Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: RU/iFg7ZEtNPHuOLrEmIh5MMtzLCYkCh2YIzs0r8rnw=
Subject key identifier: 53:09:F5:CF:05:F1:B9:1B:30:35:99:D6:C1:02:47:94:5A:A4:72:F3
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 0196D852B85013DE760AFC1DF83CA7C1AE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 10E8
Signing time: Fri 16 May 2025 09:00:21 +0000
Manifest this update: Fri 16 May 2025 09:00:21 +0000
Manifest next update: Sat 17 May 2025 09:00:21 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: acb/uSAOXH1eysS9c6YntBh2j1SQdWvBWu7lkBMc2UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:52:b8:50:13:de:76:0a:fc:1d:f8:3c:a7:c1:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: May 16 09:00:21 2025 GMT
Not After : May 17 09:00:21 2025 GMT
Subject: CN=5309f5cf05f1b91b303599d6c10247945aa472f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:ce:d4:c7:ea:3c:ed:2e:27:f1:32:c3:8d:
d1:0c:a0:47:05:ca:76:60:98:77:ab:71:3e:fd:99:
41:4d:eb:99:cc:e8:f7:00:2c:41:49:5c:32:ef:9f:
d3:30:4d:47:66:f0:05:46:2b:8c:dc:72:96:fe:d4:
e7:89:90:07:a1:a8:3b:14:c0:f4:bb:59:1a:e8:a8:
05:c1:02:b6:05:f5:de:3e:14:9a:8e:54:14:d2:3b:
dc:bb:cc:da:f7:c7:f7:ed:a5:b8:69:df:00:b8:27:
18:7c:35:a4:3e:a8:1c:56:a9:d2:c9:43:c1:7c:89:
33:db:70:06:34:72:3b:a6:e5:ae:86:8f:f1:63:3e:
99:bb:c9:78:54:9a:5d:d0:08:34:ec:af:d4:b2:f6:
63:6c:6b:6d:6d:df:f9:a2:d7:4c:06:9a:05:17:f2:
60:eb:8d:76:29:2e:3d:c3:30:4f:96:88:e6:32:33:
36:af:0b:94:dc:d5:6a:cd:75:fe:c8:6b:94:b4:cf:
49:78:17:65:1c:f6:02:25:a9:21:19:7d:ce:95:f0:
8f:0a:ef:e6:d4:ae:ba:2a:c0:c2:66:2a:f2:25:bf:
3d:b7:f2:24:a1:a2:49:50:9e:ab:3d:1e:29:17:bf:
b4:02:60:a1:f9:ba:1c:9f:fd:04:51:54:fc:d6:ed:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:F5:CF:05:F1:B9:1B:30:35:99:D6:C1:02:47:94:5A:A4:72:F3
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:59:20:9e:92:1f:de:f3:ad:08:07:85:68:6f:d9:de:71:99:
b6:a1:38:08:ea:3c:66:0c:2a:1b:3e:bd:17:c7:6c:39:a4:12:
d7:97:5c:1d:f8:0b:7d:6f:d9:a8:7d:4e:09:82:42:04:48:22:
78:d6:df:ce:4f:87:1a:1c:7a:13:86:58:c6:5a:6d:0b:62:d9:
9f:3d:f3:1b:48:7f:c3:2b:91:31:8f:2e:02:81:b2:f3:91:0e:
62:7e:70:22:c5:61:b1:86:b8:c7:c9:7d:3c:d5:ea:16:b7:2f:
47:75:31:b0:49:6d:48:68:f5:71:7f:20:f1:1c:a5:5a:ad:66:
bf:aa:16:d1:1c:9a:b6:50:79:32:9d:c2:2d:32:76:bc:bd:57:
1d:1e:f0:f7:1f:a2:33:4b:29:bf:ce:1f:60:7b:76:de:8a:bb:
fe:24:e9:b8:99:22:91:20:be:57:ee:e7:3a:37:3b:84:9c:e3:
a5:dc:84:f5:e7:96:cc:ef:1c:89:84:37:cc:ff:25:31:76:a0:
fc:34:81:f2:89:00:2e:8b:97:a0:7f:f0:b9:62:d1:24:8b:4f:
3b:af:4c:5f:e1:03:7e:ed:5f:ca:07:60:b3:e4:1e:76:11:ea:
e2:66:38:0e:21:e1:58:b2:88:35:67:48:5c:24:62:de:bf:02:
63:d9:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:16:49 2025 by rpki-client