Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: 32CEcbUwZ1gec2cylKU14XRW2c2MFDh3l2iJDtX3F2M=
Subject key identifier: 07:40:DE:D2:BF:39:7F:AE:92:BC:39:6B:FB:26:47:30:B5:A8:04:2E
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019674C28B2A4C4DC5D293376BD9DC106D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 01:00:28 +0000
Manifest this update: Sun 27 Apr 2025 01:00:28 +0000
Manifest next update: Mon 28 Apr 2025 01:00:28 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 8iFeNAbQTkVaZaEPNJ2QpJYKVX84x1v+bgyqHhRYA6U=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:8b:2a:4c:4d:c5:d2:93:37:6b:d9:dc:10:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Apr 27 01:00:28 2025 GMT
Not After : Apr 28 01:00:28 2025 GMT
Subject: CN=0740ded2bf397fae92bc396bfb264730b5a8042e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:00:b4:09:3d:e6:f9:99:d9:81:8f:78:d1:
b2:42:39:07:f7:1a:77:0a:ef:86:7d:13:2c:43:70:
c7:ec:c4:36:25:ce:4a:9e:00:ed:60:53:56:e5:9e:
fb:9d:d8:ee:01:6e:98:13:1d:9c:22:72:df:cf:dd:
86:71:c1:cf:12:06:8a:66:f3:73:f1:3a:b1:cc:5c:
46:f0:fa:bf:66:6c:cc:08:04:c7:44:be:bd:67:13:
48:79:7d:e2:05:a4:65:b5:d9:e4:fe:60:e6:82:1b:
e7:b1:db:f1:b3:16:da:49:91:25:72:bc:ce:dc:96:
1d:28:ab:fd:89:4d:fa:31:19:bb:76:11:e3:9a:45:
39:7a:42:66:2b:8e:01:b1:43:71:bb:6f:86:fc:05:
22:d5:5d:68:ba:ed:af:09:a7:8b:3f:bb:97:d2:3c:
fe:b3:d5:13:b7:ab:b1:39:a0:41:fa:97:dd:c2:08:
38:0d:79:3a:c6:23:dd:5c:33:00:d1:d5:b6:80:0d:
66:3b:ac:ac:99:c4:a7:48:19:fc:ec:12:6f:50:11:
3f:42:4e:cb:f4:a6:22:9a:c0:c3:5b:a6:a4:b5:c6:
13:a3:bf:3e:c6:dd:45:ba:49:b9:13:80:17:ae:23:
d4:57:cb:32:63:c1:ea:92:60:64:5f:f3:a2:11:5b:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:DE:D2:BF:39:7F:AE:92:BC:39:6B:FB:26:47:30:B5:A8:04:2E
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e6:fc:3a:06:8b:05:6c:f1:d6:97:ae:19:3a:99:cd:af:bf:
1b:76:8b:80:26:29:a8:0b:73:1d:2c:8c:f8:ac:b4:06:77:51:
a4:16:a7:df:0c:9b:f0:f2:a7:c7:36:ac:94:87:9f:df:d1:71:
2c:12:70:a4:77:05:a1:42:8b:4c:9b:e9:da:b5:72:96:0a:04:
ad:c6:98:21:69:5c:9f:10:af:96:c9:9e:90:57:ca:13:d3:e8:
64:de:5e:7a:45:02:54:7c:c5:e4:73:5e:62:82:d0:cf:05:a5:
9a:dd:32:66:30:06:47:d5:ba:ac:53:f8:4d:4b:e7:f5:0d:92:
92:a6:07:bc:ce:7e:72:28:93:f6:8b:4a:0e:ba:1b:b9:26:48:
c2:bb:e9:11:c6:b5:d9:c4:63:ab:9d:7a:bf:cd:70:e9:ea:8f:
64:81:15:41:22:e8:7d:60:50:16:45:3a:70:d4:1c:79:ae:f4:
af:b3:ca:bb:68:b0:1a:a1:b0:8e:16:32:f6:88:93:df:b9:de:
dd:08:16:5a:60:7e:ec:76:c7:95:9f:0f:a7:43:cf:ce:3d:28:
31:b3:53:ab:f1:4d:40:7a:b3:2d:3d:5f:ae:6f:f9:53:30:e9:
96:9e:53:02:c8:8f:03:ec:0f:d4:13:ef:cc:c6:47:89:03:36:
c2:e2:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:25 2025 by rpki-client