Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: InkMQspbIQoehBn/Lfr66ZF6dO/Tl314y/fYW/+NtOI=
Subject key identifier: 0B:12:4F:A5:FD:C5:C5:A0:95:9D:C9:C2:BA:CC:DD:B2:DD:3B:F8:39
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019634D1B6E9EB0CE6AD753D6109E451F1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0735
Signing time: Mon 14 Apr 2025 15:01:21 +0000
Manifest this update: Mon 14 Apr 2025 15:01:21 +0000
Manifest next update: Tue 15 Apr 2025 15:01:21 +0000
Files and hashes: 1: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
2: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
3: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: Rhb5tRyKz8lfiYFmxZCyJUhrK6qWFJLaoblhlM4WHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:d1:b6:e9:eb:0c:e6:ad:75:3d:61:09:e4:51:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Apr 14 15:01:21 2025 GMT
Not After : Apr 15 15:01:21 2025 GMT
Subject: CN=0b124fa5fdc5c5a0959dc9c2baccddb2dd3bf839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:77:c6:bf:d3:d7:3a:52:2a:f1:8e:44:83:
d8:0a:e8:ae:fe:78:3f:db:d4:6d:6e:b0:b3:6d:86:
41:86:77:a9:5c:06:44:b5:d7:93:d5:33:36:de:2f:
5a:b3:09:e8:08:d1:0e:53:53:7c:df:e7:f6:03:57:
bc:f2:5c:1c:51:d3:ae:e0:be:d2:c0:03:1a:d8:66:
fe:5a:5f:dc:71:cb:d6:fb:f4:62:66:3d:aa:a6:a2:
75:37:a4:9a:e3:08:6e:bb:d0:fa:f7:ba:ff:82:d0:
82:21:32:fa:f3:11:86:d6:cd:96:d9:3a:f7:32:76:
c4:9b:8a:68:c4:86:9c:6a:3a:99:14:79:f1:bf:c4:
00:95:04:2f:22:b9:7b:c0:f5:40:58:a6:ef:e8:46:
54:9e:f1:cc:d5:9d:e9:c4:36:b4:cb:78:09:94:d2:
ce:29:00:2c:97:11:bd:ba:bf:07:be:9c:35:62:85:
a3:0a:f6:76:06:57:e9:60:b2:cc:ae:94:02:e2:93:
78:2e:e3:fe:0d:6e:7f:c2:0e:36:2c:f5:c1:b3:ec:
da:53:1c:89:58:4a:7c:3e:d7:cb:b8:06:e8:10:b0:
49:7c:fb:d7:ef:85:81:bb:6d:05:d2:05:93:89:f9:
c6:90:46:da:c0:55:1a:ff:ff:b6:7a:60:14:aa:90:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:12:4F:A5:FD:C5:C5:A0:95:9D:C9:C2:BA:CC:DD:B2:DD:3B:F8:39
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f0:35:71:30:f1:c0:f0:4a:e5:ca:ae:8e:7b:95:42:76:b0:
bb:dd:df:46:02:ab:d1:f7:58:b9:83:42:dc:32:ed:38:a9:d2:
47:84:32:a1:06:71:4f:0f:a9:3a:3e:74:76:79:12:24:95:40:
ff:ce:32:00:a7:02:26:13:ff:01:85:e6:58:3a:58:1f:5c:bc:
07:a6:b7:af:f0:ff:bc:1f:1f:5a:91:88:80:d5:af:f3:ac:16:
a6:52:b8:77:62:85:1f:64:6a:d6:53:91:4a:5f:10:6b:b8:01:
e0:34:8f:4b:d0:cc:a1:63:19:04:41:cc:40:c0:ed:21:1e:7f:
5c:48:4e:b3:f6:db:e5:01:31:a3:36:22:2b:86:e1:52:38:78:
33:85:b2:ae:75:88:f4:0d:f1:6e:e3:43:02:fb:8a:0c:a7:9a:
9b:4d:ed:88:5b:8f:c5:a6:06:4b:8b:b4:aa:cc:a8:af:09:24:
b2:14:74:d9:d5:4d:1f:40:9b:8c:a6:aa:a6:2c:24:eb:9b:15:
6b:db:ad:67:53:b4:3a:c8:d6:e2:a1:d5:97:f7:67:13:ac:db:
d7:92:7b:44:51:95:f9:54:57:03:dc:b0:9e:f8:be:1e:87:29:
ca:65:9e:c4:75:80:4f:fd:17:a8:83:7c:8c:e3:8b:d2:d6:b6:
8a:e4:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:16:32 2025 by rpki-client