Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: 5EwIoPpzNE15bMswRycL6lupo09dFTbb4LyyMGs3Kes=
Subject key identifier: 9D:B0:C3:4F:03:2C:B1:B7:47:15:E7:90:47:56:E2:64:2C:A6:8C:F0
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 01967E6A30D70FECFE318CA852A3B2002FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 151A
Signing time: Mon 28 Apr 2025 22:00:10 +0000
Manifest this update: Mon 28 Apr 2025 22:00:10 +0000
Manifest next update: Tue 29 Apr 2025 22:00:10 +0000
Files and hashes: 1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: 5ClbD2u+h3MhnaaxZkUY8VOCaD0uRkgraCacW0UMInU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:30:d7:0f:ec:fe:31:8c:a8:52:a3:b2:00:2f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Apr 28 22:00:10 2025 GMT
Not After : Apr 29 22:00:10 2025 GMT
Subject: CN=9db0c34f032cb1b74715e7904756e2642ca68cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:73:b7:f4:0a:b7:5e:3f:50:d2:4e:af:87:
b0:c2:a7:a1:84:f1:54:1e:ed:22:3b:11:d4:99:45:
b9:23:33:df:25:ba:36:81:d8:ba:5d:c6:5f:a4:c0:
91:90:d9:31:88:c9:6b:ad:c4:c2:ae:dc:59:31:d4:
d0:6f:88:12:76:0a:40:4e:78:5d:fd:d6:fd:9c:af:
d8:9f:e8:43:11:7a:34:7e:89:60:27:d6:8c:f2:76:
66:5b:a0:b5:08:bf:b8:3a:0a:cc:d1:72:8a:4b:6f:
92:4d:5d:70:5c:bb:7c:6f:2a:48:19:89:06:18:e1:
c5:74:1f:ba:7c:89:31:31:ba:11:ad:9a:ea:b4:47:
ce:07:81:41:4e:db:5a:04:09:6e:3d:26:9f:14:7c:
1c:ea:e5:ce:a1:8b:74:62:31:a3:e9:5c:01:8d:74:
a5:8d:18:31:fd:7b:ec:6b:36:3b:bf:c9:5e:0a:9c:
0a:e2:94:ee:02:36:e7:61:73:93:94:85:90:f3:5d:
ec:1a:72:9c:e3:5a:32:14:92:28:b0:17:5a:b4:d0:
13:0a:a7:8e:31:09:4c:2c:65:95:88:58:bb:3c:14:
6b:82:5f:f2:ee:33:9e:98:26:f3:2c:d8:09:6d:e9:
44:a7:90:c7:93:32:f8:f6:fe:90:88:d9:bd:2f:38:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:C3:4F:03:2C:B1:B7:47:15:E7:90:47:56:E2:64:2C:A6:8C:F0
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0e:c5:b9:41:8e:c2:39:4c:18:35:f8:27:b2:57:51:97:2b:
67:42:c5:e9:54:db:2d:26:4a:36:a7:22:91:13:62:2b:5b:67:
6c:b6:83:9d:92:f1:9d:58:65:c4:8a:f9:8c:6b:07:18:b9:2e:
5d:e3:0d:7c:04:7d:fe:2b:2e:f3:d0:47:dd:23:42:d3:e4:86:
34:8b:6c:33:fd:16:60:b6:eb:fd:b1:90:6d:9e:f9:71:23:f3:
bf:6f:14:a4:22:b7:86:de:cd:36:5b:69:17:0b:81:68:4b:13:
72:29:5b:aa:fa:d2:ee:3f:6a:76:e8:cf:3e:d4:0a:e5:f8:02:
62:3d:68:5e:5a:51:cb:78:00:a5:23:50:0a:f8:6f:e0:5d:b6:
7a:44:1a:e6:75:fa:bc:80:e5:51:fe:9d:ce:d6:39:44:17:b4:
7c:54:e8:97:64:61:d0:ef:c5:49:53:71:87:45:b8:89:22:cf:
fa:b3:0a:1d:ec:7f:d6:31:d9:5d:f9:91:08:b9:17:b9:f5:72:
0a:27:49:5f:b0:f8:43:39:12:7d:cc:e9:75:52:27:7d:4d:cd:
ed:85:f3:55:03:c0:c8:8e:64:4d:c2:3b:c5:dd:52:52:c7:e0:
47:77:99:17:7c:2f:2c:4a:62:c7:12:37:e4:03:4f:77:59:d7:
e9:d8:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:38:25 2025 by rpki-client