Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: lG24Jnh/rdF6Q0tAPF7rfC011m/sCbuGMclIot4Mq1I=
Subject key identifier: 4F:2A:1B:47:89:05:58:29:94:81:37:DA:BD:D5:67:15:B0:71:FC:5E
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 0196AEB27DDD8B65F466A609BE38D9CBCB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 0DDE
Signing time: Thu 08 May 2025 07:00:55 +0000
Manifest this update: Thu 08 May 2025 07:00:55 +0000
Manifest next update: Fri 09 May 2025 07:00:55 +0000
Files and hashes: 1: CEmDIjlP69L5PYySR2T2iyXDrME.roa (hash: 05O1IW8aKnT4rdWzvAMHpHCluhTzbtIkW2W6rQbfTDo=)
2: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=)
3: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=)
4: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: 2gHn7K7u3EWv5qG/JyFE4vKVgDXtr8UejOfgaMK2hg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:7d:dd:8b:65:f4:66:a6:09:be:38:d9:cb:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: May 8 07:00:55 2025 GMT
Not After : May 9 07:00:55 2025 GMT
Subject: CN=4f2a1b4789055829948137dabdd56715b071fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:c7:6f:00:30:9f:62:e2:5a:90:3b:43:5f:
1f:a3:76:b9:ad:7f:f7:d0:fe:7b:5a:7d:41:ee:00:
d3:a2:4d:27:5c:01:60:29:b2:b3:72:7f:bc:85:71:
8c:2d:92:74:7f:27:7d:08:af:2a:63:30:75:28:f3:
3a:6e:be:02:c1:9a:4e:ef:c9:c6:99:55:24:c9:a9:
22:c6:08:32:15:95:46:b3:19:b7:eb:3c:d4:4c:51:
3f:9b:e8:c6:7a:cb:e3:b4:a8:45:1b:12:55:12:37:
9a:51:30:7a:db:63:a5:39:55:b2:76:5f:32:80:e7:
2f:9a:a2:5a:b3:52:9b:6b:40:0c:69:90:d4:de:7f:
12:45:c9:11:9c:fb:f5:10:29:97:81:d4:73:ba:ec:
87:b1:07:e4:b5:e2:ef:66:2c:39:8a:2c:a6:3f:28:
92:30:2b:88:13:f6:46:37:e4:9c:90:7e:0f:c3:e3:
d2:47:49:15:0c:ac:86:be:8d:c9:4d:aa:1b:b7:a6:
55:2c:01:f6:cb:05:94:19:a3:2d:f6:dd:2d:a7:44:
66:b3:df:6c:33:5c:9a:6e:9b:31:b1:fd:b9:20:9d:
1a:a5:5d:7b:a8:54:95:86:b5:85:47:4e:42:9d:b5:
3e:4d:0f:8f:a6:a4:dd:c7:5a:93:b0:92:a8:d4:33:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:1B:47:89:05:58:29:94:81:37:DA:BD:D5:67:15:B0:71:FC:5E
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:03:ad:92:36:bf:49:3d:cb:71:24:29:19:23:6d:10:a2:73:
be:41:54:9e:46:d0:96:8a:8c:83:e9:04:29:a3:09:28:77:87:
09:d9:36:fd:bd:06:c8:7c:a0:a3:35:70:30:4e:64:75:4c:a4:
76:c4:c3:23:2f:e2:46:bf:da:fd:29:0c:2a:e8:7a:d6:ac:e7:
95:85:f8:84:55:c9:1a:fe:72:0d:c1:08:a8:99:9f:45:2c:ea:
6b:a8:67:f8:cb:8d:d4:e9:a0:a9:54:e6:d1:80:e8:f1:70:de:
0c:8e:8d:77:ea:d8:20:10:27:7c:1f:d9:77:ee:8b:d8:25:cb:
b3:41:82:4a:f9:43:35:d7:ca:2f:3c:bc:09:ae:42:b2:34:61:
e7:86:fe:35:a3:04:0c:80:83:bc:67:bc:69:c1:63:cd:49:ac:
76:0b:a4:65:c6:46:aa:e6:20:39:84:cd:25:af:1c:6c:e1:52:
18:27:fa:93:7f:a9:41:fc:1b:02:51:05:c6:6e:c5:f9:87:c9:
ee:cc:5a:01:f6:72:79:2a:30:69:21:57:a8:82:c2:1c:14:1c:
0a:ff:ce:6a:c8:3b:c9:5c:5d:c2:bd:53:76:73:f2:ba:19:45:
8c:87:f0:55:aa:08:f7:09:b2:12:d7:50:70:13:e5:04:6e:62:
38:e8:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:21 2025 by rpki-client