Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: +QD9Ig2pNX8eXY/+X1QN7s+JOdIA1NaqnOUY51w9kYA=
Subject key identifier: F7:BE:AE:CF:90:B2:B5:AB:44:1D:62:6D:EC:F5:9E:43:C0:FD:57:5D
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 0196767A8A27D78AD807B63D0CFA9547B007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 09:01:04 +0000
Manifest this update: Sun 27 Apr 2025 09:01:04 +0000
Manifest next update: Mon 28 Apr 2025 09:01:04 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: QjCFUHaOnajDupwnKN/dBqdpDVhr1719KhgxunZN8pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:8a:27:d7:8a:d8:07:b6:3d:0c:fa:95:47:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Apr 27 09:01:04 2025 GMT
Not After : Apr 28 09:01:04 2025 GMT
Subject: CN=f7beaecf90b2b5ab441d626decf59e43c0fd575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:44:d9:ad:6d:6f:4b:bd:a8:9e:c4:84:ed:
b8:9e:7b:ac:b4:2a:7a:90:1e:c9:a3:74:a1:c3:74:
8c:d0:d8:99:cf:eb:a3:22:f1:82:d9:20:d2:a8:51:
05:0d:ce:fd:b7:8f:20:49:5f:c0:ff:c2:40:27:c7:
38:61:ad:e3:e6:94:29:3d:50:c8:db:65:6e:fd:59:
57:a7:c8:68:51:9c:40:43:63:64:25:1d:04:59:75:
6f:40:6b:f0:52:60:b2:15:95:1b:54:e7:3a:d6:47:
5d:00:c2:8d:f3:61:57:8b:38:8d:5f:65:3d:2b:79:
cb:6a:2a:c1:3a:9a:82:da:5c:3d:d0:1c:38:80:ad:
02:f7:2a:e1:00:ac:7a:07:f9:4d:43:d6:21:e5:cc:
b3:83:e9:7e:e5:d8:8d:29:f8:b8:a4:b6:b9:2b:87:
e5:9e:da:bc:70:81:b9:7f:25:e0:82:b0:19:d8:9d:
32:dd:02:23:b6:c8:a2:ae:68:41:1b:14:df:01:c6:
a6:4c:4a:20:c7:09:41:37:d6:62:f7:f9:15:68:f7:
80:2e:ea:90:16:26:08:14:9d:bd:34:a8:39:97:ce:
b7:2d:d8:64:48:12:10:f6:9e:e7:87:fc:5a:3d:4c:
b3:4d:76:ea:9e:b3:9e:8c:95:ac:4f:bb:af:67:83:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:AE:CF:90:B2:B5:AB:44:1D:62:6D:EC:F5:9E:43:C0:FD:57:5D
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:1a:50:c4:db:c4:18:df:bc:7a:e3:64:b8:bc:e8:1e:ce:
51:96:fd:4d:04:94:eb:8a:9b:36:72:57:76:01:7f:2e:41:c3:
c4:1e:57:d7:9b:dc:a0:ae:7a:7e:f3:ef:56:2d:e7:21:d3:8d:
1e:89:63:bb:fa:9c:4f:bb:65:3e:5f:08:f4:05:e9:35:e2:ed:
d4:69:e1:83:2b:56:bf:e6:2b:8d:58:98:41:ce:75:a4:d2:bc:
46:42:3b:19:2a:fb:20:0d:dd:d9:12:a1:db:bd:ac:e4:92:8c:
40:8a:e9:c5:b7:5b:61:5e:0f:bf:5a:a7:4e:f5:f9:74:97:61:
2b:e5:e7:5d:ac:ab:21:bf:6b:2b:ea:47:bd:7b:50:84:70:6c:
a9:a5:af:72:fa:c3:57:52:ae:63:de:dc:b1:24:8b:0c:f8:16:
ed:31:1a:b2:35:7d:64:af:b5:ec:eb:ed:e2:de:66:44:b7:d8:
65:66:62:bc:c5:5d:23:8d:65:d6:42:ad:24:f6:0b:97:8f:ab:
8e:93:e5:52:8f:62:23:09:40:c9:c1:61:ff:23:c7:1d:c8:bf:
ac:9f:0f:e2:4a:fe:34:f1:a9:52:9d:86:c2:e2:d5:7e:3a:cc:
b4:0b:02:d1:b0:0b:c6:77:83:b9:df:43:3f:d7:b3:a7:a0:63:
2a:84:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:48 2025 by rpki-client