:8d:aa:01:23:a7:8e:64:ce:b4:88:c2:06:b7:ec:
b6:b8:eb:2b:c6:e2:96:d8:47:f5:15:f9:4e:2d:33:af:4c:28:
6a:af:0d:6e:38:de:ad:e4:61:94:f5:1e:d4:a4:f6:04:30:19:
f2:d1:aa:c9:64:5d:ee:6f:a1:3c:a6:d5:63:9d:29:90:1e:79:
09:23:db:d1:43:87:f2:63:68:59:95:87:ad:fb:49:46:b1:af:
c0:9f:a8:02:65:3e:c5:b1:80:f2:b5:e7:27:8e:6f:70:37:85:
fe:a3:7c:23:c5:11:c5:18:16:71:a3:41:56:5f:62:d4:a2:7a:
57:73:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:50 2025 by rpki-client