Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File: vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier: m8IfwdtrneAOFzLjhU8P0B4J08QjCcFj6Fj68gclXZM=
Subject key identifier: 71:C4:F9:5D:45:A8:4F:00:82:BA:4E:5B:09:37:34:B8:9D:E5:3B:2A
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019602D254311FB8CC6D442E3B835E1E48C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number: 1501
Signing time: Fri 04 Apr 2025 22:01:00 +0000
Manifest this update: Fri 04 Apr 2025 22:01:00 +0000
Manifest next update: Sat 05 Apr 2025 22:01:00 +0000
Files and hashes: 1: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
2: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
3: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
4: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
5: ZIR_yTw54Vg-opPAQLBsjCA0kZk.roa (hash: IWAm2sXCY8KxHtRY4zBKo5b13l+g7LnQAwj1OVOtgXw=)
6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: eQQLDtbMFNVWqqZgaf+AFGf+jYvKP5RLOeE6ntwYpRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:d2:54:31:1f:b8:cc:6d:44:2e:3b:83:5e:1e:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Apr 4 22:01:00 2025 GMT
Not After : Apr 5 22:01:00 2025 GMT
Subject: CN=71c4f95d45a84f0082ba4e5b093734b89de53b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:cd:d8:92:1a:69:61:e7:45:1b:68:54:58:
f1:21:0f:00:15:fa:f2:8a:ca:fb:6d:67:50:e9:fb:
32:61:35:f5:56:11:65:81:43:ce:bb:5d:b4:f8:ab:
ae:e2:ab:6a:83:4d:8d:28:c1:29:b2:29:1f:a0:50:
85:ee:66:fa:7c:ff:24:86:d0:76:43:95:d2:5f:53:
50:2a:6d:7a:ac:df:45:34:d5:73:8a:7f:82:0a:4d:
ec:6a:dc:e6:79:13:df:67:fd:d3:4b:16:b3:9f:8a:
a6:45:3f:f2:bb:31:47:7d:a2:86:a9:48:ed:2f:6b:
ef:7f:75:20:17:f2:44:46:c1:e0:82:48:4d:2e:2f:
eb:05:77:1a:64:ea:4c:b9:35:a1:fe:42:7b:e9:96:
78:7a:3f:2a:7a:0b:1e:fa:3f:e5:8e:d0:0e:9c:56:
68:50:a2:bc:99:3e:08:78:b4:9a:81:cf:78:1b:06:
8e:35:77:03:1f:73:66:ed:ea:2f:80:25:1e:03:0b:
a8:0a:35:ca:ed:f9:95:df:e4:01:3a:94:c9:c1:28:
99:43:8f:7c:b5:1e:2a:5a:37:ec:39:90:9a:57:bb:
f4:de:fb:a6:de:7f:ef:b5:7c:1b:91:a3:fd:29:84:
41:7b:44:f0:b1:17:59:3b:80:d0:80:be:c5:c0:21:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:F9:5D:45:A8:4F:00:82:BA:4E:5B:09:37:34:B8:9D:E5:3B:2A
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:38:88:db:d0:1d:08:f9:b4:d3:39:f1:b6:80:41:e5:40:
02:53:57:36:45:1b:d9:5f:a2:89:c8:de:11:7e:b2:d6:e6:5e:
b8:bd:e6:5e:4f:4a:cc:51:e9:d8:f5:01:37:5f:a5:29:68:17:
07:7f:fa:32:d7:de:5e:cb:be:70:bf:69:69:5c:0f:cf:c8:13:
d4:15:7f:06:6f:0a:f7:b4:47:07:9e:f4:1d:7f:59:ea:4e:6a:
e9:44:fe:31:f5:e1:05:6a:c1:c0:f6:72:11:20:41:28:3d:ed:
2e:03:b5:e0:e7:2f:7c:70:58:11:1f:45:f5:69:14:dd:22:aa:
4a:7d:6c:3f:13:ba:87:6d:1c:cd:4f:b0:45:e8:2f:74:1e:59:
d2:b9:cb:67:2c:10:a0:74:d8:82:61:5a:ac:36:25:31:99:86:
9a:42:55:30:e4:c5:14:a4:d0:56:63:ef:f1:ec:85:58:3f:b8:
03:46:4e:c0:f9:23:3d:ed:d4:e9:97:72:d4:f9:2e:a0:a6:d7:
47:04:7e:3b:20:9d:61:3c:b2:4a:20:78:71:20:25:67:fd:d3:
95:4a:03:ff:f9:17:3f:03:2d:cd:eb:00:fc:85:b4:1c:00:f6:
c3:e8:d0:19:32:1b:4f:e9:88:9b:ea:0a:f1:10:39:f0:a2:3d:
b4:8e:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:23 2025 by rpki-client