Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: 9fkfeDSJoRt1KobWBYjhjmBoPjzJK1LiBp2HqEHmQfk=
Subject key identifier: 12:22:7B:12:6B:3E:73:F3:2B:93:2D:80:81:E7:79:BE:88:50:A3:86
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019683FF0CC502C9A003022D0F01D3067DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 00:00:52 +0000
Manifest this update: Wed 30 Apr 2025 00:00:52 +0000
Manifest next update: Thu 01 May 2025 00:00:52 +0000
Files and hashes: 1: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
2: sHogSH7MHx4Qu4ypnCQXNOyx8fA.roa (hash: ptV6L9rz/SLZs+uwk6ZFS7KAyp+pD16DhDUF4x5zX1U=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: 3bCeHu3TnyNRsKuJS0pPI2dswHEPlATxuFNj616L6HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:0c:c5:02:c9:a0:03:02:2d:0f:01:d3:06:7d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Apr 30 00:00:52 2025 GMT
Not After : May 1 00:00:52 2025 GMT
Subject: CN=12227b126b3e73f32b932d8081e779be8850a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:72:11:7f:46:f3:7d:cb:6f:47:b4:66:7f:
a7:dc:6f:4d:1b:af:0b:0b:33:dd:49:36:0b:d7:a1:
b5:9e:e0:de:1e:a5:6c:30:2c:c8:9b:9c:4c:4e:7d:
8b:3a:94:b5:f6:a9:b2:ae:a9:f7:aa:a6:26:f7:43:
21:33:03:f8:78:00:4d:e2:fd:ae:fc:a0:04:90:b8:
bb:91:d8:d3:7e:2c:7c:a1:cc:41:c2:88:f5:ec:bf:
f6:10:73:21:6e:33:48:e6:26:17:dd:dd:8c:e7:c0:
51:d7:28:20:ba:73:c6:50:5f:38:36:7c:f2:eb:63:
21:8f:43:b9:6b:e5:80:10:4e:d4:3d:a7:5a:89:18:
2e:0b:af:31:ce:f5:35:2d:e6:13:76:61:9c:1a:80:
1f:24:c1:b6:7b:fa:31:80:f0:1f:19:f4:3c:0a:fb:
c4:06:6d:1c:94:75:a1:b6:ee:84:1f:28:89:dd:67:
bd:39:b5:98:e9:67:30:a8:d3:cc:87:2c:0e:80:11:
78:76:96:ad:9a:26:2e:19:2f:f2:dd:e5:10:26:50:
90:84:a8:37:ff:15:39:eb:a8:2b:28:f0:6b:b5:46:
41:a7:67:cd:97:b8:dd:34:4c:6c:eb:26:1c:28:23:
54:79:dc:d8:60:99:3a:a2:e0:c8:0b:0b:64:a8:60:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:7B:12:6B:3E:73:F3:2B:93:2D:80:81:E7:79:BE:88:50:A3:86
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a6:28:5f:a5:df:df:aa:a0:8b:c6:c6:c3:21:55:7b:ae:27:
d8:4c:48:f2:73:f4:f5:06:1b:63:0f:bd:9c:f8:36:92:de:c4:
a5:a7:be:c0:ab:5a:e7:e7:4d:55:0c:f8:65:58:8d:e0:83:78:
ee:31:b9:8c:0b:06:47:f8:de:63:e0:63:34:27:96:e0:10:98:
2a:f4:c0:c2:ad:65:a2:66:59:d8:08:2e:80:31:0f:55:80:78:
38:cf:ed:1c:2c:7f:30:e0:08:fa:72:56:78:86:d3:83:04:79:
b3:63:f2:a4:bc:ff:3c:06:df:c5:81:7d:e7:e7:97:b6:85:73:
fc:bc:9a:4e:31:b2:04:47:ad:9c:97:b4:77:c4:a6:cc:ac:0c:
06:ef:98:68:7e:5d:4d:84:a6:e8:72:5d:7e:dd:5a:69:2d:3b:
14:d9:8b:cf:00:12:07:4b:7b:4a:66:3f:47:03:e9:2e:0c:40:
68:f1:69:9a:5b:8e:5e:d1:0a:3d:88:f2:5b:23:69:e0:79:d0:
6d:48:53:5a:da:1d:77:95:31:17:e2:dc:6f:82:68:bc:54:19:
08:fd:43:7e:a3:4b:60:32:30:88:b8:0a:1a:75:d1:7b:62:c7:
7a:4e:7c:6a:30:12:9a:96:12:34:89:48:99:7b:98:88:d2:15:
ba:f3:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:20:27 2025 by rpki-client