Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: UHkBpizButLxfZrmp2BPugcq/FKVT6otv6l9+/FsS5s=
Subject key identifier: 6C:84:ED:EB:11:6C:89:8D:15:AF:14:01:27:15:A3:83:BB:8A:61:50
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 0196293BA28B2BA002CD921DBE23FA0E85BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 14EA
Signing time: Sat 12 Apr 2025 09:01:36 +0000
Manifest this update: Sat 12 Apr 2025 09:01:36 +0000
Manifest next update: Sun 13 Apr 2025 09:01:36 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: QbpwDA492C4Lr+ZSCxB17w0IH/Dby7MumJrFOVPaGbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3b:a2:8b:2b:a0:02:cd:92:1d:be:23:fa:0e:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Apr 12 09:01:36 2025 GMT
Not After : Apr 13 09:01:36 2025 GMT
Subject: CN=6c84edeb116c898d15af14012715a383bb8a6150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:8e:6f:a0:f5:35:96:18:ff:3d:d8:c1:09:
3d:1d:20:bc:3b:20:a3:dd:90:9e:a4:01:74:c5:07:
4c:0b:cf:f0:af:c0:a4:d5:4d:12:1a:a1:ab:d6:82:
08:9f:9e:67:67:8e:e9:f4:6d:e2:e5:2c:80:28:93:
cf:5a:d6:09:14:f7:e5:98:e8:d3:b1:9e:a2:4c:54:
e6:55:0e:2f:61:7d:c9:30:6c:b4:d5:a3:fb:c2:82:
10:c7:62:9a:51:1d:0d:44:d2:4b:1f:e9:b9:0d:50:
75:bf:25:0f:7c:ed:39:7f:15:3d:2a:be:3e:83:1d:
77:5d:e6:45:a3:c9:02:d4:94:f4:ff:bc:7b:b1:93:
e1:60:9e:68:78:a7:0c:d7:fc:1b:db:07:83:72:3d:
e9:a4:d4:93:76:2d:9e:7c:18:58:76:75:72:11:09:
2f:4e:4e:a8:9a:7c:d8:56:82:c8:0a:75:ee:b6:b7:
00:34:d9:aa:af:f2:d3:ae:a6:38:44:93:52:2e:07:
1a:cb:4a:01:bc:e4:05:ef:95:6a:96:3a:fe:db:50:
1f:67:b2:cd:9e:60:6e:e6:17:e4:5b:3b:af:54:8d:
c0:a4:39:61:b8:1c:e4:79:9a:e0:48:89:2e:c0:67:
dc:39:14:91:a3:51:b9:8c:4d:43:5d:9d:e8:f3:a0:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:84:ED:EB:11:6C:89:8D:15:AF:14:01:27:15:A3:83:BB:8A:61:50
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b0:20:f7:03:fe:b3:d7:48:b3:78:8a:44:2c:9c:ac:57:d5:
c6:35:85:8e:52:2f:1c:b0:d3:8e:86:67:f7:b3:62:73:53:30:
b9:f8:62:0c:18:2e:0c:ca:9b:c4:5b:85:54:24:9b:92:4c:bd:
c8:85:77:30:e5:44:17:45:e5:40:99:15:8e:19:95:d7:e8:2b:
87:75:42:33:f4:1d:8f:eb:71:73:2a:15:8f:da:e4:53:a3:ea:
d8:07:cc:2b:30:26:e5:38:eb:c7:da:14:aa:3b:27:7a:9e:39:
2f:8c:1b:ae:58:f6:d9:be:85:28:57:7b:79:cd:76:47:07:cf:
7a:57:4c:04:8f:b1:79:18:cb:08:ee:b7:68:43:e6:74:46:10:
41:f9:0c:33:7e:7d:34:56:73:76:f8:76:29:0f:96:b2:02:25:
23:3c:f7:2c:80:fd:b2:e6:52:ed:b6:fc:84:49:22:ea:d1:22:
0d:a5:b3:59:3e:9f:50:a6:3d:a1:fa:a0:c7:68:46:5a:74:b2:
97:6c:a3:34:d7:fe:71:16:6d:7f:5b:b8:4f:73:d0:53:3d:46:
dd:b3:42:70:81:d2:98:c9:a5:06:5f:36:7e:5e:65:05:be:93:
be:64:c5:1f:a3:1b:1c:5d:b5:5a:8c:91:3c:6e:fe:7b:57:70:
81:93:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:54:16 2025 by rpki-client