Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: MH7DGC4Dq9ISylpTQ9q26WHDPwQWvPUEBunZvL5JaSM=
Subject key identifier: 53:9F:B8:9B:E8:13:27:2E:68:44:74:D2:01:B5:E2:88:0F:85:AD:B4
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 0196797B1698C90CCF406C910578BA7DD07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 1352
Signing time: Sun 27 Apr 2025 23:00:31 +0000
Manifest this update: Sun 27 Apr 2025 23:00:31 +0000
Manifest next update: Mon 28 Apr 2025 23:00:31 +0000
Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: wGEL73qvRJ3GB8RncJTae56HK3JI+nCWcKpY2UG2Ut0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:16:98:c9:0c:cf:40:6c:91:05:78:ba:7d:d0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Apr 27 23:00:31 2025 GMT
Not After : Apr 28 23:00:31 2025 GMT
Subject: CN=539fb89be813272e684474d201b5e2880f85adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ec:1e:b0:18:f3:6a:66:9c:70:92:f9:3c:8b:
f4:59:35:63:44:63:6b:8d:bd:e0:d2:35:9f:a9:5c:
30:79:b6:a9:c4:14:77:7f:38:e3:9d:0a:aa:ca:95:
13:1c:b2:0c:93:9a:88:1b:6b:4c:6a:45:6c:66:a9:
71:17:87:e4:3b:76:ee:ae:ba:4a:83:67:7b:ad:03:
68:6c:a4:b7:12:8b:da:7a:3b:3c:cc:61:d5:de:d5:
b3:85:ca:34:6c:3c:55:19:10:46:69:33:06:53:ea:
a4:83:59:7e:58:c4:1e:68:41:ca:5d:f2:38:1b:3a:
fd:29:f5:0a:c1:39:b1:7d:1f:c0:f1:47:52:21:8f:
39:22:63:f1:e8:f9:28:67:91:3d:44:65:a5:de:8c:
12:24:ff:36:f2:43:80:eb:b9:c2:07:d4:2c:bb:67:
bc:50:69:50:aa:c6:ff:0d:4a:e5:23:58:c3:0a:cc:
45:5b:38:83:b1:cf:d8:2c:28:ae:04:37:08:f6:bd:
f3:13:35:a6:43:ef:bf:46:1e:dd:2f:35:0c:ae:0a:
a8:dd:a5:9b:d8:7b:42:1d:07:9d:84:40:5b:10:19:
dd:5a:e6:dd:13:aa:df:e5:7d:ef:2b:39:52:35:96:
1f:fd:2a:61:29:84:0a:38:57:60:42:09:4d:12:70:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:B8:9B:E8:13:27:2E:68:44:74:D2:01:B5:E2:88:0F:85:AD:B4
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bf:ad:63:d8:dc:af:78:45:6f:29:f3:28:0a:f9:8d:f5:63:
f4:e0:1b:46:c5:44:f0:5f:85:89:2c:36:1a:47:b0:44:a6:1e:
e8:67:b9:7e:f1:a6:71:ef:a0:1e:d8:e4:d5:14:12:7a:b9:1f:
12:60:84:a8:5f:d2:dd:3c:00:16:82:a1:ff:aa:16:89:c1:94:
ec:54:f7:4d:e3:96:05:93:88:c7:ca:73:17:aa:20:37:2d:1b:
49:1d:6a:70:47:11:ec:ec:8c:c4:c8:06:29:84:78:e9:d2:19:
99:fc:44:0a:0d:3a:04:62:7f:c2:b8:e7:81:ba:b7:73:8e:bf:
af:8c:63:66:13:57:fa:86:60:10:c9:59:15:ee:c4:ba:8b:05:
fd:b0:a4:80:23:c1:1e:b2:a1:e4:c8:5b:57:6d:c3:23:cf:7c:
24:dc:fd:02:11:61:c9:d6:ed:0f:48:8f:b9:e3:d4:12:0d:a6:
ba:b8:4d:14:71:c5:a9:3a:dd:1e:69:2e:eb:4c:07:25:13:b3:
a1:cb:07:57:16:27:03:07:13:54:e2:b3:4d:e7:d3:d5:89:d4:
ac:f9:cf:98:35:2f:8c:79:5f:50:71:35:61:12:a5:e1:4c:e3:
6b:24:13:e2:a4:6e:3e:6c:db:bc:e7:f4:c7:c8:74:a4:dd:75:
9c:cb:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:02:25 2025 by rpki-client