Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier: OdDWUPYhOJUGzaG//S+izOu6vUYhCNPt19VDJGb7kOU=
Subject key identifier: DB:94:CF:DB:8D:D2:7A:01:CD:97:BC:DB:EE:8A:5D:1E:DF:3D:74:B4
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 019645FBB200928016BEFB9DFA81C2DFA5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number: 0259
Signing time: Thu 17 Apr 2025 23:00:45 +0000
Manifest this update: Thu 17 Apr 2025 23:00:45 +0000
Manifest next update: Fri 18 Apr 2025 23:00:45 +0000
Files and hashes: 1: 3e70ZZqi33Dl2b2l60x4ZQeIHq8.roa (hash: ezFIoSxfuKrnfHFTC4lkRDwVwAnl+AIoLI5PIzwvHuI=)
2: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: NTxUMtsIbailCflOPRFaLnaqz6SUVxFMK6S+qzInjHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:b2:00:92:80:16:be:fb:9d:fa:81:c2:df:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Apr 17 23:00:45 2025 GMT
Not After : Apr 18 23:00:45 2025 GMT
Subject: CN=db94cfdb8dd27a01cd97bcdbee8a5d1edf3d74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:99:5f:ce:c8:1f:79:9a:43:39:b5:97:84:
bc:c3:cd:fa:80:fe:4b:ff:3d:d6:9d:bf:79:19:3f:
cb:87:bf:6b:5d:ba:53:47:69:a0:ca:aa:3a:be:f4:
0f:f4:9b:7f:70:37:43:20:55:09:54:8d:d3:02:f1:
d5:de:a5:ec:57:15:e9:db:59:f6:ed:dd:b8:c1:09:
87:78:b8:47:1b:c0:23:a0:2c:80:6b:86:3b:ac:89:
ad:67:d9:1c:9e:f7:2d:36:ac:36:c7:6f:fb:13:38:
4e:49:b2:fb:39:13:d1:19:6b:3f:db:51:77:c1:48:
f5:eb:4a:18:e1:86:c1:39:be:4b:56:4d:27:a2:8e:
97:43:28:1b:2e:57:40:83:ee:d1:f9:30:c4:96:04:
88:2a:3c:46:f1:01:b8:f1:fa:09:71:7a:88:e2:e0:
68:f3:6d:17:5b:bc:69:f4:86:b1:20:03:2d:7d:7c:
0a:f5:ae:da:6b:3e:07:2d:f5:e1:ab:fb:a1:be:25:
38:ca:ab:4e:c7:a4:6b:60:ed:18:65:87:49:cb:28:
2c:78:21:d0:36:32:fd:d3:2c:7f:d1:80:1a:1b:d8:
35:f8:5b:f6:53:dc:18:a1:eb:80:75:10:10:32:b7:
6c:c1:06:81:ac:83:87:3f:cf:3c:33:de:0c:d6:3a:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:CF:DB:8D:D2:7A:01:CD:97:BC:DB:EE:8A:5D:1E:DF:3D:74:B4
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:97:d0:54:bd:53:ec:ff:2d:29:f1:96:4f:d3:d1:e6:95:e2:
f0:b3:90:28:d6:14:be:79:41:42:de:98:54:62:dd:45:e8:5d:
4f:39:23:6f:1c:cf:c1:64:51:7d:b8:62:29:c2:ce:93:2e:f9:
31:60:a4:1c:87:a5:fc:d8:2b:03:e8:90:57:a2:9d:c6:ee:95:
c6:da:04:44:1e:54:4c:ee:c4:3a:1d:62:16:ba:f9:93:ee:56:
53:a9:f4:d2:6a:0c:22:84:8e:ce:96:9c:02:96:62:9d:5d:4f:
67:08:73:6e:6a:4e:10:15:34:51:9f:7b:14:de:1d:ca:72:32:
87:98:f2:73:b0:03:65:49:8d:c7:1b:7a:7c:f0:88:13:44:e5:
86:2c:09:c3:95:c0:bb:d7:50:34:7f:e7:49:d9:5c:bf:b8:0b:
08:c4:f0:cb:77:a3:26:a1:23:a4:ec:8f:b6:0d:d3:d8:82:85:
dd:bc:34:cc:37:da:fa:46:4a:05:13:91:84:cb:10:4b:ae:52:
2d:52:cd:d7:b7:6a:08:f7:5f:52:29:18:e3:75:09:da:e9:1d:
46:51:bd:d3:c3:71:dd:df:59:8d:33:7b:51:01:b6:e8:4e:44:
1d:c5:80:4d:34:20:b0:0a:05:20:0b:a2:86:0b:5b:9f:ee:12:
d3:67:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:12 2025 by rpki-client