Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: 5NK+UGg8PaVqqpWRck2hmzo8rwN7GqfSGSW+0F1I7FI=
Subject key identifier: 28:71:D2:3D:E3:01:1C:8A:72:30:EE:4F:FA:76:52:6A:A4:30:B1:EF
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 01958F984E14E680F555FD5FCD6D20BF7160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 13:01:18 +0000
Manifest this update: Thu 13 Mar 2025 13:01:18 +0000
Manifest next update: Fri 14 Mar 2025 13:01:18 +0000
Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=)
2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: 0xUw55Gp/VqqrtGJQeJP5715dV1yQc/CIzszb63CoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:4e:14:e6:80:f5:55:fd:5f:cd:6d:20:bf:71:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Mar 13 13:01:18 2025 GMT
Not After : Mar 14 13:01:18 2025 GMT
Subject: CN=2871d23de3011c8a7230ee4ffa76526aa430b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:e4:02:dc:69:d6:e7:2e:5e:42:66:96:81:
a8:89:23:dd:aa:97:bc:c1:54:5b:76:b6:64:5d:1b:
32:77:28:02:a1:9d:67:16:9e:8d:78:c3:e3:c3:37:
a0:2c:d7:85:ad:f3:57:9f:f7:e7:a7:5d:b8:45:9e:
8d:18:ea:52:df:6d:c4:0d:c4:3a:2a:26:0a:ec:a3:
29:07:bf:d7:fc:a0:cf:d8:35:53:93:f9:6b:67:73:
e9:67:24:f6:c6:90:79:db:8c:37:69:b5:2c:21:e0:
78:57:14:d0:13:37:b3:60:5f:7f:d7:f3:53:2e:b9:
4d:36:f1:ef:99:85:98:46:9c:63:f1:6f:4c:d3:e8:
a1:c6:b8:9b:c8:71:3e:85:aa:18:1b:de:fa:d3:6b:
03:5e:77:fe:13:e7:a1:9c:fb:7f:30:f5:2e:3d:8b:
f5:06:50:b4:a5:6c:6b:bd:16:e0:fb:38:b7:29:77:
2f:4f:7a:cc:25:a5:8a:6e:13:a1:19:d5:59:3e:d5:
6c:06:e2:5b:00:4b:20:cb:b2:e8:d1:24:f4:2f:c1:
cd:5d:62:3e:55:82:2d:4b:ca:fc:f3:55:4c:6b:60:
37:9a:45:75:47:3b:e8:0f:ec:28:c7:a3:8a:9f:05:
74:58:6e:12:10:77:58:0d:2a:ef:9e:6e:bd:5d:85:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:D2:3D:E3:01:1C:8A:72:30:EE:4F:FA:76:52:6A:A4:30:B1:EF
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:a8:81:94:a6:68:44:fe:66:81:ae:c2:85:e1:45:92:30:
f6:24:ef:25:c5:11:e3:b9:e7:e2:49:f3:90:86:d0:62:0f:00:
fd:89:ea:0f:e7:dd:54:c5:1f:df:44:01:62:af:68:78:a0:bc:
81:3d:9c:c7:f4:83:d9:e8:28:c8:73:4d:1c:1b:da:cb:8f:0a:
ac:6f:d0:f0:a4:82:a0:7f:a2:4e:34:e8:b2:4e:91:31:4f:cc:
00:6e:06:35:9c:b2:62:27:8a:dd:ad:8e:52:8d:65:d9:58:78:
46:64:bf:23:88:b6:18:61:6e:6d:59:db:c0:09:46:91:e0:ef:
ff:b2:8e:a9:0b:63:ec:c9:22:52:9f:2f:1e:b8:1a:76:dd:61:
9a:40:7d:4b:9c:32:63:01:c4:85:85:80:a5:7a:27:cf:41:58:
15:48:48:c5:4a:51:f2:89:95:ee:dd:ad:89:0b:32:43:43:75:
51:76:df:ba:07:98:d0:87:8c:be:9a:73:ce:48:da:e2:6f:32:
de:13:30:62:64:19:01:8d:33:54:5d:15:fd:5c:86:1b:36:da:
8f:c5:de:2b:03:a4:e8:06:5f:09:e3:1c:64:ce:be:b1:59:b0:
4e:73:19:46:38:b5:ac:fa:c8:d5:12:7c:fa:a9:a3:f9:78:d0:
ec:21:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:19 2025 by rpki-client