Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: uo5I92jlFtxIvXqiBLfoyUimWSM1USimfVBaxuCgX/U=
Subject key identifier: 22:2A:50:0C:B5:A5:A3:94:B8:09:8C:CF:F4:51:FF:96:1C:56:3D:85
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 01965A26E3C217EB51C21B0F9D78FDD8ABB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 21:00:20 +0000
Manifest this update: Mon 21 Apr 2025 21:00:20 +0000
Manifest next update: Tue 22 Apr 2025 21:00:20 +0000
Files and hashes: 1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: sfEqibNEAltuSVY4cne2on54PRqx+QqPM+5GROGoMQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:e3:c2:17:eb:51:c2:1b:0f:9d:78:fd:d8:ab:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Apr 21 21:00:20 2025 GMT
Not After : Apr 22 21:00:20 2025 GMT
Subject: CN=222a500cb5a5a394b8098ccff451ff961c563d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:9c:6d:1f:5c:3f:34:36:03:d3:58:8f:d4:
f3:1a:e7:a4:cd:6b:86:da:15:6c:74:35:1a:19:14:
5e:a4:77:cb:e7:b2:30:9f:2a:7e:32:0d:8b:1c:95:
ab:1e:cf:69:12:59:66:d5:95:8a:56:20:25:02:95:
b6:c3:4a:da:02:64:ed:e7:8b:d6:0b:de:a0:55:dc:
32:41:ab:a0:22:e2:cc:42:c2:da:ae:10:37:ff:f2:
40:65:f8:78:a4:30:04:60:47:62:df:b7:3c:80:5a:
26:47:d9:e3:5c:63:db:ce:8d:53:dd:7c:5a:70:e3:
e6:96:a5:0e:13:c3:4e:ad:5c:44:e7:d9:d3:f3:a8:
f0:4c:fd:ea:44:c1:9a:9c:e7:c7:80:3c:82:ef:51:
10:a0:53:93:d0:0a:8f:68:2b:1f:89:0d:d8:a2:f0:
ef:ac:b2:ce:af:e7:63:50:1e:3b:4b:ed:a1:1d:83:
54:f6:c2:1c:77:fc:48:78:59:7d:19:a5:27:3f:4d:
e7:ed:eb:74:4d:4b:c3:ef:6c:b7:34:ea:60:ac:b0:
2d:fd:29:80:f7:8e:70:93:ff:3c:cc:aa:46:6f:72:
f4:bd:e5:19:41:b8:50:f2:61:0c:78:c9:32:91:b1:
0b:d6:88:14:a6:d3:56:06:03:41:a2:c4:a0:a3:b4:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:50:0C:B5:A5:A3:94:B8:09:8C:CF:F4:51:FF:96:1C:56:3D:85
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c7:a9:6f:0b:92:0b:a8:cf:d4:81:83:52:f5:8e:48:82:e7:
6e:cd:f3:46:90:78:a3:8e:45:df:ac:cb:db:94:cc:b5:aa:15:
0d:33:2f:03:de:3a:f5:68:2b:ff:87:dd:99:f8:5e:9e:e1:aa:
96:cd:ec:23:9e:f0:57:be:88:b3:bb:0a:88:17:11:e9:16:e0:
ba:eb:77:f0:87:0a:2c:24:e1:ea:5f:61:30:1b:ea:ee:a6:72:
4b:e4:b5:20:50:6a:e3:f1:9c:c7:aa:87:45:71:d9:a9:a7:85:
72:bc:11:86:a1:ca:2f:ae:44:48:b8:4d:76:e7:7e:12:40:73:
a3:51:18:0d:81:6d:5c:82:24:28:5c:50:fb:d9:99:dd:78:f8:
ed:09:38:c1:64:8e:d3:33:61:04:0a:4a:19:78:bc:e5:7b:80:
40:65:f9:49:47:cb:40:91:82:94:4a:fe:0a:89:78:4f:0f:94:
91:b2:27:f3:9c:60:ec:ac:f0:0f:e2:1b:6e:73:70:6a:77:8f:
32:cf:e9:5f:de:bd:99:1f:48:47:86:91:5e:16:57:6d:7a:4a:
c2:20:1f:5d:81:0f:c7:e9:98:ca:c7:42:c4:f0:ac:38:95:32:
73:74:45:04:40:4a:4c:4e:64:4d:dc:c0:73:49:e2:dc:7c:c3:
81:c0:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:19 2025 by rpki-client