Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: 6WlpbKV9svaEigYG42RreQoKv2q5bQAPThaznTXw/Pg=
Subject key identifier: C4:1F:72:12:83:53:9F:4C:67:7F:DA:1C:E3:F7:C7:FD:74:03:6B:96
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 01968736B4850FC79F120CE5A128531DE866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 10BE
Signing time: Wed 30 Apr 2025 15:00:31 +0000
Manifest this update: Wed 30 Apr 2025 15:00:31 +0000
Manifest next update: Thu 01 May 2025 15:00:31 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: eQ7xto9XrpzGOMu1blkS6PQY98CY2S9TkPyQdXJwcaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:b4:85:0f:c7:9f:12:0c:e5:a1:28:53:1d:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Apr 30 15:00:31 2025 GMT
Not After : May 1 15:00:31 2025 GMT
Subject: CN=c41f721283539f4c677fda1ce3f7c7fd74036b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:16:75:e4:d8:8b:33:8d:12:5c:6d:03:94:
ef:c8:30:ca:1d:e4:1b:8f:1f:96:a3:54:30:cb:48:
5f:4e:17:21:df:7f:17:26:51:05:d4:32:3b:f0:47:
37:11:17:6d:41:55:53:b9:a8:c2:fb:5e:80:05:15:
f6:95:cd:38:1a:b4:4f:55:14:51:6c:22:40:46:42:
26:f6:04:80:f2:5c:9a:e6:9a:09:0f:15:67:a3:1b:
b3:f4:54:f6:aa:7a:92:b6:47:d1:84:63:b1:85:64:
bc:52:ad:33:06:f3:d5:1d:57:e9:b9:26:76:00:7a:
60:57:a4:97:bd:f8:98:0c:68:ac:41:ef:79:91:f9:
f2:62:bf:23:0b:31:91:64:80:96:13:98:51:d8:9f:
8a:d6:de:ae:f6:f4:b0:f9:cd:ce:8d:e5:6f:6f:78:
d0:c4:d4:f4:47:13:4d:43:dd:55:bc:41:b4:04:29:
34:f5:be:34:e4:85:3a:be:15:39:19:5a:03:be:70:
d6:c5:25:d7:56:c7:14:53:2e:d9:36:4e:e5:ce:04:
8f:77:e7:ec:6e:35:ce:65:a9:99:f9:63:98:81:d6:
75:43:8a:a6:01:8b:fc:57:ea:83:e3:2f:32:3d:01:
f0:4c:98:82:c1:ea:23:fc:1a:de:da:59:a5:a9:1b:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:72:12:83:53:9F:4C:67:7F:DA:1C:E3:F7:C7:FD:74:03:6B:96
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:14:1f:31:37:8c:44:0c:7a:b4:a2:33:b9:9c:25:c2:c9:dd:
db:fe:a4:34:38:75:14:e0:46:7b:44:3c:2b:8c:66:82:21:ef:
cd:ea:ad:08:e4:06:9c:11:d8:55:ad:e6:bc:84:40:70:ab:c4:
f3:9f:d2:98:f5:32:d4:9d:f3:0c:ce:19:60:a6:c0:db:0b:85:
36:d3:0c:d6:4f:9a:3a:ef:c1:70:55:f4:50:00:13:26:5e:ea:
72:7f:66:9c:68:6d:a1:4b:fe:7d:af:ad:83:43:ac:a3:8d:ef:
02:be:4f:07:4a:32:5a:9e:56:98:e3:64:fe:f4:c9:b6:a0:0f:
61:4a:08:d7:c9:97:71:52:f7:37:95:01:c0:cf:db:09:66:93:
ad:fb:21:29:f2:a3:8b:fb:f2:12:e8:99:11:6c:93:11:9f:03:
22:20:f5:04:eb:47:24:f1:58:d5:e5:e0:99:e4:e9:e7:3d:bf:
0b:de:e5:cd:bf:66:f0:67:40:20:19:2a:fd:3e:e4:3e:36:a8:
d9:87:8c:cf:ee:7a:89:97:df:ca:bb:69:0f:ea:c7:f5:53:25:
17:49:29:77:f5:64:5e:b3:8c:86:bf:ad:7b:cb:04:f1:bf:4e:
75:9d:3f:b4:2c:f7:14:c8:ce:93:e1:a2:25:4b:c6:58:23:c5:
2f:b8:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:28:58 2025 by rpki-client