Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File: VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier: a5b2eGcihKlfQRtVXDdGOwzCstj+eM+dAhTe6Ckly4Q=
Subject key identifier: 37:16:13:C0:E0:EA:DE:B9:A2:7F:83:CE:4B:C6:51:0A:BC:93:2E:AB
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 01964F35E9941542A61009F7320EFFA835EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 18:00:55 +0000
Manifest this update: Sat 19 Apr 2025 18:00:55 +0000
Manifest next update: Sun 20 Apr 2025 18:00:55 +0000
Files and hashes: 1: AVXIwLCLhIME5EnzGQR1npjdBLE.roa (hash: 1umjvWLRSMzW2RXwAqjP/wPqEKQLsMIeWrHdQp5MSFI=)
2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: z7acSnm8Ngygx49ocHry0DsoHKjLkRtvHlRqxAvBpl4=)
3: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
4: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:e9:94:15:42:a6:10:09:f7:32:0e:ff:a8:35:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Apr 19 18:00:55 2025 GMT
Not After : Apr 20 18:00:55 2025 GMT
Subject: CN=371613c0e0eadeb9a27f83ce4bc6510abc932eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:e2:87:0e:0c:c9:5a:a4:bb:7c:ea:d0:9c:
cc:26:a2:74:70:35:7e:d4:c0:98:63:4d:d9:ee:16:
5a:1a:b6:39:0f:f9:a3:7f:b8:08:0e:cd:14:9e:95:
08:08:a4:90:7e:60:0d:e4:87:ef:a7:f5:1c:e7:c7:
77:b6:72:15:c4:62:d9:0a:78:ee:e9:7e:47:15:ad:
9d:64:46:ed:2e:68:9d:b3:1d:cd:a7:ab:3b:c9:3d:
c9:6b:f7:52:e1:85:b4:73:a4:e6:c5:66:79:6a:c0:
13:44:10:3f:04:7e:6f:67:f8:f3:3c:95:58:c8:b9:
8c:21:be:fa:72:27:38:08:5f:04:e6:87:4e:c6:fe:
54:63:af:c4:85:02:df:e6:5d:1f:96:19:f8:08:5e:
f7:88:f3:4a:23:b5:87:a2:16:74:21:14:82:f0:3d:
d9:db:c1:7a:c9:61:7b:50:cf:02:0f:ad:d0:bf:92:
75:9a:80:3e:a5:09:98:97:e5:62:32:90:0f:60:22:
51:ba:8c:2a:22:82:5a:3a:25:97:fa:81:66:66:66:
f6:12:08:cb:3b:4a:07:3b:02:ec:b7:6a:71:21:a2:
6d:61:73:f0:8e:92:ea:71:f0:9e:8f:cd:a5:f6:a9:
69:c2:65:c7:42:ec:b6:7c:2b:64:1c:57:89:e6:e6:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:13:C0:E0:EA:DE:B9:A2:7F:83:CE:4B:C6:51:0A:BC:93:2E:AB
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f4:e7:41:bf:b3:c9:eb:c0:77:12:0b:a1:f5:46:a2:61:ed:
5e:4d:6d:e6:83:e0:2e:ac:7b:d0:68:58:3d:35:dc:62:51:b5:
ad:56:46:43:b9:0c:a8:9c:41:0f:8b:fa:b3:6f:c0:3e:93:df:
0d:78:69:0e:cf:71:d5:52:4a:91:2a:23:9f:e8:e2:c6:73:fe:
55:bb:00:1c:67:e7:71:48:40:3c:fb:40:1b:41:c5:5e:e5:31:
2e:eb:32:0d:a9:e1:67:70:47:e6:25:88:f3:3f:3c:d2:13:31:
c4:e8:c1:a1:b3:ae:28:78:b5:a2:7c:a8:dc:1f:5a:45:1a:49:
b6:e3:1f:d7:dc:1c:f8:f9:d4:da:8a:ac:3e:a1:01:b7:c8:d8:
44:61:d6:78:6d:f4:af:4f:28:9a:f7:95:af:c8:1c:c2:7c:55:
96:62:36:49:2c:7f:1d:ad:18:9a:dc:29:0c:32:c9:c8:5f:e3:
0b:c5:f3:de:c1:19:8b:90:16:0d:59:ab:aa:96:e6:4a:b1:3e:
b3:86:90:c1:07:4a:0d:7d:6f:57:47:47:09:19:f7:17:cb:fa:
67:0c:41:fd:d1:0b:cb:11:ee:01:1d:03:e0:07:59:f2:03:2b:
3a:5b:16:66:8a:a3:eb:c8:aa:1c:a5:17:e9:d3:c9:1f:95:e9:
da:88:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:24 2025 by rpki-client