Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: rRH6M7l8E6GaV7/6Ne8ABpm7mq0/OH59lSsR6w2Dabo=
Subject key identifier: 1E:E9:EB:BD:B6:57:6A:B4:4C:85:1F:B3:AD:D6:1B:9D:D1:15:8A:A1
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 0196C796CAE7FD16D4915749BB5ED4C1F819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0ACE
Signing time: Tue 13 May 2025 03:01:10 +0000
Manifest this update: Tue 13 May 2025 03:01:10 +0000
Manifest next update: Wed 14 May 2025 03:01:10 +0000
Files and hashes: 1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: H6LbyFNsvGboJnLItWmXNcKf+0kYdCM2WySfK5IvNAw=)
2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:ca:e7:fd:16:d4:91:57:49:bb:5e:d4:c1:f8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: May 13 03:01:10 2025 GMT
Not After : May 14 03:01:10 2025 GMT
Subject: CN=1ee9ebbdb6576ab44c851fb3add61b9dd1158aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:21:b0:92:53:e9:2b:fc:25:32:05:a7:d6:
27:23:ac:27:93:0a:a2:5b:da:d6:12:1f:ee:85:bc:
7b:51:a7:7d:ed:74:b5:73:93:f2:a2:18:ed:7b:b4:
4b:df:1a:9e:65:07:ea:53:57:23:0b:44:8a:ff:90:
3b:d0:9d:ca:ad:b2:a0:a9:93:4c:c3:93:3d:f6:e7:
e7:c6:10:ad:16:37:19:4c:21:e6:ea:ec:8e:5f:5b:
11:29:10:6b:9f:9f:b4:4a:0b:b8:3c:d0:e0:72:ef:
8a:06:06:03:26:1a:6e:00:83:bf:b4:4f:6c:8f:6b:
58:62:b1:cd:a6:11:e0:af:8c:73:8b:35:a6:97:80:
7e:ba:ec:4d:01:bb:57:5e:4c:e3:d1:ab:3c:88:3f:
37:87:5e:0f:93:2d:73:73:76:7d:8c:43:7d:5f:c5:
4d:6e:66:33:95:33:2e:a4:47:99:01:8e:4a:13:c4:
ac:64:b5:c8:3a:5e:b3:d5:3a:bf:7a:50:b4:b6:64:
f3:40:4d:7a:9e:b6:e3:67:82:6a:ff:50:f9:e5:18:
06:8c:b6:2c:9b:43:b9:ce:92:1c:3c:39:88:30:fd:
47:08:ed:c9:12:0f:b3:6e:7a:81:cd:89:44:18:06:
52:28:18:e5:53:fb:ce:8c:4f:1c:bb:9c:cc:8d:62:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:EB:BD:B6:57:6A:B4:4C:85:1F:B3:AD:D6:1B:9D:D1:15:8A:A1
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c8:4e:cb:de:ca:03:d5:dd:89:01:db:d7:c0:e7:88:9e:41:
b5:3c:a8:2c:cc:9d:6d:c8:ca:61:e3:d1:b3:30:8e:5d:1a:e7:
2d:c1:97:04:3e:02:04:87:e3:c2:a1:04:d9:4b:66:b8:4f:60:
1c:f3:1c:4d:05:f8:7f:e8:9a:b0:b1:2f:44:ae:d1:b2:45:87:
0d:7c:ef:30:2b:7a:0b:e3:2b:8c:23:fc:f6:a1:34:8f:37:33:
3f:09:71:91:0d:5f:a7:0e:ed:a3:0a:db:54:2a:e3:4e:ee:8b:
95:28:47:ea:9c:19:4c:13:35:7b:0a:ef:0c:fe:bc:50:c4:ad:
be:4f:53:42:6b:55:e9:7e:a5:05:1b:43:d5:85:a4:85:38:3a:
02:ac:33:24:07:a6:04:a2:5e:d4:4a:01:e5:58:38:0b:0f:79:
a4:c3:e1:ab:5e:dc:42:73:77:ca:f8:43:59:a5:7e:7d:10:23:
f4:b3:dd:d6:c0:f0:e7:44:b6:13:7d:8a:9e:9e:94:b9:70:3d:
5c:16:33:7d:d0:25:bd:31:4c:92:1c:5f:13:c4:d8:11:a5:c2:
29:ec:ee:22:f6:b8:e5:ab:d7:34:ee:cf:d8:f1:e9:7e:f0:fe:
9c:7a:f6:6f:3b:80:dd:b9:b8:af:58:15:93:bb:22:b2:18:39:
69:83:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:40:49 2025 by rpki-client