Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: tBmEk4+OLyigK9V2+/86oEk7yCSREx7zbkXCsIt517M=
Subject key identifier: 79:6A:85:45:01:F3:00:E5:A1:30:47:50:C2:E3:86:EC:0C:63:60:FC
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 019673E7129F2A9C2503AFBF8CC2D00ADC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 1514
Signing time: Sat 26 Apr 2025 21:00:45 +0000
Manifest this update: Sat 26 Apr 2025 21:00:45 +0000
Manifest next update: Sun 27 Apr 2025 21:00:45 +0000
Files and hashes: 1: KDP9W_m_0hLGFtgf73aWlnZ_iQc.roa (hash: lcUH+LFQ+UVivSdKcSpqJQp9Eg8xuBIT9bPnxngbu68=)
2: KHg46KpwJnmv6hNomrXATVqpzV8.roa (hash: WJsuWbqQXojOAqeQ80N/VH6AOxmAzbUb+3keyWT7yfw=)
3: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=)
4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: rZxwouHiiJIFYOtBBl5QRu/wvsI+oG1TEwjI6/ZTe1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:12:9f:2a:9c:25:03:af:bf:8c:c2:d0:0a:dc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Apr 26 21:00:45 2025 GMT
Not After : Apr 27 21:00:45 2025 GMT
Subject: CN=796a854501f300e5a1304750c2e386ec0c6360fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:5b:5d:bf:15:e3:8b:e6:78:f1:cf:62:7c:
6e:6e:98:bd:bf:cc:46:31:fd:e2:54:5c:ba:e4:60:
24:99:a4:f1:f7:67:df:c5:16:46:b1:67:7f:16:b0:
b7:3f:f6:f2:10:ba:81:cd:86:4c:5d:62:32:8c:8d:
5b:c4:e8:5f:12:82:a8:5b:41:26:df:fb:e4:02:eb:
69:bf:54:9c:ae:b8:00:f4:8a:3d:a6:67:4d:32:b3:
92:c3:44:5e:3f:bc:40:ac:9c:be:15:67:a6:84:5c:
77:48:13:18:ce:15:41:9c:6b:ce:1d:ac:e4:10:53:
1d:3f:0a:50:33:7f:9a:ee:46:a5:44:bf:c5:8e:a1:
63:05:73:01:0f:ca:44:f6:1b:84:40:64:fe:de:9d:
16:b3:74:0e:81:d2:b2:fe:c4:5c:55:99:d9:89:65:
6b:ba:73:66:96:fd:a0:b4:81:b0:fa:a7:64:96:18:
4e:95:c6:4b:6d:8e:ac:0e:a8:d3:e9:8a:ab:dc:5e:
d3:d6:39:1f:70:42:01:02:54:39:75:85:7d:ff:5c:
ad:88:e8:6c:c9:c8:87:09:98:d6:9b:44:87:93:ee:
6b:56:fe:b3:25:43:cf:ad:c5:40:0c:99:91:d2:78:
15:e1:ab:fa:1d:05:bb:89:41:31:a6:b9:db:3e:d6:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:85:45:01:F3:00:E5:A1:30:47:50:C2:E3:86:EC:0C:63:60:FC
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b2:dc:d7:a1:3d:f3:ff:10:30:23:92:b6:ff:b2:63:4b:21:
62:9f:d4:fa:5d:11:1c:f2:91:2a:c1:c3:79:f1:0b:32:0a:ae:
8c:8f:9c:10:25:52:e4:2d:d1:aa:5b:15:8e:11:56:97:2c:b4:
53:bb:b1:d2:4b:9b:68:52:cc:27:cc:63:3e:cf:3b:2e:44:4a:
66:17:c0:27:13:60:6e:20:7e:a8:9e:c8:a9:ba:dd:b6:a0:9d:
ee:a3:77:69:17:63:0e:98:27:2a:e7:9f:76:9d:08:00:9b:20:
7f:8f:aa:22:d2:0b:3e:cb:80:a7:ba:d5:99:a1:46:60:99:48:
b9:e5:86:98:d4:76:74:ca:83:64:38:ce:71:9f:b4:ea:69:ff:
a5:e5:15:94:a4:b1:ed:7c:5f:84:ef:5c:10:37:eb:1b:c8:78:
c7:c8:fe:03:35:12:d2:bd:ed:aa:fb:be:bd:6c:08:3f:4f:41:
e3:96:32:56:e0:9c:d8:ef:a4:3b:50:24:1c:0f:84:ca:3b:4c:
11:65:31:7d:8b:d1:5f:ab:e0:3e:8a:a6:da:ac:be:d5:c8:2a:
21:01:9e:c5:5e:50:c9:ab:f0:ec:c0:ee:74:dd:b0:2d:da:97:
38:54:4e:3e:16:05:25:36:ec:ec:c1:32:01:8c:18:f9:b9:5a:
fe:70:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:31:19 2025 by rpki-client