Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: Htn+n1+wRDkuE3oEe8CbSc2+BPTpgGG7jLvkQyreP4w=
Subject key identifier: 7B:84:1F:9B:ED:3D:EA:50:BA:44:4A:84:A9:A7:38:35:32:63:3D:DF
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 0196759E470D5B9F67714E602AA5235BE4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 061D
Signing time: Sun 27 Apr 2025 05:00:29 +0000
Manifest this update: Sun 27 Apr 2025 05:00:29 +0000
Manifest next update: Mon 28 Apr 2025 05:00:29 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: KxE3I1ZA2skmb6iE+ZsbOzlr/Ft505iYECalnmZ6UNk=)
2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:47:0d:5b:9f:67:71:4e:60:2a:a5:23:5b:e4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Apr 27 05:00:29 2025 GMT
Not After : Apr 28 05:00:29 2025 GMT
Subject: CN=7b841f9bed3dea50ba444a84a9a7383532633ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:78:00:26:5b:28:ca:6b:42:95:0d:48:fe:
c1:c9:47:29:85:a5:23:09:c3:05:cb:28:a0:44:bc:
3e:c7:ad:d6:0d:78:7b:a7:f3:85:e1:f5:90:ab:27:
bb:42:37:d7:d9:a9:28:a0:cc:8d:7d:d4:92:14:5a:
76:c8:02:cf:18:f6:52:31:80:33:49:1f:4e:05:f9:
1e:57:46:ae:f6:23:70:ca:3a:fe:6c:f5:06:da:8d:
05:fa:1b:bc:7c:79:af:0e:5d:2c:75:98:03:49:49:
89:3b:43:3c:60:93:0b:fc:ff:65:65:56:16:d5:cb:
1e:9a:15:87:99:0f:b2:41:15:d8:71:bd:17:c6:14:
96:b5:3d:9c:60:ad:72:dd:5d:f9:ca:23:68:07:d0:
0e:a5:ea:6f:74:31:c3:4c:a9:17:d4:5d:f5:57:fb:
38:54:69:56:60:8a:66:64:63:79:2e:f5:36:54:ad:
b3:10:2f:0b:d5:4c:5b:2c:43:e3:82:4b:9f:82:3d:
c9:97:fe:b2:de:8e:c1:8a:eb:e9:c7:7a:d8:7d:7a:
ec:7f:4f:0a:47:cd:8a:14:b5:40:11:90:6c:b9:50:
5d:68:18:7a:d0:61:34:e4:c0:9a:ab:8b:50:78:de:
49:bd:98:de:96:d2:31:ff:39:ce:6d:63:5f:4d:35:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:1F:9B:ED:3D:EA:50:BA:44:4A:84:A9:A7:38:35:32:63:3D:DF
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4c:8e:7c:fa:e0:51:91:96:56:fb:0e:32:83:04:87:6a:da:
09:50:d1:f2:1f:d9:16:38:b4:a0:c3:a7:9b:e7:b4:b4:07:f4:
53:5f:16:cc:c9:a2:bf:ed:b8:8d:99:11:6e:f7:45:6e:ca:a3:
6e:05:59:3a:8d:e8:f4:be:69:fe:07:fd:9f:18:d1:82:22:57:
94:ce:b7:53:d5:b4:7c:42:8c:59:90:38:09:d8:4c:78:d1:4b:
ee:b4:bc:f4:ba:a3:96:2d:f6:ce:2e:10:1d:09:1f:f6:9e:da:
84:ac:0c:68:65:2d:de:4f:98:24:cd:8a:01:83:af:fb:4e:3b:
2a:dc:f0:ed:ba:28:23:d2:2f:bd:1f:2f:da:89:50:97:11:f8:
c6:80:1d:fe:cc:07:c9:c2:eb:c2:6d:dc:8b:fc:e7:03:af:6e:
eb:ea:03:34:d5:4f:3f:3a:8c:d2:73:eb:27:c0:c5:63:ff:f8:
1e:fc:c6:4f:8d:3f:50:f7:79:b5:71:3d:aa:f1:04:62:8e:21:
4c:5e:38:22:11:fd:d7:79:bb:4a:c9:9b:df:93:c2:65:6b:b4:
92:f0:2c:0b:87:ea:bc:7c:61:f4:d5:19:3a:dd:6e:cb:01:79:
10:21:a2:5b:45:ca:96:d4:65:ff:35:6a:af:c0:af:a2:af:0e:
87:ee:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:57 2025 by rpki-client