Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier: 2vncqngcFkHgfvTBirT/AqGOEuh7UzewU0FyzdMw6aI=
Subject key identifier: A7:ED:1D:BA:63:9B:3E:98:68:7B:1B:2F:B8:D5:9E:91:71:89:10:04
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0196545C59C126B0179440D3802F8EB3EDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number: 0A0D
Signing time: Sun 20 Apr 2025 18:01:00 +0000
Manifest this update: Sun 20 Apr 2025 18:01:00 +0000
Manifest next update: Mon 21 Apr 2025 18:01:00 +0000
Files and hashes: 1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=)
2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=)
3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: 1Wut3Ug/gxOfsf4NfqdJ5s+f2vffBVOoKMohPUlvl1U=)
4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=)
5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=)
6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=)
7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:59:c1:26:b0:17:94:40:d3:80:2f:8e:b3:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Apr 20 18:01:00 2025 GMT
Not After : Apr 21 18:01:00 2025 GMT
Subject: CN=a7ed1dba639b3e98687b1b2fb8d59e9171891004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:39:db:bf:3b:d1:a4:05:bb:6b:e1:e9:2c:
59:36:cb:a4:36:1d:05:e9:d5:92:8c:33:d2:13:82:
05:9f:ad:35:0c:98:b5:32:b4:b8:ae:1d:ea:f5:ed:
82:b0:b8:97:84:fc:1f:63:af:31:fe:a4:a1:a5:b7:
27:16:1c:5b:f5:d6:55:c3:73:0d:a7:12:9c:b0:8c:
bd:2f:16:5f:3d:75:4e:cf:4a:7e:41:84:1c:62:38:
b9:bb:77:e7:12:dc:18:dd:db:82:88:e6:e4:29:1b:
84:ec:b5:d3:3a:73:a4:05:0a:6f:3a:02:62:9a:6d:
83:ad:3f:93:62:69:c8:7d:96:61:22:66:1c:6a:50:
f8:39:15:58:30:27:06:85:cf:91:eb:9b:0e:82:96:
96:a7:82:59:eb:ce:9f:56:b1:e2:7b:9c:65:ae:bf:
d3:32:32:26:ba:71:ed:68:dd:f1:fa:03:7e:29:55:
fc:94:7f:0e:97:40:52:3a:91:41:fd:bc:e3:b8:8c:
4b:40:6f:07:4c:47:05:91:c4:2c:c1:73:37:e0:e8:
18:cd:65:82:f9:e4:9b:17:9a:40:c5:c3:5c:b0:cd:
dc:0f:a8:82:73:e2:c9:8a:74:2b:b3:f5:2d:10:1e:
fd:f1:de:1d:cb:6e:2d:1b:3d:2d:a8:47:e0:33:f8:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:1D:BA:63:9B:3E:98:68:7B:1B:2F:B8:D5:9E:91:71:89:10:04
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:ae:f8:77:85:63:9e:da:69:ad:bd:8b:34:a9:f4:4c:03:
32:0d:79:4f:1a:2b:fb:5c:59:df:ae:15:f9:d9:88:8e:c7:f8:
0a:10:4f:ac:fc:4f:95:e6:1f:12:09:95:b9:09:ba:81:9c:16:
b1:0e:35:e3:3c:f7:75:c5:db:16:9c:8e:5e:77:d8:cb:7f:f9:
41:aa:56:dc:ee:ea:17:1a:ce:15:92:ce:fe:0f:7f:0e:58:51:
06:91:60:21:83:26:8a:5c:1f:e0:6b:cd:bf:dc:53:f7:70:84:
69:cf:18:b7:50:03:4d:8a:8b:98:98:59:de:19:d1:20:e9:11:
40:0b:5d:e0:8a:aa:5a:9f:b2:f2:41:72:68:a8:1f:19:19:42:
1e:33:b5:fd:31:e0:6d:0c:cc:4e:ce:44:c6:8d:c2:0a:98:60:
84:0c:f1:0e:bf:a4:c6:b2:c8:77:09:fe:10:9d:ec:2a:ae:1d:
3a:36:dc:7e:7c:46:ce:4e:e3:5c:ab:17:08:94:90:50:c0:7c:
b3:3f:48:72:be:88:96:07:b4:ff:c1:b7:71:da:19:d5:97:93:
a3:75:b6:c3:f3:2c:6a:a7:83:f4:14:c4:dd:a2:0b:73:39:bc:
9b:38:41:1d:a0:b3:bf:26:8f:64:29:dd:3c:0b:d3:03:ed:b0:
38:f1:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:29:14 2025 by rpki-client