Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: 2iJC6yTiKGPqN3zRQ5rbs8kox0ZaDszbmjvnUjSqqr4=
Subject key identifier: EC:25:EF:7A:34:D6:E1:72:FA:5B:5A:5F:87:AF:C5:1B:CA:A6:8E:FC
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019688124A5EC3E4F1F765A7038A1BAB72CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 19:00:22 +0000
Manifest this update: Wed 30 Apr 2025 19:00:22 +0000
Manifest next update: Thu 01 May 2025 19:00:22 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: 4x7GczyxGIvuYFYQZKY/5o9afASxxrbFqdachs6YlTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:4a:5e:c3:e4:f1:f7:65:a7:03:8a:1b:ab:72:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Apr 30 19:00:22 2025 GMT
Not After : May 1 19:00:22 2025 GMT
Subject: CN=ec25ef7a34d6e172fa5b5a5f87afc51bcaa68efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:07:2e:dd:11:b3:6a:05:62:51:e4:64:46:
3a:a1:33:2e:54:3b:b0:8f:59:73:d6:5d:37:b1:34:
0f:38:d1:99:24:f4:e7:b9:b2:92:38:0a:df:ed:65:
fe:97:63:d4:ee:f3:c6:d5:83:08:23:68:d5:6a:45:
fc:10:fa:58:eb:d6:a5:0c:55:82:8e:42:24:c8:37:
7f:37:5e:3c:0e:b8:1f:d9:2b:44:87:67:7a:a1:b6:
e0:39:c3:e9:29:77:90:b3:ea:6a:65:34:de:32:58:
47:ee:0a:3a:29:62:29:c6:9a:8b:fa:a9:1a:03:1e:
cd:4c:63:05:28:3a:e8:e9:48:90:f5:0e:10:02:1f:
ca:64:e6:8a:5c:97:c2:f2:ee:df:9a:c8:7e:2b:56:
d1:b2:d3:a2:88:21:f3:1c:bf:91:be:ea:ed:e9:62:
88:e5:96:bc:ba:00:9a:8c:6f:db:d3:49:c6:13:4d:
07:35:b9:43:dd:ed:48:28:4d:59:7d:92:22:a5:dc:
8e:d2:87:5d:b6:94:45:32:16:90:6b:8b:f4:0c:3b:
26:a3:f1:4e:15:5a:c7:42:5e:68:ff:07:b3:3d:56:
45:e9:e3:f1:21:05:13:f1:7b:8e:7f:ef:6c:05:57:
46:f6:a5:f0:b7:17:3c:bc:01:cc:5a:ec:37:32:9d:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:EF:7A:34:D6:E1:72:FA:5B:5A:5F:87:AF:C5:1B:CA:A6:8E:FC
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3b:d4:51:bf:06:6c:b9:8c:e8:a2:7f:48:08:94:8c:43:f3:
ca:a8:92:c6:45:4e:29:2b:d1:de:5e:d2:1a:09:0e:9c:dd:4f:
46:ed:88:b9:e1:43:a7:00:32:6d:65:5c:24:27:d4:24:ba:70:
ae:1d:fe:bc:7f:15:e9:54:bb:56:c6:26:8d:28:f4:73:3b:00:
bc:e6:21:ff:34:ba:19:ad:39:05:4f:9a:78:b0:36:26:75:d8:
2f:ef:74:57:58:c1:64:b9:b5:30:db:3e:60:82:cd:2f:28:94:
56:f8:ec:4f:62:75:4d:a0:e7:55:86:d8:fc:ec:c2:7c:e7:13:
c5:cc:f4:9c:10:c6:95:fc:2c:e7:b7:ff:40:2f:57:d8:70:d4:
12:0b:20:82:98:d3:94:a2:ce:b7:46:d1:31:44:d8:f2:37:3b:
9b:b0:7c:17:92:ec:51:71:64:39:58:22:ba:b8:8f:dc:d4:56:
63:e3:d1:be:36:65:83:8d:58:56:6c:60:1b:b9:48:b6:d4:94:
c2:66:b2:04:a3:a9:dd:17:ac:25:bb:8d:72:7a:e0:93:ab:f2:
d9:4b:c3:3b:fc:f0:29:8a:8c:5a:f7:b1:fa:57:f6:ee:d7:5a:
91:9f:30:dc:80:cc:e4:73:d5:5a:ca:7a:5c:8a:e6:b7:48:44:
56:9c:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:21:04 2025 by rpki-client