Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File: Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier: QiWd0ce7b9dEgoVfncd0I+glKwP/sOnBf4+hLCGt8ZA=
Subject key identifier: 28:4C:33:A2:F6:93:CF:7A:46:DE:AE:43:B7:5C:A1:81:63:CC:E6:34
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 0196BCDC0204B56FE611A07091C1576157F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number: 0283
Signing time: Sun 11 May 2025 01:00:57 +0000
Manifest this update: Sun 11 May 2025 01:00:57 +0000
Manifest next update: Mon 12 May 2025 01:00:57 +0000
Files and hashes: 1: 7uuYIODPb_AxpEbSkXG4ikwEz-8.roa (hash: H14+KgaSvxKeyLjcS++jAl+BQPd40Sm8S2VRvJlA/xs=)
2: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (hash: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=)
3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: 0Fxb6qyLTX3B21Fwx8awjHr4E73lSPTbz1oYQI7JB28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:dc:02:04:b5:6f:e6:11:a0:70:91:c1:57:61:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: May 11 01:00:57 2025 GMT
Not After : May 12 01:00:57 2025 GMT
Subject: CN=284c33a2f693cf7a46deae43b75ca18163cce634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:64:e3:4b:54:b5:01:96:99:16:5b:75:60:
63:03:19:ca:9f:e8:cd:3b:e7:e7:97:41:32:5f:49:
72:01:17:5d:36:84:15:9b:83:8a:15:1b:fd:9a:dd:
7f:56:d2:51:20:7e:c6:07:f3:89:d1:01:b0:c9:ed:
30:9b:88:62:d8:38:06:c8:17:3e:e4:e7:af:57:49:
39:06:28:78:ee:3b:c8:30:b8:0a:5f:c4:f4:08:9a:
5a:e9:d2:7d:2d:49:f4:84:63:64:15:c9:fe:33:86:
41:2b:58:12:0c:e0:55:83:85:c0:fe:cb:c2:a6:2c:
77:cb:a3:1b:bb:fa:e5:be:b5:e7:d1:b8:ed:e4:aa:
89:fe:97:17:32:e5:28:5c:d0:df:43:8f:b4:43:8a:
33:29:c9:ce:a4:bc:89:bf:57:e3:be:02:28:85:69:
e8:a9:9b:71:99:fe:7f:14:10:98:67:b0:29:85:ca:
4e:1b:db:1b:c1:c7:49:6a:c1:a2:8b:e2:5e:4a:2d:
54:61:2c:19:ff:5c:ba:82:13:5d:33:92:c6:62:95:
bd:5b:b8:78:91:b0:8f:45:6b:ea:1b:d8:4a:34:ea:
3e:c0:d9:85:99:26:37:c1:0d:0a:26:57:c2:7c:f3:
00:6f:58:92:88:b1:a9:9d:21:34:b9:b2:75:09:42:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:33:A2:F6:93:CF:7A:46:DE:AE:43:B7:5C:A1:81:63:CC:E6:34
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4e:24:f0:92:29:10:19:14:91:ee:9a:12:8c:de:0b:9c:18:
90:1b:4c:f9:03:ec:39:28:fa:ee:14:05:b5:65:42:d7:18:bd:
94:66:50:9e:5d:4a:c1:f5:96:16:37:dc:c1:10:a3:2c:c2:22:
aa:87:bf:de:5a:38:d6:c7:d0:f4:7f:e0:8e:e0:af:cb:c8:6e:
cb:12:06:6d:1b:19:2f:40:94:e6:7a:a3:18:b5:cd:20:cf:4f:
39:0f:44:f5:59:8b:70:23:02:fe:90:6c:c6:4f:ba:e4:be:e9:
2f:e2:97:27:f6:de:e1:c0:6a:be:7c:f7:bd:97:ab:db:44:fe:
b2:fb:86:32:c6:8d:93:62:be:09:51:2d:67:2f:48:d1:f1:85:
17:58:15:51:39:9a:3e:5a:89:89:69:c9:c8:02:71:92:89:fb:
f9:8e:40:c7:c4:a0:d4:70:2f:fb:ef:ce:19:e4:ba:35:18:68:
2f:f3:5a:10:5b:ac:99:0b:7b:4e:77:de:1c:21:a9:ec:fb:f3:
f7:37:e9:c8:72:8e:9c:9b:51:25:6d:d9:63:c3:ec:57:3f:6e:
89:24:1d:ac:81:1d:99:c7:ef:4b:d9:6f:b9:c6:7a:41:29:b6:
2f:cb:de:5b:bd:0a:dc:a8:6c:9f:43:8f:67:bd:d3:d3:d5:28:
fe:95:b4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:02:37 2025 by rpki-client