Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: DDvw6rtWZv3QqkJo7XQM3UVazdLDxUyc1jxpisplVLk=
Subject key identifier: 0A:6D:53:FF:3E:B5:1C:C4:15:1E:D0:2F:73:2D:AD:A4:35:EA:78:60
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 01964CA266CB38B70E55E2F7000A4471A8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 06:00:33 +0000
Manifest this update: Sat 19 Apr 2025 06:00:33 +0000
Manifest next update: Sun 20 Apr 2025 06:00:33 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: Rs2CjHVbjbnnGEafKGjcpPyU+C4u8aoexEVtADEpnxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:66:cb:38:b7:0e:55:e2:f7:00:0a:44:71:a8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Apr 19 06:00:33 2025 GMT
Not After : Apr 20 06:00:33 2025 GMT
Subject: CN=0a6d53ff3eb51cc4151ed02f732dada435ea7860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:ea:7b:27:b9:bb:9b:67:a8:c9:54:2a:e8:
b3:01:6a:ee:3a:2d:f6:5a:bf:6b:40:37:60:9d:a2:
dc:f3:2a:e1:c0:ce:b2:4f:83:6d:42:39:a0:a4:c8:
09:34:bf:34:04:50:48:cb:0f:5d:7b:e1:0f:eb:e0:
81:04:f2:4d:eb:f1:4a:cc:c0:81:78:87:88:ec:28:
87:b5:c3:97:7a:c0:77:bf:04:d0:50:81:9e:0e:a1:
8c:8f:e3:c8:19:c1:0c:ec:33:a8:d9:77:b8:e1:e8:
78:be:eb:22:c2:2c:39:d3:8c:e2:42:86:79:32:b2:
05:f4:06:ce:40:f6:80:6c:c6:b7:88:63:af:59:57:
e2:d1:36:e4:61:62:7e:e0:97:3a:c2:c6:58:84:bd:
c4:f8:0e:95:18:db:e6:6a:a8:23:b6:20:be:94:53:
4f:72:d3:e8:be:8f:c7:31:d0:d7:e6:3d:f4:31:44:
b8:5b:c3:d4:6c:b6:b4:dc:59:4a:e9:21:71:ac:9e:
6b:4c:a1:81:14:fe:c4:3e:b4:07:88:96:cb:1c:17:
12:f3:b6:16:ad:64:3b:e8:bf:c0:c1:88:a0:27:26:
8a:46:b8:7b:68:ce:c2:38:32:4c:0b:de:9e:fc:e0:
e8:60:62:e4:a1:32:1c:40:76:65:c9:d1:c0:76:d3:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:53:FF:3E:B5:1C:C4:15:1E:D0:2F:73:2D:AD:A4:35:EA:78:60
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ce:56:56:0e:72:6e:f4:30:a9:cb:39:e4:06:63:9b:f7:f7:
26:70:81:96:de:b2:d6:ec:eb:3f:b6:d9:4c:1e:e6:29:d8:6d:
5e:a0:31:b6:31:ea:9c:0d:0d:09:4c:40:23:12:ea:a6:dc:c1:
46:c4:60:68:ce:3c:74:13:43:6a:6e:7d:bd:9e:48:80:75:8b:
4d:eb:47:54:08:cc:da:49:7b:28:3f:0e:c2:f4:c3:2d:b4:a8:
4c:66:07:48:50:e7:a3:28:59:ff:71:49:f8:b7:07:4e:c6:12:
0c:0b:23:36:13:4d:62:a0:a3:11:41:27:36:da:c5:09:2e:92:
fa:be:27:d5:82:7f:fd:69:38:fb:3d:22:04:89:af:b5:20:b0:
f5:b8:ad:7c:87:12:30:10:32:de:98:51:7b:64:4e:11:de:fb:
8a:c4:37:a6:57:4e:12:9c:f1:25:07:a7:00:4e:c4:d6:d8:94:
1d:44:df:4d:25:86:60:b1:cb:df:6c:ff:c0:a1:b6:5e:7d:9a:
f0:0a:c3:0b:07:8b:44:14:c0:18:42:74:0c:40:0f:65:06:e5:
2c:9a:f7:63:58:cc:de:83:92:0e:9a:17:a5:23:46:7f:32:b9:
2a:d6:31:f7:c9:d0:72:8e:63:12:99:af:ca:85:b4:ae:a4:b1:
af:a0:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:43 2025 by rpki-client