Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
File: VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft (raw, json)
Hash identifier: eNLbowRiHkBQdmFgVuQBYAQYfbJR3TSwLN9Nk947Yu4=
Subject key identifier: 61:02:23:21:68:7E:E9:53:BB:D5:3A:4B:61:6E:89:4B:8C:BD:45:B1
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 01967C44E091F519D18D08937685DDA38E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
Manifest number: 1401
Signing time: Mon 28 Apr 2025 12:00:10 +0000
Manifest this update: Mon 28 Apr 2025 12:00:10 +0000
Manifest next update: Tue 29 Apr 2025 12:00:10 +0000
Files and hashes: 1: 6a60S-TRqBKotvyyPQBxdiB70Sc.roa (hash: 2NeGJ4f2HswIAojn272Lhr6pkTIi9fGcxUkPl+OU7Uw=)
2: VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl (hash: 352Gb0v4tALAFkUzpINLB3AwXYjP2DmlQ5EmnqWmMzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:e0:91:f5:19:d1:8d:08:93:76:85:dd:a3:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: Apr 28 12:00:10 2025 GMT
Not After : Apr 29 12:00:10 2025 GMT
Subject: CN=61022321687ee953bbd53a4b616e894b8cbd45b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:af:04:44:57:22:d3:16:5a:ac:f3:91:e8:
7f:d4:76:5e:e7:ad:58:c4:b0:1e:a8:57:8f:3f:67:
94:30:63:88:f2:63:96:0d:f1:37:ed:d9:bb:2e:c7:
bb:5a:8f:9a:12:ca:7d:a8:3b:33:c8:e6:35:ad:ff:
3b:07:19:1f:3e:6b:b4:09:45:d3:bb:ea:63:83:91:
89:d7:29:fa:3e:90:d2:19:a8:91:4c:5a:49:76:10:
73:4a:3c:2c:f5:6e:11:ae:c2:29:e9:b9:73:59:26:
b8:15:6d:7c:1a:c2:a0:69:97:1b:15:04:5e:b0:fe:
6f:2f:24:1a:fa:cf:f9:b3:a4:86:a9:7a:30:e4:76:
df:86:e7:1f:13:bf:8b:c5:74:10:42:58:18:c0:08:
08:ae:93:dd:65:27:e2:f0:87:68:dc:f0:4b:b0:7c:
38:39:dc:a8:e2:70:a1:93:6a:2e:6e:49:78:89:4f:
a6:39:17:73:46:c7:50:8f:4a:cc:37:a9:3f:d5:18:
30:69:3f:1b:fc:56:59:a5:71:c3:df:bf:63:6c:17:
1d:63:58:26:d6:e0:2e:7e:1c:03:ec:1d:17:39:42:
05:76:6c:53:35:91:51:40:79:c9:a2:12:d1:3f:83:
b0:10:71:6c:d4:fa:69:6c:65:69:ac:4b:8c:1a:24:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:23:21:68:7E:E9:53:BB:D5:3A:4B:61:6E:89:4B:8C:BD:45:B1
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:cb:13:2c:c7:52:2a:a8:a7:bd:f0:88:47:16:23:99:39:d8:
22:b1:c6:f0:55:60:ef:ab:5d:38:52:ec:02:d3:4d:ac:d5:85:
f8:f2:7c:04:24:7d:3f:39:1b:c7:5f:86:2e:e2:89:39:9d:9f:
0b:c5:ee:b2:1c:da:b9:88:b3:e3:84:66:f7:cf:cc:90:0f:53:
da:04:ca:06:76:23:e5:de:80:59:6b:20:32:86:8f:13:93:00:
76:7f:d1:7c:f4:3a:39:45:d0:b5:48:a1:ab:a8:72:bc:2b:e4:
41:79:9c:20:b2:08:cf:bf:33:60:a1:42:9d:87:48:17:45:57:
33:c2:a2:47:dc:b1:bc:00:e2:f6:f8:87:67:4f:22:57:83:c7:
17:82:dc:f2:f4:55:98:88:6c:d3:42:9d:4d:25:71:73:0b:2e:
15:4c:fc:b6:32:fd:1a:dc:18:a5:9f:58:f0:e1:2e:7a:f8:ab:
0c:62:4a:bb:7b:50:d2:fc:36:1e:f1:b1:c3:4e:cd:b3:aa:37:
64:61:10:66:7e:86:12:ef:36:35:f1:fc:48:ca:24:11:fe:a6:
2a:d6:ae:f5:37:9f:41:a1:00:6d:62:9f:7d:4c:c7:22:5e:7c:
18:a4:b9:f9:5f:48:63:1c:de:4e:96:5d:fc:53:2d:24:03:68:
dc:df:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:04:05 2025 by rpki-client