Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: urTbs6WeDz6q6ZFUx4E1LjyWJzoUd5ZoMUzsfVm5bqQ=
Subject key identifier: 60:99:11:52:D9:9D:1C:D3:4F:DB:50:DB:CA:5F:E9:20:FD:45:B2:78
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019674FA3ED4B7C264750C8BF9585E3F89DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 02:01:19 +0000
Manifest this update: Sun 27 Apr 2025 02:01:19 +0000
Manifest next update: Mon 28 Apr 2025 02:01:19 +0000
Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: yBaLwKb7DD7SwpY4mSmWxo60/JImLwL9ObSWZzsyGOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:3e:d4:b7:c2:64:75:0c:8b:f9:58:5e:3f:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Apr 27 02:01:19 2025 GMT
Not After : Apr 28 02:01:19 2025 GMT
Subject: CN=60991152d99d1cd34fdb50dbca5fe920fd45b278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:94:32:f5:31:37:a7:56:05:55:67:d9:34:
0b:b1:28:23:f7:2c:8e:39:1e:ae:8f:74:30:8d:4f:
bd:41:14:85:6f:62:8a:81:15:ff:25:af:b8:f1:13:
84:77:90:fa:77:87:ea:16:00:5d:b3:4f:2d:25:45:
d1:79:5e:f8:9d:24:bb:c9:ce:16:20:a1:cb:77:d4:
0b:41:e4:bc:9e:03:b5:0f:2b:c9:b9:02:2a:53:a2:
03:50:a5:a8:bd:39:63:80:5e:24:20:44:f3:b2:98:
e5:c3:8b:0d:f2:63:ab:28:9e:5b:97:59:05:45:10:
a2:b7:5f:ec:da:2b:64:4c:3a:9f:a4:6f:af:81:33:
2f:be:21:15:77:1f:1b:0b:7b:e1:0b:de:4d:8d:88:
a5:60:3c:51:36:93:a3:97:7b:cf:86:2a:ca:21:e1:
47:6a:04:7f:41:b2:55:72:bd:fa:6b:7a:5b:ff:07:
ba:aa:a9:8b:8b:6a:03:61:3a:df:9e:40:34:d1:10:
52:72:bf:e5:4f:ef:3c:39:93:cb:3f:f9:72:49:bf:
fc:69:36:e8:25:0f:54:90:57:a2:a5:52:5c:82:28:
1c:f3:cc:88:a0:75:1f:a3:a1:98:bd:bb:03:dc:7b:
bd:d2:ab:f3:34:fe:86:f0:c0:bb:90:20:da:9f:73:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:11:52:D9:9D:1C:D3:4F:DB:50:DB:CA:5F:E9:20:FD:45:B2:78
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:be:db:55:5c:81:28:77:a0:8f:02:eb:8a:dc:40:1c:26:
23:30:8f:f3:33:af:7b:7b:86:ef:82:1e:c5:30:5c:91:88:55:
c5:81:d7:41:16:ca:12:69:f9:41:10:38:b8:2d:5e:26:c1:0d:
bf:ce:5b:9a:85:7b:3f:74:05:15:b0:3a:f3:16:94:11:0b:70:
f4:d2:f8:68:1f:e7:04:b2:93:18:5f:75:3a:8c:f5:87:2d:8f:
63:50:59:f5:e6:ed:90:a8:2c:f3:00:b9:e4:cf:cd:4f:25:9a:
78:18:01:5a:77:a5:69:c1:7d:12:be:79:b7:8a:8d:3b:d1:0e:
be:14:b3:d3:e4:a5:a5:f8:4f:99:4a:1c:af:8b:47:17:02:23:
a1:eb:17:25:0d:a2:e7:1d:2d:44:aa:f4:b4:3f:96:b0:73:f9:
15:e7:27:90:4f:5b:ca:47:67:29:2f:62:1b:7c:02:cb:47:5d:
ae:83:3e:68:72:26:52:d3:8a:0c:bf:0f:40:32:25:82:d3:d3:
e2:61:f4:04:02:1b:ff:5f:ef:8f:c7:94:11:52:e9:e9:7a:17:
c2:6b:3a:96:9c:d4:f1:36:a5:32:8d:ad:e5:94:64:67:e3:03:
07:c3:ca:34:92:6a:71:7f:e9:b6:a6:58:23:6d:e2:f2:a8:dc:
be:4a:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:43 2025 by rpki-client