Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: cQ4d/SeklemZiB3ONjMhpXK6TtGhw4WB6NJj0swIPlU=
Subject key identifier: B7:05:4B:75:4F:EC:3E:02:63:52:5A:7C:CC:58:F3:87:1A:CA:CB:EB
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 01967C0E25F213F194D475AECF9E48D19CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 122A
Signing time: Mon 28 Apr 2025 11:00:24 +0000
Manifest this update: Mon 28 Apr 2025 11:00:24 +0000
Manifest next update: Tue 29 Apr 2025 11:00:24 +0000
Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: hv6wdMAXvFnbYqGoaRo0c789/Zo65IPqlrGlES41NR8=)
3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:25:f2:13:f1:94:d4:75:ae:cf:9e:48:d1:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Apr 28 11:00:24 2025 GMT
Not After : Apr 29 11:00:24 2025 GMT
Subject: CN=b7054b754fec3e0263525a7ccc58f3871acacbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:48:d6:d8:81:db:a4:e5:26:df:2e:2d:37:a8:
e2:42:69:7e:64:00:a6:32:ab:dc:a0:53:ce:a2:08:
67:23:9a:53:78:e1:f5:e0:a9:a8:4f:89:0a:9f:69:
04:e0:5a:50:b8:e0:da:a2:15:c6:82:39:e4:a4:87:
df:c7:60:ba:39:3b:d2:b8:2e:89:52:42:c7:1e:c8:
e7:a9:89:47:2e:79:8f:d9:8a:6a:d1:b3:ed:39:64:
d8:96:d1:47:7e:2f:c5:4f:83:32:bb:ce:69:74:ec:
2a:ac:ea:3c:d8:94:d2:00:8a:5f:eb:cc:d8:c4:d8:
ed:47:2e:7c:be:95:93:e6:03:a6:2e:da:b9:88:db:
28:df:9e:7a:34:1e:2e:c9:86:63:44:2f:90:e7:81:
0f:84:86:13:9a:f1:b4:e5:a0:d5:38:58:dd:3c:d2:
1c:fb:95:e0:3b:f5:bc:75:2f:b0:0f:82:a1:e7:e8:
be:4e:7f:65:65:68:61:57:bf:04:b8:25:89:89:58:
87:b6:5e:26:c3:51:cf:0f:18:35:24:f8:32:6d:c1:
75:33:b5:31:82:1b:61:45:22:ab:16:05:36:cd:79:
3e:a9:10:98:df:9f:80:25:09:f4:7a:b8:db:3b:f0:
d3:8a:9b:87:9a:0a:28:29:4b:ac:df:75:8e:08:73:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:4B:75:4F:EC:3E:02:63:52:5A:7C:CC:58:F3:87:1A:CA:CB:EB
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:f8:15:05:97:a1:84:0c:9c:ac:3e:7c:00:c3:d1:5f:8d:
ab:6a:7e:18:df:30:66:3d:8b:2a:83:61:f8:a1:92:44:c7:f3:
92:66:d9:70:f7:50:41:ab:f5:3d:4a:77:66:12:e1:d3:0c:14:
c1:77:07:6c:58:99:36:da:3e:77:10:41:0d:50:b1:a2:07:20:
92:15:33:c1:97:bb:68:9f:7f:d2:e8:f0:50:4a:2f:2d:70:9f:
1c:75:31:02:fb:43:68:dd:00:c6:e3:c5:f3:e5:c9:0f:3c:bf:
14:e3:23:99:f5:9f:10:5e:c0:e4:c5:90:1b:63:01:a4:fb:a9:
1b:a1:78:d4:bf:91:77:ae:ee:2f:58:f0:34:64:f1:40:d0:87:
b3:39:67:49:05:77:3b:d9:c6:c3:61:8e:d7:6e:de:33:72:7d:
72:f2:5d:08:4a:bb:54:1f:c2:9e:31:16:43:dc:56:34:31:a4:
4b:da:1f:02:2d:16:8a:c6:d0:0c:0a:27:3f:0f:4a:99:35:ff:
c4:6b:4b:57:61:14:5d:b7:1c:5f:63:3f:c6:9a:56:2f:66:76:
6f:ba:10:17:26:5a:4e:6b:76:1f:ba:c9:00:f9:10:23:53:62:
9b:09:e1:35:d9:45:53:27:57:13:f7:58:11:39:73:fb:5e:86:
9b:37:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:32:16 2025 by rpki-client