Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: 9JMSxylMcvMeoFBzICzIzwSYhzvpWYzHcpzcFthKydk=
Subject key identifier: 02:24:1C:4E:C2:CA:50:50:1E:8C:A0:B4:52:BB:37:1B:6D:AA:9A:04
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01968021F69D2D673AC390C2780F731ABA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 06:00:31 +0000
Manifest this update: Tue 29 Apr 2025 06:00:31 +0000
Manifest next update: Wed 30 Apr 2025 06:00:31 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: LZ448sd33+VIt/2S9QrmWo7ATC4a/2RpiuRf8se3Ynw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:f6:9d:2d:67:3a:c3:90:c2:78:0f:73:1a:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Apr 29 06:00:31 2025 GMT
Not After : Apr 30 06:00:31 2025 GMT
Subject: CN=02241c4ec2ca50501e8ca0b452bb371b6daa9a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:b7:53:93:20:ef:2a:e7:61:93:9d:7f:e3:
ec:88:97:1f:f0:49:fc:01:e1:dc:3b:e3:93:9c:6e:
20:14:75:1b:7d:04:87:e0:f7:b8:28:06:34:c6:2e:
cf:1a:ed:03:31:f1:25:52:b3:7d:3e:ea:81:b8:3b:
a6:12:55:40:c6:4c:8c:cf:a4:2a:e0:f4:a8:fd:da:
df:47:00:2c:a4:4f:d5:b9:fb:a4:f5:c9:9c:63:26:
5a:62:44:b3:8a:14:94:80:b3:d1:76:99:ee:3d:3e:
01:db:ce:1b:b4:d8:d7:ef:38:15:bf:dd:ab:52:11:
45:54:27:7f:ba:e6:70:52:f7:88:71:c6:3b:e9:46:
94:b3:da:04:08:46:39:88:35:40:32:ae:5e:21:8f:
56:59:d8:62:b8:21:b8:c1:02:f3:b9:da:4a:9c:35:
04:98:4f:f6:b6:83:65:84:e7:f3:bb:1e:f9:39:55:
1c:bf:17:86:e7:5f:c6:56:0c:3b:2f:2e:56:eb:b1:
a6:eb:c0:58:af:c9:a0:c3:81:fc:f7:d4:11:67:87:
80:c7:5b:32:38:68:21:7a:55:4e:ed:f0:84:83:f3:
0b:aa:8b:12:8b:c8:af:90:0e:b6:25:fe:45:b3:23:
eb:3b:ef:01:fa:08:f2:5d:cc:6c:29:05:ea:0c:ea:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:24:1C:4E:C2:CA:50:50:1E:8C:A0:B4:52:BB:37:1B:6D:AA:9A:04
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:99:97:eb:08:6f:82:f5:cb:bc:dd:89:4c:57:18:80:22:45:
2a:32:0d:bf:b4:de:b8:1e:e2:ad:af:c6:be:cd:2f:1a:8a:06:
3a:17:76:87:25:9f:ef:38:5b:31:47:0f:25:19:84:4b:7b:96:
ce:e8:e5:a4:90:77:89:bd:36:1c:6e:fc:ba:a8:1f:c2:f5:7a:
08:30:3b:ec:9a:2d:1d:e3:76:1a:68:cb:6b:12:38:93:2c:bb:
76:e6:3d:d8:9a:80:af:63:17:d2:52:96:cb:2b:88:0a:88:63:
dc:99:10:4a:b4:a7:fd:7e:26:6c:cd:0d:93:04:51:5b:1f:87:
41:ee:3f:3c:06:36:31:d6:c8:b7:d6:08:a7:c0:ca:7a:df:0e:
60:f6:4e:af:81:03:1a:d4:da:49:48:10:91:b1:0f:9f:02:0f:
25:22:75:4e:2f:89:d4:e7:41:7a:11:91:e3:00:4e:55:2c:32:
c2:8f:27:44:e4:3a:76:f6:1c:34:e3:56:d7:29:ab:df:6d:00:
59:ca:22:3a:6f:d6:2b:26:ab:58:6e:b6:6f:5c:0c:ef:49:b0:
eb:2c:e0:cf:69:4a:5f:1d:11:b3:34:ef:19:ae:aa:45:74:1f:
6e:7f:e2:94:06:ad:a4:79:39:8c:7e:24:49:07:f8:3c:37:bc:
c4:a3:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:37 2025 by rpki-client