Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: YXhWQmXvVj+4vWZD9zgoS16A2INE79pKhZKFm+Ppbfo=
Subject key identifier: 76:94:91:CF:CA:4D:76:02:06:BB:6C:A7:C6:57:EA:7E:7E:08:37:08
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 019685B6150986E8187D221EEECFE1240AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 08:00:24 +0000
Manifest this update: Wed 30 Apr 2025 08:00:24 +0000
Manifest next update: Thu 01 May 2025 08:00:24 +0000
Files and hashes: 1: fj83OICA2dXkb7sofXdOoGdjzq4.roa (hash: pOA5XIvHm6EKh1V95/EfmbQrXTJ90+bGbqMr2BZtsSk=)
2: pDkCQjQVPegQOP278WmolhHSrkw.roa (hash: VPjogK0/dxD5LybI2fhbuslUMxpJB7AerXcZh/G3cj4=)
3: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: uT38OjlR87t7lXtyrgbysgG15ybYedAEGxhbs/XKJkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:15:09:86:e8:18:7d:22:1e:ee:cf:e1:24:0a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Apr 30 08:00:24 2025 GMT
Not After : May 1 08:00:24 2025 GMT
Subject: CN=769491cfca4d760206bb6ca7c657ea7e7e083708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:b1:54:03:42:9b:38:b0:29:90:dc:84:cf:
36:35:d8:4a:f6:ca:74:33:15:9c:4f:29:55:d3:dd:
60:b3:8f:e6:64:84:7a:1f:f6:1d:e1:84:4e:f2:cc:
d0:06:d3:15:6d:c2:2b:2a:be:d4:a3:e1:0f:ec:82:
48:bc:fd:3c:e5:ec:fb:83:a4:39:5c:26:22:60:58:
5b:5e:7c:1e:42:03:01:3f:f4:e4:ce:b4:eb:bb:13:
b1:0a:d3:3c:e5:4a:1e:17:6f:19:be:aa:36:36:59:
46:7a:5a:4a:4d:3b:c2:f2:c6:70:22:06:af:99:3e:
50:2a:70:eb:ce:4b:8d:66:da:14:17:07:f5:ba:c8:
10:5c:4a:10:0d:e9:6d:e5:34:03:00:40:e4:fa:90:
98:81:fe:0f:99:71:d4:ec:b2:a2:ec:f5:6e:55:07:
9f:83:81:ef:e7:07:c4:aa:7a:78:9e:3e:08:c1:97:
43:dc:e6:d5:58:c0:54:e6:01:22:94:5d:e3:50:9a:
52:29:a3:2c:7c:0a:76:ba:bd:1e:24:16:61:d8:23:
22:2e:4a:78:7e:bd:22:69:e8:a8:3d:02:a3:20:86:
e9:93:10:c4:53:5e:f7:54:8a:3d:49:d6:49:d6:87:
ee:2b:b2:dd:41:54:a9:9a:7c:a0:ff:ea:c5:67:1e:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:94:91:CF:CA:4D:76:02:06:BB:6C:A7:C6:57:EA:7E:7E:08:37:08
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:a6:5e:3a:22:ce:6f:e8:72:39:ad:ad:58:32:14:04:59:
38:a4:08:e4:8c:25:aa:ff:0f:2d:0e:5e:f1:a2:9d:f9:21:f3:
28:c9:e7:9b:6a:7d:bc:98:8a:e4:92:48:1a:76:c5:ab:9f:7f:
b9:c0:67:2b:a8:21:73:50:5c:08:98:9e:0c:e0:da:70:ec:02:
87:db:56:b1:0c:3d:55:91:bd:ce:30:a7:6a:76:b1:ee:67:73:
57:5a:34:00:42:be:1b:9b:0e:8c:4d:40:71:41:09:61:98:8f:
99:31:52:cc:60:29:1d:1d:11:ed:1d:a3:ce:47:b3:3e:02:82:
3b:77:e1:3b:b3:ef:3b:eb:59:af:63:1d:ec:3d:4f:c8:fc:36:
91:63:9d:b3:4e:7c:ac:cd:be:d4:7e:99:69:f4:ab:9c:c6:9b:
04:5e:ee:23:77:cc:fb:cd:2a:57:6f:5e:0e:ab:db:0f:1e:f2:
26:42:ed:7d:5d:90:c4:a7:de:28:8a:73:09:06:12:82:6a:1a:
91:29:81:81:2d:4f:62:35:d6:ad:2c:ec:c9:45:ed:20:13:60:
9e:d5:a5:01:22:7d:e7:89:ea:10:4f:79:ae:ef:73:28:d5:b2:
14:cd:23:95:a5:29:ee:24:21:59:da:25:20:ea:df:99:56:f0:
94:e7:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:26:23 2025 by rpki-client