Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
File: vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft (raw, json)
Hash identifier: uLJ+eEEubXyZmjRSkFfW6a5DqaF4crMv4q5vvqke92U=
Subject key identifier: C5:29:7B:3C:BA:CD:C3:51:6C:77:E0:75:3A:FA:F6:D4:7B:45:17:0E
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 01967A1FBA646DDDC047067DC09DFAAEE613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 02:00:21 +0000
Manifest this update: Mon 28 Apr 2025 02:00:21 +0000
Manifest next update: Tue 29 Apr 2025 02:00:21 +0000
Files and hashes: 1: FnExCvLDVdYuTR08kgWAavX-Pk0.roa (hash: AIJMjDttEuZdQI2f5T19fqAfcHk4SoNhDhOU5X3/Gj8=)
2: SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa (hash: OAmumDrq2brGzOON0ZBpmY/Uom5WD7nl6vre292Hhmg=)
3: db5zCybt_34-4-i-989NlftPaAE.roa (hash: t4OVx3KTrCCGv9kMRVOWKBYVAK6vdDRT4hnb6yO9KXg=)
4: vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl (hash: 3HQp/5ftZmdr+vnH65nbBjRuvfG+/7oj1ua+qC3Cto4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ba:64:6d:dd:c0:47:06:7d:c0:9d:fa:ae:e6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Apr 28 02:00:21 2025 GMT
Not After : Apr 29 02:00:21 2025 GMT
Subject: CN=c5297b3cbacdc3516c77e0753afaf6d47b45170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:95:33:02:41:f2:7e:26:0f:f9:31:7e:69:
12:05:70:01:18:25:5f:6d:ce:cd:c6:e6:f6:df:d7:
d0:f4:8f:a1:70:3c:51:65:b4:95:cc:ff:27:65:d3:
6a:14:4b:4a:5c:c5:f7:d1:a5:3a:f7:f9:f9:8a:4a:
e5:89:16:5c:80:ea:fd:4e:33:b3:53:9c:8a:62:f8:
31:f7:c4:80:86:a9:dd:0f:7d:55:48:96:22:f2:b1:
26:64:06:be:40:29:ed:b9:b8:15:11:dc:2c:7b:d5:
5c:fd:62:e2:b4:47:04:83:38:b4:19:77:a8:ae:3c:
7d:1c:aa:2c:a4:44:c7:a3:ad:0d:3c:39:fb:2e:a7:
03:46:eb:75:73:c7:30:0f:ba:41:d1:11:e8:1f:6a:
77:83:10:63:96:79:52:9a:86:9d:9f:9a:14:b8:4a:
8a:e4:70:09:05:45:34:58:03:d2:22:a6:42:de:ba:
5f:1d:52:9a:26:5e:5a:3d:69:b5:8d:20:0b:85:4c:
7d:f4:bd:f8:f4:a9:b5:62:1d:64:39:d7:67:fd:ae:
9b:50:c0:1a:01:69:a5:dc:4b:11:f4:28:03:51:9d:
de:ca:6e:81:82:90:4c:b5:fc:7c:86:43:2f:49:89:
0a:fa:84:b6:b6:a8:ac:7c:fc:b4:59:c8:29:d8:93:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:7B:3C:BA:CD:C3:51:6C:77:E0:75:3A:FA:F6:D4:7B:45:17:0E
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b7:de:b5:44:cc:ac:8b:53:8c:ae:19:d0:6e:b0:e4:36:d1:
4d:73:dc:f5:59:48:c8:7c:b7:95:68:62:b2:9e:09:ae:0b:15:
c0:46:0a:98:39:e5:16:d8:52:ef:15:0d:cb:28:4b:e6:b5:e2:
e4:8d:17:91:d6:08:69:32:90:c5:d4:96:50:51:c0:8b:a5:63:
2c:62:97:d0:07:bd:47:42:e7:53:d9:02:c1:88:e9:42:03:ab:
75:14:93:86:d0:1c:e4:82:ab:62:54:96:84:39:0b:c8:4b:e0:
9d:02:40:0a:3e:55:01:e9:4b:50:91:9a:bf:a1:90:45:ea:ce:
71:09:e6:be:50:a1:32:1f:33:18:0c:da:b0:73:0f:7b:d4:82:
b3:e1:42:91:ad:e3:ad:a9:c4:80:d8:0d:2a:12:13:bf:96:ae:
93:00:8d:fc:66:d4:25:12:76:71:7d:55:4f:40:d6:e4:ed:81:
57:2a:4c:54:33:04:70:89:f2:39:8c:e7:c5:3c:e4:31:bc:9f:
08:27:47:63:44:53:c8:7c:75:8a:5d:9f:a5:cf:2c:1a:e4:b4:
f7:3f:09:05:b7:29:84:82:6f:71:19:a7:f7:1d:be:e0:75:ca:
be:ad:29:bc:02:57:00:1b:ba:9a:b8:1b:85:5f:ac:bd:61:fa:
01:cb:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:42:55 2025 by rpki-client