Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: ot+qPd/012qpatqAM+EnllEFYWqnKimkOhJhkZsURo8=
Subject key identifier: 87:91:CD:CB:DB:30:17:21:5C:42:0A:AB:0B:08:DF:31:D1:5B:65:06
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 01965048D3CF70DE08105075A030AB346A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 1003
Signing time: Sat 19 Apr 2025 23:01:12 +0000
Manifest this update: Sat 19 Apr 2025 23:01:12 +0000
Manifest next update: Sun 20 Apr 2025 23:01:12 +0000
Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: 7h7zhOq2KDR6flvYSYH1TTNE2uiYkKuvY6YLbibEovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:d3:cf:70:de:08:10:50:75:a0:30:ab:34:6a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Apr 19 23:01:12 2025 GMT
Not After : Apr 20 23:01:12 2025 GMT
Subject: CN=8791cdcbdb3017215c420aab0b08df31d15b6506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e0:b2:d3:c1:05:53:be:94:53:47:4d:4a:6b:
08:e1:3e:8b:ef:c3:0a:d9:78:6b:2a:5c:ed:05:12:
ff:2b:a0:a6:01:b0:86:7b:f1:90:52:4e:28:08:c4:
f3:5d:3d:e3:74:69:78:1a:1e:4c:56:90:2b:07:41:
28:ee:b8:25:8c:8d:45:db:01:69:c4:21:30:39:c9:
a9:04:96:cf:a5:ee:35:af:0e:fe:1c:77:c5:38:96:
25:d1:18:bf:ed:2a:8c:59:94:f2:e6:0b:1d:0a:8d:
23:52:0e:b0:b2:c6:51:3c:d7:cf:df:8f:6f:57:0a:
79:0e:db:d0:68:2d:49:ff:65:f2:49:f4:96:f4:70:
39:ae:ea:87:03:37:8a:d5:ce:8f:84:2c:0c:0a:a8:
b8:4d:d0:62:f1:a1:52:5d:4e:e0:96:a7:d8:bf:c4:
0d:2a:ab:a2:71:b7:83:3e:6a:25:62:a3:8c:d6:38:
5b:a7:53:6a:db:31:82:58:f7:fa:c6:24:0b:08:92:
92:6c:38:d1:5b:85:88:d1:89:32:06:27:0a:64:32:
c4:c7:8f:82:c4:5b:10:8b:24:fa:e0:c7:c1:eb:58:
70:33:41:bd:11:fc:ff:13:df:5a:fd:ee:56:53:d5:
c5:29:01:e6:2d:66:17:92:0f:d7:d7:7f:d7:a2:1b:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:CD:CB:DB:30:17:21:5C:42:0A:AB:0B:08:DF:31:D1:5B:65:06
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2b:75:8c:45:f7:95:34:96:23:e0:cd:ec:f4:42:7c:ed:02:
c4:e6:c0:57:28:1c:ea:dc:8c:76:93:81:fd:29:48:0c:d6:70:
5d:5d:6b:ce:03:4d:49:d4:59:5d:4d:fd:7d:24:d7:4f:83:62:
05:32:ac:84:ee:48:58:ce:84:a0:e0:a6:fc:36:69:cf:a6:65:
b0:d6:35:19:9b:f7:83:f5:bc:70:3c:f5:0c:ad:d2:94:4c:06:
78:58:c0:a1:41:a4:17:3b:14:b0:38:96:6e:aa:b0:92:47:f3:
cd:16:71:c9:ac:6a:e2:cf:c6:ae:91:59:9c:fe:28:75:0e:4f:
cd:c4:9e:7d:55:1b:03:72:9e:1b:b1:d7:c4:c7:fb:b3:31:48:
42:4a:b7:1f:37:31:7b:71:cf:e2:90:ef:9a:5a:ad:08:58:77:
af:74:ca:e0:86:49:c5:da:10:db:80:f3:b4:cb:aa:97:9d:7a:
e2:37:13:2d:d5:aa:88:c0:31:9a:5a:4d:15:df:6d:88:01:f3:
5f:1a:53:76:a8:ab:fc:e8:ef:85:cd:e3:04:23:9c:34:c8:0c:
e3:c4:e4:2f:81:32:1f:14:55:16:a6:a6:1d:6a:d0:73:2c:11:
58:4a:df:ab:2a:3b:de:d2:4b:41:a0:e4:30:d6:d3:6d:eb:30:
b7:46:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:52 2025 by rpki-client