Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: UWg80giZemhsKztWyrFsE8xp8JshpVaAMeS8Aoqa52w=
Subject key identifier: AB:7D:5C:5A:A3:8F:C0:0F:17:03:53:8C:94:03:D2:0C:89:D4:43:9B
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 01968EF0232727FECB411A6E4E9C1656CA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 0396
Signing time: Fri 02 May 2025 03:00:24 +0000
Manifest this update: Fri 02 May 2025 03:00:24 +0000
Manifest next update: Sat 03 May 2025 03:00:24 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: rT8x2iQKkJJiClZWURoMYIZk8IMfs5AmSG3yxVWciNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:23:27:27:fe:cb:41:1a:6e:4e:9c:16:56:ca:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: May 2 03:00:24 2025 GMT
Not After : May 3 03:00:24 2025 GMT
Subject: CN=ab7d5c5aa38fc00f1703538c9403d20c89d4439b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:4d:eb:a5:43:25:91:d8:56:a9:0a:c0:08:
66:a3:cb:83:4e:76:de:3e:ed:c1:50:5e:f8:5d:55:
4c:0f:70:b0:b5:c4:d6:15:c6:55:61:db:6b:e0:e8:
f3:25:93:ec:de:ac:19:ce:87:7e:07:0f:ae:da:fb:
67:21:ed:1f:b2:38:d1:db:e5:dc:45:04:82:40:d7:
c0:e2:d0:85:58:62:b7:24:38:ef:ab:d1:93:38:a5:
25:cd:0e:fd:e6:f1:e3:ba:22:45:cb:97:fc:56:5f:
a6:19:1c:ac:fe:0e:cd:20:c7:4c:40:17:c4:c6:9d:
aa:0d:28:46:33:bc:01:9d:74:a4:a3:2b:be:f7:dc:
a6:ef:c8:b4:94:6c:00:20:36:93:6b:47:d8:4f:65:
0d:53:3c:a2:73:73:33:7b:b1:21:2e:51:7f:e6:b3:
2c:7f:bf:6f:ec:e7:91:a2:52:5a:84:6b:dd:f1:23:
4a:22:24:cf:fd:b0:02:78:c4:1e:7b:63:13:5a:17:
d3:35:e5:ae:3e:0c:a9:9f:62:35:e9:fd:24:05:8b:
56:7f:12:5a:3c:80:1e:8e:e2:ca:b8:bf:0c:26:ca:
01:4b:5a:8b:ee:46:9e:78:16:8a:8a:47:a7:cd:9e:
d2:75:7f:b2:1f:f8:1f:e3:ea:b5:ab:98:18:6d:f7:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:5C:5A:A3:8F:C0:0F:17:03:53:8C:94:03:D2:0C:89:D4:43:9B
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:82:1c:7f:97:7b:c3:16:59:9e:b9:79:b3:d3:16:89:3f:b4:
39:15:71:b0:0e:ce:57:6a:98:24:ed:e0:7b:1f:9b:f9:46:ea:
59:d9:4b:e8:32:65:f7:fd:13:ec:2f:1f:14:b9:bd:c8:2e:ee:
f4:25:7c:32:03:c3:51:16:f8:c1:65:1c:94:28:63:bd:1c:d6:
60:3d:e4:98:e5:bd:27:55:0d:4f:f9:bf:3a:b0:34:ba:1d:a7:
85:5a:82:af:f7:1f:fc:38:dc:69:c4:2a:87:7b:a6:22:5f:e8:
26:a5:36:c2:ac:5a:00:ed:04:3f:81:7e:01:f6:b8:34:40:37:
b2:bb:3e:e0:1c:04:d5:dd:c7:14:77:ce:26:5c:d9:b1:fe:02:
b8:e6:0d:28:c3:c1:2e:96:63:dc:a4:1b:de:af:ae:a5:54:8c:
b5:b8:75:87:03:6a:57:5e:8f:d0:9d:c1:60:f7:a3:52:ae:98:
2c:07:9e:41:7d:2b:a0:ea:5c:8a:ee:e5:28:b6:e0:d7:24:26:
cb:84:94:08:02:89:e1:00:cc:06:11:01:3b:68:4d:3b:0e:fc:
c3:20:02:38:61:2c:cb:a7:c4:73:f3:dd:46:a3:e4:f4:5c:8a:
b5:8a:ca:6f:a0:71:a4:73:10:88:ec:98:e7:f0:fd:6d:1c:84:
84:95:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:17:18 2025 by rpki-client