Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier: Ofia6K4EtBqNW1qebT8r9UspoT9oXRbDXyT8ukMzOFM=
Subject key identifier: 83:DF:8C:AC:7D:CA:CD:CE:FC:CA:17:F5:01:08:B9:06:90:6B:A0:D9
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 0196767A239E4489A35E4618900ED290C75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number: 0779
Signing time: Sun 27 Apr 2025 09:00:38 +0000
Manifest this update: Sun 27 Apr 2025 09:00:38 +0000
Manifest next update: Mon 28 Apr 2025 09:00:38 +0000
Files and hashes: 1: FSb-Rvye6YoA1Ii-rCKundZ-HD8.roa (hash: wEXQWTLVPy1UwtI4vOgrpyaszSEDzsytRnOaOtWiUUo=)
2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: ZlPOWiX8Xre70TdMuUvvnZ7W5o3uWq/0aQTGr8Voo3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:23:9e:44:89:a3:5e:46:18:90:0e:d2:90:c7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: Apr 27 09:00:38 2025 GMT
Not After : Apr 28 09:00:38 2025 GMT
Subject: CN=83df8cac7dcacdcefcca17f50108b906906ba0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:df:a4:7a:4a:2d:90:fd:aa:e0:ed:b1:2a:
03:b3:ad:0c:90:64:dc:06:92:5a:73:eb:5f:64:0d:
4b:06:df:f0:56:4a:f0:b8:95:f4:77:bc:bf:31:58:
71:ec:30:d2:d9:be:1c:6e:89:1d:86:e5:f0:e8:21:
d4:15:dd:c5:4b:7a:39:fa:c1:6a:6e:3d:74:f3:1e:
89:c5:7e:44:23:e9:35:3e:6e:08:60:44:9e:e8:50:
19:8e:97:55:73:d6:65:ee:33:b2:5e:df:9e:f7:b8:
b1:7c:a3:27:91:1c:7e:82:a3:38:05:02:70:6b:e0:
69:35:47:76:aa:85:e3:ec:ad:c0:db:00:b2:c3:2b:
32:93:53:a6:4f:15:14:25:6e:7c:8f:5e:9a:76:a9:
70:ab:03:e4:e5:6e:bf:29:f6:06:97:e5:3f:76:b1:
28:cc:3e:0b:62:25:81:72:44:b0:e1:20:9c:e5:9c:
ea:ce:9b:f9:cd:bc:aa:65:1a:f5:1e:75:4e:04:bb:
90:89:79:2b:3d:0e:2a:71:b9:42:9c:58:e7:5b:76:
41:e1:58:c3:6e:94:1d:b1:21:e9:56:31:b2:eb:0a:
b0:41:e1:45:dd:3e:0e:11:d2:d9:20:94:c4:16:5d:
e2:2a:17:53:ed:ef:76:d6:96:36:11:86:72:d8:03:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:8C:AC:7D:CA:CD:CE:FC:CA:17:F5:01:08:B9:06:90:6B:A0:D9
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:91:e1:0b:70:b5:5d:c0:90:03:ee:72:67:49:27:6c:e8:
15:a2:1a:8a:3a:9c:06:1b:ad:3b:07:0d:55:b8:c4:be:99:a6:
90:03:15:35:c0:0e:e1:82:b1:1f:49:7a:7d:4d:d4:8c:6b:d3:
82:e4:47:3e:46:cc:23:c9:43:5b:60:24:20:e1:f3:ec:6f:bd:
f2:70:ed:66:47:19:eb:7b:72:00:59:46:21:15:26:35:7b:13:
76:0e:f9:a3:0c:0d:db:19:35:d1:23:aa:76:26:60:25:b9:f8:
c0:9c:cd:79:58:bd:64:6d:0d:4f:25:d4:93:c1:80:6d:cf:d6:
44:30:96:54:4f:18:04:8d:77:93:ec:07:bb:26:a7:3d:92:06:
97:1e:86:37:17:66:f6:b0:84:1d:49:61:38:f6:7e:a3:3d:07:
a7:ce:47:32:c0:1b:fe:a6:07:9d:0c:70:72:ac:8c:b2:1c:b6:
7c:93:82:d7:e9:ce:06:dd:1c:7c:7b:a6:ad:5c:24:d0:f2:60:
c8:af:b8:c5:df:5d:2b:32:03:98:dd:5e:7f:be:f3:99:56:22:
0f:ae:32:37:75:c0:52:ec:dd:fa:ea:a0:5f:2d:fd:a2:f0:62:
57:15:49:34:fc:de:c4:9d:00:a1:61:eb:bc:bd:85:25:48:28:
2f:69:13:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:44 2025 by rpki-client