Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: bPR9qBRUbJVTsNYqxMQOrl9+b7nAPWLSZiFZ6jP/WpE=
Subject key identifier: C6:90:C7:D7:31:E9:1C:C1:79:FF:10:DA:D7:3F:82:FB:74:B5:09:00
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 0196851139C399A7E691F07897BCA3389D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 0950
Signing time: Wed 30 Apr 2025 05:00:20 +0000
Manifest this update: Wed 30 Apr 2025 05:00:20 +0000
Manifest next update: Thu 01 May 2025 05:00:20 +0000
Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: Yt77ELAXvnPgidALfKWTC7qYc3Ck+m8NP4fvzq4vGcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:39:c3:99:a7:e6:91:f0:78:97:bc:a3:38:9d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Apr 30 05:00:20 2025 GMT
Not After : May 1 05:00:20 2025 GMT
Subject: CN=c690c7d731e91cc179ff10dad73f82fb74b50900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:06:2d:b0:ef:a7:31:8b:dc:24:5c:93:08:
98:8c:47:fa:42:d8:40:04:0a:70:99:d3:14:1f:23:
94:e1:bb:47:d7:ba:d0:8a:dd:19:04:39:23:bb:40:
ee:73:93:04:de:a5:0e:e1:c8:51:f2:99:df:e2:7d:
be:81:15:f8:ce:37:81:51:cb:e1:b8:35:67:70:4a:
72:bf:94:25:9c:be:52:dd:d5:e0:a2:b6:dd:14:c7:
15:a9:47:14:25:0c:d8:ee:7b:76:9d:31:1d:fc:f4:
95:f2:19:64:1b:49:23:7d:56:6f:d3:fb:52:93:ba:
e0:4d:9f:06:8d:76:bf:36:8e:cb:b2:8c:04:c5:89:
64:8a:80:7a:ed:fd:a8:49:a1:70:4a:35:f8:eb:33:
bc:bf:68:75:7b:b6:96:6c:ba:b0:27:e1:13:97:47:
9c:84:f8:a9:8c:0f:ba:05:82:03:83:66:2a:bf:76:
3d:0d:46:34:72:b6:51:de:e8:5a:be:aa:96:15:d7:
23:06:21:c2:7e:6b:d2:49:52:76:31:bb:d5:f4:13:
fd:81:ba:e2:93:cf:35:f5:89:5e:b8:98:c4:1d:c1:
ed:9b:a2:dc:0c:73:4e:ff:7d:cc:51:9d:50:42:d2:
4c:bf:81:b4:81:d5:9d:c1:23:d7:20:94:e3:f8:34:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:90:C7:D7:31:E9:1C:C1:79:FF:10:DA:D7:3F:82:FB:74:B5:09:00
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:96:e2:97:5c:c8:8e:c8:91:45:fd:1c:02:d3:98:d3:ca:ac:
5a:f6:2f:01:a1:c4:f6:e2:a3:62:26:d4:45:77:63:83:9e:be:
ce:75:91:ba:ec:e8:ce:da:67:71:62:78:3b:32:40:1c:dd:ad:
e9:09:25:de:68:d9:26:da:0b:11:be:09:5a:0f:be:7b:f6:72:
bd:6f:65:11:12:e6:22:07:10:97:2c:43:4c:a1:29:36:9a:25:
52:95:bf:c4:38:4f:39:8e:9f:25:a5:2d:b5:e8:4b:ba:2b:74:
18:cd:2d:c1:2a:a8:9f:93:ed:76:18:57:13:06:ce:34:86:80:
29:4a:4e:85:2f:d7:1b:24:34:7c:c2:2d:46:8d:0f:51:6c:cc:
84:39:f3:b4:65:e7:58:3b:bf:29:14:d4:2f:0e:3b:c6:58:00:
bb:da:f7:10:08:39:a7:1a:1e:47:0c:7a:be:f5:ad:db:2b:02:
1b:78:d4:26:19:41:e1:cb:e2:a3:73:96:e0:c4:ad:20:97:52:
13:88:5d:a8:8b:65:6c:8d:f6:da:43:62:0e:9e:af:e8:0f:fe:
c5:6b:03:2c:a1:c4:ff:c2:a4:97:23:a2:64:3a:61:64:02:6d:
8f:5e:51:7d:ab:fd:74:49:ad:b0:ac:35:89:3f:43:e9:0d:67:
30:f3:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:10:55 2025 by rpki-client