Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: VvkYETPpJXCRT67laB7W3XMNzxjjaS24ZDkPyriE4Rk=
Subject key identifier: 9A:94:DC:4B:0D:09:A2:E0:5D:11:26:AB:EF:9E:56:C6:45:85:20:93
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01967679E13F5990BF8984930973956045C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: wnaQ0pEIrbUA8TYwMGKL2FXVOZUvB2euJvPrw5Qwvnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e1:3f:59:90:bf:89:84:93:09:73:95:60:45:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=9a94dc4b0d09a2e05d1126abef9e56c645852093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:3e:f2:78:d5:d6:07:9a:12:a8:01:ed:38:
73:74:d3:25:22:0f:5e:c1:d1:bb:9c:ef:e6:3c:e5:
42:cf:d5:3f:29:69:42:eb:3b:4e:1c:06:02:fb:50:
73:9d:10:46:7f:ed:a8:e9:83:ec:e9:e5:81:88:30:
27:38:7b:71:d7:48:5d:69:42:c5:8c:d8:38:fe:46:
8d:f2:01:f3:1b:22:1d:57:c2:5d:21:ea:c5:fa:cf:
59:08:97:91:a0:dc:c7:80:ae:82:8f:98:5f:da:15:
b4:09:d4:19:cb:dd:32:b8:f3:08:2a:5a:72:6b:9b:
ed:ee:bd:ee:9f:5c:b9:73:39:a2:a5:e8:94:53:34:
2a:72:55:b2:68:09:68:d1:ad:cb:ab:8a:e7:91:bf:
f9:44:64:46:fa:c0:13:9c:49:5c:e7:2e:f2:a2:9e:
6c:d4:f7:4f:c9:f8:01:06:7b:4a:80:f0:1a:82:99:
fe:ac:73:9f:27:e0:44:96:a0:80:d1:76:1c:4c:1b:
c4:e2:69:87:a1:9f:1d:3f:ab:34:59:22:bd:3e:5f:
8a:b8:70:c3:0a:4e:dc:d2:7c:80:77:e7:6a:b2:91:
ea:be:c0:e7:99:2e:7f:b8:60:f9:8b:3b:67:8f:5a:
14:b3:76:16:5b:d2:6b:ad:94:2a:64:4a:49:79:fb:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:DC:4B:0D:09:A2:E0:5D:11:26:AB:EF:9E:56:C6:45:85:20:93
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:98:a5:75:8d:d9:cb:17:97:44:b6:b2:03:78:e9:d0:63:40:
32:38:16:06:66:c1:0e:0f:af:9b:f9:54:a5:0d:c8:fe:57:be:
86:18:b9:e5:86:01:e5:76:11:95:5c:8f:d5:4e:eb:c8:6e:f3:
ee:a0:20:09:20:ff:9d:d3:f3:b7:77:11:cb:78:85:df:6b:81:
3d:08:30:71:c6:22:12:aa:dd:a1:fc:f6:e7:41:2c:e0:b3:a3:
23:b1:80:a6:93:5c:83:e5:cd:94:4e:e8:0f:a0:5b:c3:02:82:
a5:80:12:51:2e:89:86:f6:4b:9a:09:97:90:26:c1:83:cc:46:
e6:bd:65:a0:84:a4:f2:7b:37:d0:7b:f1:e7:e1:95:f7:ed:2f:
0f:50:1f:1d:18:e1:09:49:4e:80:33:aa:68:2d:f1:eb:9e:69:
ac:91:09:3e:50:2c:9c:43:45:d4:0e:b8:b7:ae:c5:1a:b2:b9:
04:cc:cc:f2:3c:82:10:f4:5c:45:69:12:5d:8e:1a:bd:34:c6:
e0:b2:a7:dd:86:10:9b:ae:5c:87:68:56:6d:c4:2d:5c:bd:72:
c5:9d:57:7f:bd:fc:e1:b2:39:4b:da:4a:72:a5:23:d9:b9:1f:
ab:db:7c:12:aa:3e:a1:aa:59:e5:77:24:f1:1b:6c:62:e8:00:
4d:4e:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:37 2025 by rpki-client