Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
File: vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json)
Hash identifier: 0zAsZEoQGO0/mnOn+Qu/8i4vVmvqSpyXfgVnVZ0xE/E=
Subject key identifier: 22:C5:4C:8A:75:46:27:BF:96:44:C4:F2:C5:2D:A6:B7:12:3D:7B:86
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial: 01960C7AEE6F04194091AE10027A98B877F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
Manifest number: 10BA
Signing time: Sun 06 Apr 2025 19:01:45 +0000
Manifest this update: Sun 06 Apr 2025 19:01:45 +0000
Manifest next update: Mon 07 Apr 2025 19:01:45 +0000
Files and hashes: 1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=)
2: djt1wnEeMWCGixI9JNMPiTXrt7U.roa (hash: fvje1Lm8IIK5mAd7uOyfo0YMgHNd5fDXDiGQLx1jFzE=)
3: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=)
4: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: J9Ck2+22GRQtKCO1dvT80GjR4BO3bglwnBuKKz+c5eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:7a:ee:6f:04:19:40:91:ae:10:02:7a:98:b8:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde75079618691bae1f47bcbed52314496963891
Validity
Not Before: Apr 6 19:01:45 2025 GMT
Not After : Apr 7 19:01:45 2025 GMT
Subject: CN=22c54c8a754627bf9644c4f2c52da6b7123d7b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:d4:08:b3:f8:b0:6c:47:3e:97:86:4a:d5:
e9:6e:0b:d9:2d:1b:48:36:a1:37:96:5f:84:ab:d4:
0e:55:f6:22:0a:94:d9:d3:97:58:b2:62:f0:20:01:
0a:e0:e8:df:13:e4:b4:cd:9c:8f:e4:76:f6:d3:01:
77:39:40:b4:df:b6:fe:49:47:fa:be:6c:6e:e7:f8:
97:f3:d0:22:a7:f4:37:1d:35:2d:47:bc:46:35:86:
6a:ee:b5:74:5b:a0:f1:bd:41:36:1a:7f:83:0d:ac:
1d:2f:33:d5:32:f0:2d:f1:90:1b:83:57:cb:fa:27:
39:fb:73:8a:56:90:24:87:d2:4e:c0:41:8a:ec:c2:
53:8a:6b:9a:12:e6:2e:e8:7e:4e:ba:35:8e:bb:f6:
70:95:ad:3f:56:4b:c5:01:1b:dc:d1:bb:ba:25:89:
7d:b0:97:a1:fa:d1:cb:c8:af:5c:5b:84:eb:75:31:
3e:87:20:9f:6f:d8:09:fe:b8:a6:38:d5:cb:24:6e:
d9:84:ba:29:a1:60:bb:30:0e:3b:1e:fb:8c:9c:8d:
55:0a:55:25:97:a6:e9:c7:1d:52:19:22:17:1b:7a:
06:b7:f4:26:a0:d5:7c:d4:ec:6c:ff:25:ac:85:bc:
38:90:e3:6e:ea:4e:fe:cd:be:75:83:f9:da:dd:53:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:4C:8A:75:46:27:BF:96:44:C4:F2:C5:2D:A6:B7:12:3D:7B:86
X509v3 Authority Key Identifier:
keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:77:c9:df:42:ce:59:fc:85:e9:eb:c5:27:3d:8d:4f:0e:45:
59:a0:72:ae:56:1a:c7:a2:7d:9b:0b:e8:be:24:ba:be:1f:d0:
a8:18:f4:a5:fb:57:76:c5:1b:ae:8f:14:c3:97:ac:7d:7d:67:
d8:a0:5e:26:94:fd:ec:88:f5:24:91:5a:65:03:46:fd:d1:37:
b4:13:cd:5b:c6:c8:f5:ca:d7:36:9d:3c:6d:30:70:8a:87:af:
4b:03:6b:5e:d4:fd:ff:2d:5b:5d:d0:c6:b4:67:7a:07:84:04:
c1:35:8d:a1:0f:91:fe:88:54:db:7d:d5:a6:f5:ca:c7:c7:1e:
5d:d7:69:90:54:72:ff:08:69:b3:5a:8f:10:14:c3:c0:56:ff:
95:02:6b:fa:c7:4b:4a:b4:ac:1f:89:17:75:64:fe:29:9e:a4:
5a:08:f9:95:e2:59:2e:75:b2:55:d5:89:ec:bf:86:a0:44:9f:
d8:60:36:cd:78:74:11:40:3b:20:69:58:5d:db:44:5e:84:5d:
b3:69:8c:b2:46:59:5d:e0:d9:84:f4:5b:27:0b:bd:80:9d:84:
74:05:3a:17:61:44:c2:69:84:b1:6b:3a:c6:5c:bc:a5:87:2f:
01:12:6b:b0:e9:c1:aa:4d:8b:5d:ce:93:90:12:bd:48:24:80:
a3:0e:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:03:41 2025 by rpki-client