Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier: h1zsT5dg/hwU/ymkrYjYAAUhTMnDDFHp9he/9CJiNus=
Subject key identifier: 91:B8:C6:F1:56:C5:9E:CD:BC:D8:61:9D:29:14:43:10:8D:1C:DD:65
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 01968FCBFE2D1F7FF54FFD78E034270B2688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number: 084F
Signing time: Fri 02 May 2025 07:00:32 +0000
Manifest this update: Fri 02 May 2025 07:00:32 +0000
Manifest next update: Sat 03 May 2025 07:00:32 +0000
Files and hashes: 1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=)
2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: VT3uziVudmCk+7u5i6YAnFQ0/DcExgAw2CbUoXS6OIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:fe:2d:1f:7f:f5:4f:fd:78:e0:34:27:0b:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: May 2 07:00:32 2025 GMT
Not After : May 3 07:00:32 2025 GMT
Subject: CN=91b8c6f156c59ecdbcd8619d291443108d1cdd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:86:ec:66:01:6b:00:cf:5d:c6:d0:5a:b9:
2f:ed:7f:1b:41:b7:34:79:b0:3f:4d:36:50:c7:2d:
45:5a:08:8c:32:01:ab:5b:04:5d:85:7e:c0:70:aa:
8e:d0:32:3a:f7:f8:31:10:11:07:03:21:3f:11:d0:
94:ae:63:60:6d:b3:33:b7:c9:46:55:4f:07:3e:43:
4f:97:ef:bc:85:e8:f0:e1:8b:d5:28:99:90:f5:47:
e7:6c:7f:d5:e3:d8:ca:d9:65:34:5a:b4:7b:0a:65:
dd:3c:8b:9f:a7:70:97:30:01:75:06:95:aa:2b:46:
e1:55:8d:78:39:70:cb:a2:7c:87:a1:d4:ad:ec:7e:
6f:03:e0:18:d0:6b:35:2a:85:13:4b:db:e5:d2:e2:
95:06:25:94:0a:f6:00:d3:6f:8b:5e:88:18:4d:6a:
63:d3:57:e7:b5:ab:94:25:9d:94:2a:7f:e4:55:0f:
54:75:3e:ec:1f:83:1a:e7:5b:7e:ec:5c:f3:1d:91:
85:c7:a8:b7:a6:2c:b2:46:1f:e3:08:d4:82:9f:b2:
9f:e1:e7:c4:c0:69:67:88:bb:68:75:6c:9a:93:f7:
d8:32:55:21:f1:30:bf:ed:64:71:69:9b:db:b3:b1:
9d:77:e9:84:af:85:71:d6:e3:1c:2f:d5:fb:72:5d:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:C6:F1:56:C5:9E:CD:BC:D8:61:9D:29:14:43:10:8D:1C:DD:65
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ed:b9:be:56:03:dd:a4:e1:9c:84:52:15:aa:90:9f:80:d0:
76:e0:fb:19:21:27:5d:5a:15:21:f9:d4:7b:3a:e7:53:ff:ff:
d1:f1:cc:d3:6a:4e:d3:9d:5e:3c:44:74:09:2c:eb:53:63:4e:
df:bc:11:20:d5:27:f0:08:8f:90:66:37:fd:24:e6:14:6a:34:
8e:dc:7a:6f:1b:7b:8f:3e:44:50:76:94:c1:81:6a:f9:53:9d:
39:29:30:ac:f5:1e:88:7c:f2:1f:58:4c:c8:8c:87:42:23:1e:
21:b1:1d:6f:97:e2:a7:c1:01:21:6d:0f:89:85:cd:46:b5:bd:
9a:0f:b4:62:41:ba:b1:42:a9:fd:08:30:fe:0c:44:74:61:e9:
c5:3c:72:c1:a2:84:24:cf:99:18:cb:dc:de:e8:6a:8e:b1:92:
b5:cc:40:d2:22:bc:a9:17:aa:e3:ae:6a:75:d1:05:b3:7e:4d:
44:e0:d9:1b:0f:59:8d:97:b2:24:80:54:97:2c:68:1d:4f:a8:
f6:80:16:88:b6:36:9d:1f:33:2c:8d:2d:f1:14:78:91:b5:33:
f9:97:f6:f8:25:6e:4a:47:4f:61:9d:ac:69:7b:c0:f6:d9:af:
f4:b9:11:0f:69:8e:98:1b:ff:62:d4:71:0e:eb:ed:c0:1b:48:
67:ec:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:09:24 2025 by rpki-client