Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: 9457WpPIRgQAEBMmPv0T2DWAqYP7/7cHPiAnrek0N5k=
Subject key identifier: F6:B5:12:2E:66:A7:D5:05:27:CE:1B:6D:2E:66:73:E9:6C:8F:A1:2C
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 0196854813DDCB325A652848D05BDDC766D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 0497
Signing time: Wed 30 Apr 2025 06:00:15 +0000
Manifest this update: Wed 30 Apr 2025 06:00:15 +0000
Manifest next update: Thu 01 May 2025 06:00:15 +0000
Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: /s8KJ4Ifi3XgLAz9U0P4NgK1AUDvZU6qtFkXj+ITziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:13:dd:cb:32:5a:65:28:48:d0:5b:dd:c7:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Apr 30 06:00:15 2025 GMT
Not After : May 1 06:00:15 2025 GMT
Subject: CN=f6b5122e66a7d50527ce1b6d2e6673e96c8fa12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:bd:80:be:91:96:e4:8c:a3:66:db:b0:b9:
cb:9a:0a:20:1a:74:f2:0e:72:16:e8:6b:0c:e0:64:
63:fe:58:e0:ab:78:14:b1:ee:3f:9c:a5:12:65:09:
91:78:b9:f3:93:8d:8a:4b:21:38:ed:75:d2:43:1b:
41:86:ea:50:d9:54:08:b4:9a:bd:12:8a:ec:1c:60:
40:48:a5:ff:b4:31:8d:a1:b7:8a:b6:09:a9:52:2a:
08:f6:bb:c8:55:84:02:6e:86:eb:47:f1:aa:c8:87:
ff:e2:0a:9d:3e:d5:8d:b4:ac:3b:39:92:74:fd:a3:
a6:db:76:d5:9a:55:ff:cf:ed:71:8e:45:78:2c:82:
36:de:b6:44:e1:1d:b7:d1:32:5b:85:2b:87:2f:77:
49:b5:1f:dc:fb:56:e1:b5:41:9b:d3:ea:fd:d0:a9:
5c:d6:fd:4b:82:16:98:2e:70:35:c2:67:88:41:16:
0e:da:af:59:ad:f2:09:c9:1f:f7:53:ec:50:62:ed:
12:e3:56:38:05:a8:2f:2c:0b:c1:5f:41:37:2c:f6:
f3:28:81:d9:df:5e:6e:26:d4:f7:f7:71:f7:64:34:
e5:5d:47:49:11:dd:f9:d6:b4:cf:70:54:82:4e:2d:
0f:64:94:11:9b:43:e6:77:1e:46:09:71:10:ee:f9:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:12:2E:66:A7:D5:05:27:CE:1B:6D:2E:66:73:E9:6C:8F:A1:2C
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0c:e9:ad:e9:dc:f9:4d:4a:4b:4c:bf:c5:ae:07:e2:7b:f7:
13:75:d1:85:8a:ad:d7:ce:60:99:62:3c:11:0e:6b:f0:79:0f:
0e:de:b2:67:07:93:33:28:18:30:17:3c:e6:29:7f:21:4c:bd:
ff:cc:58:d1:15:25:25:7d:ac:45:b7:b0:9c:11:0f:ac:33:ec:
4f:15:82:1a:b4:3f:78:d2:e7:90:07:f0:f3:72:74:24:b6:5b:
cc:d4:bf:70:19:a8:17:42:9e:f6:cf:3e:d9:33:16:b0:c1:3f:
0c:c7:c4:1b:96:6d:e8:0a:e6:e0:95:6c:0c:eb:4d:8f:4a:ad:
a9:8d:6b:c5:30:b8:d0:24:be:1a:78:4b:28:6b:7f:37:dc:cf:
0c:31:c7:5c:b1:ce:ff:eb:18:54:98:aa:b3:98:cc:f8:b7:00:
a6:34:92:e3:c5:5b:ac:d2:0e:e4:74:6b:d0:b0:a2:a1:f1:7c:
a9:c4:81:b7:e6:b8:df:df:82:7f:94:2f:07:71:bd:24:29:d7:
46:af:56:68:c2:83:5d:b6:53:ce:43:19:6f:90:fe:db:45:cb:
fc:05:04:43:49:a1:fb:40:24:f6:8a:a5:00:e1:80:f3:66:5d:
75:a3:9b:8b:df:bd:f0:bb:fd:a7:82:dc:2a:9b:7b:05:b9:72:
97:1d:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:17 2025 by rpki-client