
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File: vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier: Dv2sVuQdfkOdqx/g5+o8etdWktzMXF4w1Sy0xiTsF+k=
Subject key identifier: 31:1E:54:6D:2C:F2:39:EE:7D:58:6D:42:FC:D0:B4:63:57:81:2E:E2
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer: /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial: 01967DC619B687573519082D07E7ACF4751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number: 122F
Signing time: Mon 28 Apr 2025 19:00:56 +0000
Manifest this update: Mon 28 Apr 2025 19:00:56 +0000
Manifest next update: Tue 29 Apr 2025 19:00:56 +0000
Files and hashes: 1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: M3OPGytYIvP0nKyS0HJNxSjplv6NQwsIz8d7Go1L16k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:19:b6:87:57:35:19:08:2d:07:e7:ac:f4:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
Validity
Not Before: Apr 28 19:00:56 2025 GMT
Not After : Apr 29 19:00:56 2025 GMT
Subject: CN=311e546d2cf239ee7d586d42fcd0b46357812ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:7e:7c:ba:0b:9d:92:0c:f7:62:a2:c1:67:
e6:da:d9:76:5c:af:fb:0d:1e:3e:4f:1f:f3:85:52:
4d:88:54:a5:27:89:48:27:a3:6d:e9:2e:64:65:dc:
b6:03:ac:51:11:d5:72:34:99:bd:af:3a:af:d6:01:
c2:7f:f3:ed:39:0c:8c:2e:ac:d7:75:e1:1f:91:d4:
de:57:72:05:70:49:b6:37:bd:a1:1e:fb:ee:2b:20:
59:eb:fb:c3:e7:0d:a3:6c:e9:97:5b:6f:5a:97:29:
e7:f3:ad:40:9b:db:e2:c5:e2:51:2b:21:0d:aa:9b:
e2:b3:93:79:3b:76:30:0c:83:c9:00:3f:b9:e5:a7:
d4:44:68:9c:f2:04:e9:69:a2:4c:06:30:d8:77:0c:
35:ed:48:14:1b:57:7b:40:ca:9a:96:35:e9:78:5b:
40:a9:86:01:60:31:b6:ff:8b:7f:c9:3e:34:57:64:
7f:f3:28:38:dc:aa:ce:0e:0f:00:4f:f1:17:a5:bf:
f7:ba:1a:c4:15:84:0b:7c:be:44:69:b4:f2:23:0c:
ab:fd:5a:5b:b3:9c:18:76:05:ce:cd:37:1c:04:09:
ab:d7:52:23:cb:8a:01:b3:01:98:0a:d6:4a:f0:96:
56:43:d0:87:a7:04:0f:47:03:d5:8d:3e:16:c2:9a:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:54:6D:2C:F2:39:EE:7D:58:6D:42:FC:D0:B4:63:57:81:2E:E2
X509v3 Authority Key Identifier:
keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1b:3e:b4:74:0c:d8:95:e6:1f:cf:3f:b4:56:11:eb:2c:e5:
24:59:2f:f9:36:7c:24:ac:e8:0a:b6:69:ed:0a:3b:0d:f6:6c:
f3:ab:84:38:79:87:78:47:06:5d:a9:8c:df:2f:92:d3:d1:b3:
f2:35:e7:72:03:69:11:cd:3c:1a:25:b1:3c:e5:b6:85:31:44:
5e:4e:dc:2d:d4:b3:94:c6:79:a5:c3:40:10:20:22:0e:29:d2:
fe:a4:66:8d:fc:d9:57:3e:b8:cb:93:a6:c9:6d:31:6f:98:23:
8a:19:6d:92:de:18:24:eb:c7:6f:82:54:19:3e:86:41:b1:8b:
80:05:56:ec:68:9c:5e:25:93:e6:bc:e9:f1:c0:da:62:d5:80:
72:32:19:3d:e7:9d:e0:ac:99:42:f3:55:d6:76:26:72:46:85:
6a:05:d6:81:7d:b0:7a:bf:89:6c:60:94:6a:c8:dd:8e:ff:23:
92:dd:83:8b:c6:08:a8:69:6a:51:15:fa:a0:2a:6b:f9:9d:a2:
20:b9:b7:32:a6:4a:e4:71:95:f3:47:9b:e0:b7:68:3a:b3:15:
0f:d5:a0:57:9f:42:d3:03:1a:6d:a9:38:9e:97:31:87:b0:bf:
0e:2f:d1:a0:1b:8d:85:b0:74:1f:e4:29:72:03:de:5e:e8:d7:
3e:63:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:51 2025 by rpki-client