Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: ZTFNHlS8WxNn0B6yQhzJDXyRtxkZpUXAEBfVjSkPRDg=
Subject key identifier: 22:72:FF:37:9B:29:28:AF:9B:CC:44:89:04:0B:AF:B5:96:A5:4C:9A
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01968B134DB762B5C48144AE0727D6121B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 09:00:20 +0000
Manifest this update: Thu 01 May 2025 09:00:20 +0000
Manifest next update: Fri 02 May 2025 09:00:20 +0000
Files and hashes: 1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: 3ZuMIqzSG6f6AiSCs12dfhptb9NI3MDl81eH8SEe79M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:4d:b7:62:b5:c4:81:44:ae:07:27:d6:12:1b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: May 1 09:00:20 2025 GMT
Not After : May 2 09:00:20 2025 GMT
Subject: CN=2272ff379b2928af9bcc4489040bafb596a54c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:0f:ee:11:0a:2c:51:df:5e:ca:4a:96:2f:
df:13:a2:0e:e9:79:e0:e6:88:f4:78:74:1c:6b:34:
a9:14:c0:13:ae:75:93:de:90:da:98:5e:3b:91:68:
1c:1e:b3:58:3e:88:7a:2c:0e:b3:5a:bc:07:29:af:
10:31:70:a0:80:5d:0f:33:27:9c:fb:37:1b:4f:7f:
64:e5:b4:d3:c6:6f:96:56:ec:d0:be:73:c6:4b:76:
b1:3f:aa:06:97:f9:d7:92:48:ce:22:f9:39:b0:9b:
0f:f1:eb:d2:5a:c0:21:8e:0c:ab:cf:09:1c:e1:fc:
e2:23:06:7a:ca:c2:81:a5:5d:c1:5e:6a:de:e2:c6:
04:5b:ae:10:dc:f0:68:42:7c:12:0d:33:3a:93:22:
7a:45:2b:14:ad:78:c9:ca:25:0d:aa:7e:e0:8c:35:
97:ae:4a:4c:36:73:85:5f:30:14:37:e4:69:f7:6e:
8e:f7:9e:b2:de:17:ea:63:d1:04:cd:aa:8a:15:40:
00:fd:d9:d2:0d:88:cb:0e:c7:ec:d7:7a:0b:47:aa:
57:88:42:aa:7d:55:58:7b:65:b8:9a:c4:53:28:8e:
49:d9:c4:cf:85:b2:91:aa:39:32:52:9d:e7:57:97:
58:cc:d7:f3:e2:90:57:25:55:4e:a5:67:91:bc:16:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:FF:37:9B:29:28:AF:9B:CC:44:89:04:0B:AF:B5:96:A5:4C:9A
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a9:e0:9d:26:ad:de:d6:8b:4a:13:fd:e7:a1:d7:43:4e:5a:
55:aa:7c:67:4a:5a:04:24:96:55:ca:63:91:10:90:b4:40:31:
8a:b7:a5:75:92:6d:a7:0d:ea:ab:e8:03:3c:b8:cb:20:19:02:
47:44:a3:8f:68:43:2a:30:e4:39:5d:8f:ef:36:31:59:12:33:
a6:e8:96:2f:b0:16:e9:c1:e1:f8:b6:5a:77:e7:34:fc:8d:f1:
d7:b2:98:32:52:a0:86:74:71:ff:3f:80:0c:f5:34:91:03:6b:
4e:9c:6d:65:85:13:1d:e6:0e:f7:ec:09:9d:f9:31:a1:84:ac:
c5:5d:eb:bd:22:94:12:94:cb:91:6b:ca:9f:f3:14:85:8a:57:
d4:9d:2f:42:ad:b7:2c:66:b6:93:cc:14:3a:5c:c4:11:49:c8:
3d:0b:7c:1d:6f:d6:ed:f4:cc:2d:11:d4:69:93:06:e2:73:1b:
a4:49:72:ae:70:ac:f9:8e:b3:b6:ee:ca:3b:13:17:92:eb:82:
c9:c2:aa:4f:0a:4d:32:3c:93:77:bf:2a:8c:50:ce:2f:7a:58:
ed:3a:8e:90:97:a9:37:52:61:4c:64:b6:65:37:dc:45:b6:78:
69:ff:cc:3d:6d:17:5d:45:6b:7f:1e:b1:de:28:16:a3:b2:cd:
f1:16:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:10:05 2025 by rpki-client