Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: qh9DZlRXfLKp6t6HOeh5xlVTPkh8xugEMKZecsQpXqk=
Subject key identifier: B1:C0:96:20:98:AF:DF:28:51:B1:3E:78:61:14:02:08:D9:08:0D:E7
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 019656B7D7E0931B397CCF152471846EE886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 148F
Signing time: Mon 21 Apr 2025 05:00:10 +0000
Manifest this update: Mon 21 Apr 2025 05:00:10 +0000
Manifest next update: Tue 22 Apr 2025 05:00:10 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: jOqPGb0kfZMlTJb9O9epJsQsNGWoBTwBcLFziSc9IsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:d7:e0:93:1b:39:7c:cf:15:24:71:84:6e:e8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Apr 21 05:00:10 2025 GMT
Not After : Apr 22 05:00:10 2025 GMT
Subject: CN=b1c0962098afdf2851b13e7861140208d9080de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:27:d6:ca:c1:d1:8b:75:cf:46:95:a9:1c:
1a:f7:93:5a:89:96:9b:4c:dd:5c:ab:e1:f5:f9:93:
f7:84:92:d0:e2:37:47:26:03:ae:e5:45:34:92:a7:
3b:ec:62:13:91:ea:eb:09:75:c0:2f:01:49:50:04:
23:04:c0:f3:95:ee:19:70:d9:4b:fa:5b:fd:7d:87:
71:06:89:b2:0e:8a:ac:8b:35:d6:9c:86:dc:9e:ec:
52:6b:9f:63:78:d5:e3:13:bf:6f:73:39:73:b8:52:
b4:1e:67:c1:ca:38:e8:d7:55:c4:40:54:31:d9:74:
46:e2:25:18:69:92:7a:de:fc:f8:f9:d7:0d:33:7f:
90:84:25:00:e6:96:0e:8e:11:64:d1:f1:e1:37:df:
6f:af:9d:c1:8b:57:6b:00:bd:a0:22:b3:06:30:56:
a7:eb:8b:c5:56:95:9e:4f:e8:36:08:26:f4:cf:eb:
77:1f:b1:15:ce:2b:e0:57:16:8c:97:ce:96:21:5e:
58:80:99:15:30:02:f8:84:06:0e:10:16:b8:0a:ad:
93:f2:3e:4e:7c:17:2a:d5:c3:b4:10:7e:31:95:bb:
d6:0c:2e:c2:18:ac:84:5b:35:06:d5:02:2d:31:d2:
be:56:ea:c5:f6:d8:dd:72:25:a3:41:78:f5:14:c2:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C0:96:20:98:AF:DF:28:51:B1:3E:78:61:14:02:08:D9:08:0D:E7
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:aa:79:c6:44:e8:1f:9c:b9:e1:55:af:d6:5f:4a:c3:f1:97:
41:70:b4:62:24:5d:22:7e:c4:1a:89:9b:ed:9e:9e:00:e1:82:
db:7e:f0:38:d8:8f:45:71:99:6a:8f:d2:98:44:a5:fa:e5:55:
83:bf:81:21:ae:2e:46:44:1c:f9:90:08:f0:e8:f4:09:16:b5:
45:3e:b5:ac:c0:dc:b5:96:e5:c8:bc:c8:d9:42:d5:51:14:75:
43:47:c8:a8:15:b5:9f:e7:02:78:75:ed:aa:bc:4a:28:7a:b6:
f9:83:57:1b:2b:98:82:53:f9:e6:fd:3e:5a:9e:78:44:a2:ae:
fd:47:49:27:6e:af:92:20:70:2c:d0:6b:ea:a1:f1:36:e8:0d:
51:93:cf:81:5a:17:d3:c1:19:a9:df:dd:74:7b:35:aa:a3:93:
df:cb:dc:a8:88:54:e1:d0:cc:5e:76:3b:42:2c:85:e3:17:0d:
4b:27:d3:98:fc:9d:4c:e9:96:d2:8b:49:27:79:94:de:ac:1a:
e7:e3:15:e5:50:20:40:ef:07:51:c8:b4:fe:60:ed:3f:67:3d:
c6:a6:cb:96:0b:b2:fa:7c:87:54:ba:f7:ca:ad:3f:91:78:ab:
f0:f3:c9:19:8c:dc:c7:98:5a:8f:31:ae:b3:df:3e:ca:ab:5d:
e3:7c:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:51 2025 by rpki-client