Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: bS+hun902OT+U5+LsybLQxI/45pdHxrc50UxfzICT0Y=
Subject key identifier: E3:CC:E9:06:DB:79:AB:8E:AC:EC:FA:B2:25:F0:FD:E8:09:FC:09:3D
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019652369F7C8304F950113F717EEB6531D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0DD3
Signing time: Sun 20 Apr 2025 08:00:33 +0000
Manifest this update: Sun 20 Apr 2025 08:00:33 +0000
Manifest next update: Mon 21 Apr 2025 08:00:33 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: +ggynzdOatWBdi8NvBf9X9NhPzv34p6o8USkwwpurwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:9f:7c:83:04:f9:50:11:3f:71:7e:eb:65:31:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Apr 20 08:00:33 2025 GMT
Not After : Apr 21 08:00:33 2025 GMT
Subject: CN=e3cce906db79ab8eacecfab225f0fde809fc093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:79:d9:f0:d9:83:21:9d:94:00:a3:8b:75:
29:b1:2f:40:a4:57:25:7d:91:72:b2:e4:2e:cf:18:
50:9c:0d:74:d7:c6:42:60:1a:9b:93:af:74:c0:66:
8b:21:08:54:70:2b:21:63:ef:dd:e6:96:8c:78:ff:
1a:8d:f3:16:d1:d0:bf:9e:dc:e4:34:d5:d0:7d:a0:
f9:fe:23:67:a2:d3:ae:2a:dc:01:5e:58:a0:74:19:
a6:01:14:d1:e8:93:67:4e:d1:d4:4d:00:ac:a7:9c:
81:12:db:cb:7f:bb:76:6f:7d:4f:89:e4:42:47:23:
41:61:44:a9:c1:01:f8:8d:e8:dc:b4:70:aa:88:9c:
27:96:46:31:03:42:00:00:96:19:d6:cf:ab:30:a1:
d9:bd:47:97:82:30:1d:b6:63:db:16:c0:63:01:bc:
02:11:6d:88:ea:6d:e9:a7:63:5e:dc:99:21:22:f7:
b9:93:a5:bc:f4:64:95:ca:9a:0c:ae:1d:7f:d6:90:
d3:7d:b8:7b:1f:1e:b8:08:07:f4:5b:6e:a7:51:07:
0f:6f:b8:48:0e:dd:f3:9b:28:ae:de:91:95:97:40:
02:62:e4:27:58:65:58:7e:d5:db:7d:6f:ec:40:c0:
cf:a5:5c:77:84:f7:12:43:e1:35:73:ba:04:ed:89:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:E9:06:DB:79:AB:8E:AC:EC:FA:B2:25:F0:FD:E8:09:FC:09:3D
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e3:68:f1:01:ee:de:13:b2:20:58:5e:d5:55:42:42:82:1d:
af:ad:60:ed:b6:fd:bb:8c:03:9c:b4:7b:55:83:03:c1:b3:3c:
11:7e:f1:dc:b8:41:36:ff:0b:8d:84:fa:62:4a:cb:09:d7:95:
90:aa:e4:75:59:62:1c:02:f2:59:4f:06:d4:b7:58:d0:32:be:
f0:77:5d:4c:33:cd:ac:b0:f7:63:d4:b0:51:cb:27:c8:cf:d2:
17:6d:88:4d:c4:65:82:c1:ef:5d:1e:22:fb:fc:4a:2c:95:68:
29:03:00:07:db:85:eb:a4:54:e9:22:8c:1a:bb:26:9d:d9:89:
94:b7:86:d8:65:77:b9:7e:d0:8a:a8:d3:d5:3d:81:d5:07:ab:
ad:11:c1:b7:66:4c:8d:fa:fa:0d:a4:ff:7d:a5:19:e4:06:bd:
03:30:41:b7:cf:a7:c8:ab:5f:5e:af:f5:04:65:1a:a6:6c:6b:
4d:70:13:c1:bd:25:42:5e:61:9a:36:92:79:8b:b6:7b:c2:a2:
3b:2c:f0:a3:a3:71:ac:f2:e5:f0:ef:a1:fd:f4:05:ae:4a:9b:
d7:9d:b7:e9:02:09:00:28:2b:ec:76:ab:f0:d0:01:7b:50:29:
f5:19:45:7a:b7:da:bf:31:3d:ad:f5:4b:4f:a6:c7:7a:f8:9c:
ad:75:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:29 2025 by rpki-client