Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: Z82ZYYi0L1u9O7Qx+t4oU+vPJ556U971Zcx0X1tkf8E=
Subject key identifier: 4B:02:56:ED:30:F6:E0:A0:B5:8C:3F:87:5B:19:69:91:37:88:61:70
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 019687DBCE45CDE560D2E526834A10010B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 151E
Signing time: Wed 30 Apr 2025 18:00:51 +0000
Manifest this update: Wed 30 Apr 2025 18:00:51 +0000
Manifest next update: Thu 01 May 2025 18:00:51 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: BOurbczV9IN6hhXrnfJPnHtocJ8YvfxFcXIyH9jSo0U=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:ce:45:cd:e5:60:d2:e5:26:83:4a:10:01:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Apr 30 18:00:51 2025 GMT
Not After : May 1 18:00:51 2025 GMT
Subject: CN=4b0256ed30f6e0a0b58c3f875b19699137886170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:29:e0:bd:ca:de:b0:bf:5d:4d:12:d8:e8:
d6:ee:f8:be:62:2e:93:90:97:4d:25:27:cb:23:c1:
95:ba:00:b7:47:04:99:b9:ab:4f:9b:f3:68:40:6a:
78:71:b3:d7:29:5a:ca:49:9c:8a:fc:90:9e:4b:01:
06:56:8e:d3:0c:04:3c:0d:85:ed:0f:c7:c9:61:c1:
a1:f8:ae:d6:1f:b4:2c:4b:db:47:f9:35:a7:30:24:
bc:5d:77:57:17:18:38:85:54:8d:4a:b6:3c:07:3c:
fb:e9:d0:b1:af:d1:ad:fb:9e:e0:85:44:9c:01:2f:
f2:a9:86:47:2f:48:54:a6:ec:0e:19:a4:74:46:6f:
c3:21:61:0a:38:94:f3:8c:0d:23:da:d8:48:f9:63:
90:53:ea:6e:80:92:b1:53:14:5d:9c:d2:cf:67:fd:
dd:8e:fa:41:59:6c:15:22:16:af:7a:36:81:40:43:
ae:72:5d:7a:29:45:c8:e7:ca:3e:fc:82:62:02:89:
a8:6d:a5:64:11:d5:b7:3c:15:b9:a0:0c:c1:84:5c:
5c:0b:f2:dc:e3:9c:7f:0f:02:eb:20:ff:c2:b1:d5:
30:b9:1f:47:c1:1e:b8:21:15:24:39:65:b3:a1:36:
e5:b1:b6:c6:9b:a6:3c:e5:93:db:85:2b:14:cb:15:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:56:ED:30:F6:E0:A0:B5:8C:3F:87:5B:19:69:91:37:88:61:70
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:f2:e3:ad:a0:13:97:02:4c:9a:af:70:6b:f9:13:d4:ed:
88:46:3c:81:a3:9e:2d:c9:7f:18:1b:e3:f4:cb:ae:b0:f6:a5:
6e:23:9a:86:48:44:c1:9c:4c:0e:44:e1:b0:66:62:68:90:66:
ac:c0:17:36:a3:3f:f6:25:13:98:6a:5b:05:59:c8:9c:1d:03:
aa:cc:a5:25:51:c5:78:f0:d6:6f:bb:52:36:f6:b8:6b:a8:dd:
c9:20:5d:47:b6:df:c4:bd:a9:2d:61:b2:1a:45:1a:02:1f:a3:
a6:c5:c4:5f:d2:a3:4e:be:25:eb:77:34:b8:12:1e:af:b3:37:
80:e6:77:af:74:74:46:29:c1:dd:1e:7f:48:67:0f:c4:a8:79:
a7:37:12:6e:ff:2b:4c:85:10:a5:47:98:f1:ae:11:c7:11:d4:
88:f9:e5:64:c5:1f:cb:70:41:22:d8:a9:64:34:a4:e1:64:c7:
5d:f6:46:e9:41:4d:61:33:a1:bb:b2:1a:2c:ad:74:cf:2d:64:
2d:98:6a:54:96:93:21:8f:ac:dd:bb:3a:5d:36:e8:a8:cf:92:
1c:43:73:04:c9:da:58:ba:7b:e5:c5:cf:15:1f:55:4d:02:b3:
cd:87:84:e2:ef:78:3d:ee:3f:0f:b4:ff:02:8e:73:66:39:e7:
5c:29:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:23:04 2025 by rpki-client