Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: zQisjqyU6HvKSDxcRX+HT+1fCHiqjT0VwCp5Vk4oWY8=
Subject key identifier: 0F:21:93:8E:6A:68:1E:CD:BF:39:03:70:E4:3D:FC:42:E9:99:4A:0E
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 0196A49C96D1FBE94A3961D0F982573947A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1183
Signing time: Tue 06 May 2025 08:00:47 +0000
Manifest this update: Tue 06 May 2025 08:00:47 +0000
Manifest next update: Wed 07 May 2025 08:00:47 +0000
Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: JdNLwIPerPoOMVsM6smpBsj+T4IzaYLIBXUIKiHxDzI=)
3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:96:d1:fb:e9:4a:39:61:d0:f9:82:57:39:47:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: May 6 08:00:47 2025 GMT
Not After : May 7 08:00:47 2025 GMT
Subject: CN=0f21938e6a681ecdbf390370e43dfc42e9994a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:61:62:c7:fd:d5:8f:66:bc:e1:d9:1a:5f:
2d:e0:85:10:68:a4:27:a5:3f:ba:fb:17:06:25:c3:
05:2f:b9:74:aa:31:4a:c5:ae:05:fe:bb:fe:a9:33:
96:27:09:5b:ad:71:30:12:93:37:4a:f9:26:12:c7:
2f:cc:be:a2:1f:63:36:c8:43:e1:ac:47:0d:d9:1a:
e8:b4:78:f0:42:67:b1:03:2f:69:5c:d3:03:6d:03:
a8:e9:e9:05:22:61:c1:4d:c1:0e:4a:4e:e3:00:06:
48:bb:18:a7:1e:1a:d5:9a:a0:db:cf:ea:28:38:b7:
37:97:c5:fa:66:c0:89:d5:f2:34:42:16:aa:06:51:
e3:99:a0:5a:2b:42:ff:65:f3:e7:52:09:13:c2:9a:
9d:10:a7:cb:95:88:19:9f:21:75:01:8c:24:78:8c:
74:a7:b6:6c:5b:2e:25:96:f8:b4:2b:3c:47:4f:22:
a5:14:1a:4a:d4:bd:de:e8:9d:89:96:eb:a8:75:ec:
79:cd:c7:63:9e:7c:e1:3a:a7:6c:7e:13:41:a4:c3:
bd:f3:cc:a5:01:cd:74:e9:ac:6f:c9:9a:75:66:d7:
80:e1:8d:ee:e9:87:8a:a6:11:55:2a:5d:06:43:8b:
5c:b4:71:df:a5:c7:02:e5:cb:1c:43:48:28:2d:78:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:93:8E:6A:68:1E:CD:BF:39:03:70:E4:3D:FC:42:E9:99:4A:0E
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5b:78:2a:b5:a5:74:97:c3:1b:ea:ad:63:51:35:e2:22:97:
1e:34:81:6c:5b:07:a3:21:f2:4f:56:2e:99:38:4e:10:e6:a4:
56:04:40:f1:4b:59:90:4e:dc:f5:28:69:1b:8b:c6:77:cc:62:
84:9b:6a:d1:13:6a:db:17:b4:2b:ca:98:54:ed:1e:7c:4a:1f:
9e:97:3f:ec:4c:5b:22:c3:c3:b2:c5:f7:1a:5f:27:43:30:48:
fd:e1:96:ac:70:3d:0f:13:38:6e:80:1a:93:0b:62:26:49:a3:
ac:f1:52:23:a8:64:57:46:9e:26:cf:49:7c:65:58:64:88:b0:
40:d0:c8:b5:18:c1:f3:5c:1d:2e:2e:76:19:27:0f:47:ee:c6:
e7:c3:59:de:f0:67:54:09:98:73:44:99:f0:ab:37:3c:9f:42:
4d:31:52:a8:8a:34:03:bc:1a:b2:81:3d:5f:a6:ef:fe:82:43:
cd:cb:d4:83:e8:54:bb:09:d5:48:b5:7c:3a:17:1e:41:e8:2e:
2e:bb:ff:c2:e8:83:13:e3:32:b5:7c:0b:b7:78:49:7d:33:84:
f9:7f:6f:73:fa:d7:9a:ec:a6:38:c7:cb:73:a7:10:82:f2:a2:
39:ed:d4:5f:eb:80:d7:73:24:05:d0:41:8b:a8:a9:8d:32:88:
ce:61:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:07:51 2025 by rpki-client