Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: U0Preobm/lg8DIPxwOE3rpPMftvt15YKqUe7m+uKQ7M=
Subject key identifier: 4E:87:70:3F:CD:77:A0:5A:31:25:B8:67:63:76:C5:37:8F:2D:75:25
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01968D39432B3BEF3F555D4A8B109362533F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1267
Signing time: Thu 01 May 2025 19:01:02 +0000
Manifest this update: Thu 01 May 2025 19:01:02 +0000
Manifest next update: Fri 02 May 2025 19:01:02 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: T5eZUXrYI2U2o2Ucggdu6R9dccrdeJOSAGu8sn9uPLo=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:43:2b:3b:ef:3f:55:5d:4a:8b:10:93:62:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: May 1 19:01:02 2025 GMT
Not After : May 2 19:01:02 2025 GMT
Subject: CN=4e87703fcd77a05a3125b8676376c5378f2d7525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:28:55:3e:72:aa:97:63:89:f3:55:2e:5d:
88:ac:05:a9:0d:ef:0a:70:dc:2a:02:4d:b0:05:fc:
52:7a:6b:be:37:71:59:0c:a1:ce:a8:d0:c4:17:61:
39:8c:72:e7:de:10:0e:6f:dd:76:33:75:1d:07:86:
5c:1e:59:40:9c:e5:14:2e:1e:c2:f6:12:75:e1:8b:
ff:55:a7:50:13:af:9a:65:50:87:4c:81:86:30:aa:
2b:92:b3:bc:01:8b:d8:3a:e2:60:77:21:0f:f2:73:
42:b3:ac:c8:64:63:1b:42:19:cb:70:6c:ca:11:96:
34:7c:a9:69:6c:9d:04:1c:89:66:50:22:e8:fd:95:
6d:7b:8e:44:1e:04:f1:e5:c8:fc:68:b0:91:11:23:
b6:ab:89:62:ae:dd:0d:11:f0:75:7c:20:00:a2:d8:
a7:83:08:7a:f7:d4:4d:b1:46:25:7e:2d:6f:96:f2:
6b:e9:cb:68:ff:3d:f8:5a:38:3a:76:fc:8c:2c:41:
37:25:58:49:9c:58:23:0b:c0:b5:7e:eb:a9:0b:65:
37:ac:ec:62:3b:83:04:b8:40:61:57:50:31:14:a8:
08:86:81:03:c7:16:14:66:aa:f9:de:1c:d1:64:d5:
08:52:81:83:f2:ef:04:b9:8c:06:c2:09:07:fe:a4:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:70:3F:CD:77:A0:5A:31:25:B8:67:63:76:C5:37:8F:2D:75:25
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:bd:d9:fc:a1:fc:24:ff:6b:1f:80:92:05:c5:84:98:68:e0:
b4:76:ba:7e:d7:d5:23:40:bf:77:74:2d:5d:6d:7c:5d:cf:19:
41:2b:b3:72:c3:49:0a:39:8e:43:10:d4:f7:b2:ff:32:21:de:
54:0f:d8:6d:ea:ec:78:1b:2d:a6:01:ce:03:48:2b:bc:a8:24:
c9:f1:30:0d:dc:35:be:43:a4:21:07:77:2a:79:31:4f:b6:8d:
b5:4d:06:ab:58:8e:5f:94:d1:e5:1b:1d:9d:40:09:0a:a2:30:
c6:3d:8c:08:7e:c3:21:7b:ef:ae:26:2d:d7:4c:9f:f0:4f:f7:
7c:ee:2e:8f:ff:8c:69:d2:75:7a:95:2a:b5:0e:b0:ce:c4:c7:
d5:65:c9:b8:ba:48:95:2d:36:9c:12:90:45:b3:e2:19:eb:b2:
86:e1:03:1e:2e:16:36:56:00:a5:58:e7:68:c2:b1:bf:e1:5d:
b7:31:5b:2e:7f:86:a9:05:7c:a5:32:95:88:6a:bf:b1:50:62:
1b:70:b7:00:62:ea:e2:b1:7d:e2:d7:93:b0:d2:d3:d2:9b:18:
24:d4:db:79:c2:0a:69:0b:5a:bd:8c:45:db:9e:77:23:c2:89:
d9:80:8b:24:7d:56:b7:49:ca:75:17:0d:ab:dc:18:17:3f:6f:
fc:67:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:05:05 2025 by rpki-client