Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: fZVm8cPyAjEO1Xs2w4IqWNNNzFL+2nqBO3mpTryekEU=
Subject key identifier: 3F:DD:08:4A:58:7A:76:71:D1:48:0A:50:11:C5:82:7D:0C:28:65:E7
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 0196519203023AF4CBB6FD4AF890048384AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 0332
Signing time: Sun 20 Apr 2025 05:00:45 +0000
Manifest this update: Sun 20 Apr 2025 05:00:45 +0000
Manifest next update: Mon 21 Apr 2025 05:00:45 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: 4GUhVgUrn9qbh4c+WXy24zTzNIBBfjq4tm9Eh0896wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:92:03:02:3a:f4:cb:b6:fd:4a:f8:90:04:83:84:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Apr 20 05:00:45 2025 GMT
Not After : Apr 21 05:00:45 2025 GMT
Subject: CN=3fdd084a587a7671d1480a5011c5827d0c2865e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:8c:8f:5e:71:fc:b1:0a:b6:bc:63:0d:93:
15:a5:1a:f3:1c:b8:6e:9a:a7:f0:ef:01:19:c6:16:
c5:71:2c:92:eb:f8:9e:b9:94:fc:8d:42:4e:ff:bd:
a9:de:ba:31:0b:44:5e:08:4c:74:8a:29:7a:df:65:
bb:93:3d:52:7f:e3:30:41:56:7b:4b:86:76:2a:54:
e6:b1:4b:92:46:16:28:2d:cb:fa:c1:b6:c0:d5:19:
40:38:82:48:f0:bc:67:21:3a:0d:48:1a:a0:bd:cd:
92:49:dd:23:ee:7d:bc:bb:e2:79:25:28:f3:77:39:
0e:ea:f8:dd:00:13:03:1c:8c:ae:f6:1c:da:f3:e4:
e7:95:e6:c9:76:44:6e:c8:7e:8d:d8:15:43:1e:c8:
63:2d:d2:94:53:de:40:3a:ee:37:a0:33:aa:48:cb:
75:44:bf:be:4b:1a:cc:f7:9c:72:06:48:14:a9:9f:
4f:47:5b:fc:77:82:cb:66:d0:bf:59:ee:f8:53:3e:
91:a8:e9:1a:35:c3:74:ff:25:94:32:63:8b:24:3e:
73:35:6b:7c:3e:fb:87:11:a1:02:b0:31:2c:87:c5:
9c:5e:24:97:c4:34:87:03:0b:8a:e3:c4:6c:87:0a:
3c:7c:df:f8:7f:ad:68:26:f1:e0:ec:ea:5d:cd:c6:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DD:08:4A:58:7A:76:71:D1:48:0A:50:11:C5:82:7D:0C:28:65:E7
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b8:10:27:4f:12:28:c4:5c:40:48:78:cc:70:ef:d6:77:78:
d7:cd:3f:40:21:54:c0:7c:56:0f:16:9d:b3:3c:bc:01:81:ea:
ee:d2:f5:bc:00:47:26:40:f0:b5:8c:9b:3b:e4:b7:bf:97:a2:
0b:15:86:e6:e5:2e:56:b8:01:6c:75:9f:25:10:a0:03:61:17:
7a:3f:0a:5f:1f:e4:5d:e0:95:a0:7c:43:a9:22:ac:4d:af:7e:
e0:25:5f:1c:3c:65:45:8a:67:22:96:ec:8e:7f:e5:68:c8:5f:
c8:c6:0f:b2:5b:c2:56:c7:5e:01:af:be:86:40:c4:75:34:ff:
ff:1c:3b:fb:9a:11:f4:bc:77:8c:1d:54:ef:a8:65:7f:bb:2a:
e6:36:3b:45:b9:bd:a1:83:f9:76:e9:73:ab:dc:4c:8c:ef:6c:
88:19:be:04:52:58:e5:45:e1:f6:7e:4a:f5:41:c9:f0:00:48:
3e:f4:2a:cb:52:8b:1f:f9:43:97:be:c6:f6:e0:2d:64:e4:c9:
bc:5c:b3:ec:19:33:f5:34:ae:14:2a:2b:d8:13:82:3d:c9:1f:
bd:8d:d7:74:ba:ff:40:b4:69:9a:fb:e4:d4:b3:bf:82:2a:57:
ef:9b:ae:42:34:80:cd:53:71:1b:c8:27:1a:98:77:8a:81:ce:
f1:0a:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:35 2025 by rpki-client