Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: kUzMmQFIE/4aiAg60SCtyDKDAf/vbvSEbrVbIwDxhVY=
Subject key identifier: 70:77:6A:4A:A7:0D:2A:CA:38:E5:C6:28:4D:E3:E8:4D:2D:FD:CB:1E
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 0196AEB268BF308FCDC85D16C47ACDE47FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0DB3
Signing time: Thu 08 May 2025 07:00:49 +0000
Manifest this update: Thu 08 May 2025 07:00:49 +0000
Manifest next update: Fri 09 May 2025 07:00:49 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: vde/4XNIKP/dpkLkAq64P3C9lwwHKBKKeUG2B753zzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:68:bf:30:8f:cd:c8:5d:16:c4:7a:cd:e4:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: May 8 07:00:49 2025 GMT
Not After : May 9 07:00:49 2025 GMT
Subject: CN=70776a4aa70d2aca38e5c6284de3e84d2dfdcb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:dc:48:52:3d:a2:01:7e:69:c7:fa:b8:7c:
dc:5c:af:13:c0:c6:19:65:0e:29:cc:a7:da:cc:7f:
17:56:53:56:a0:29:ce:4d:14:42:f2:1e:c1:34:08:
f8:0e:4b:60:19:5a:82:78:63:c3:c3:a3:6c:72:19:
d5:89:6e:8e:61:d9:5e:5b:63:17:56:4e:e3:a7:f9:
ad:97:42:43:3b:37:24:ce:40:51:f3:0a:02:f8:a5:
97:7f:fe:12:94:7b:a3:25:9b:57:f2:6f:d7:5c:77:
18:49:c6:13:23:8c:0c:ca:62:46:df:80:dc:a1:26:
07:7e:20:ae:4f:fe:4d:fb:de:05:f6:e7:9d:15:be:
99:06:ba:2c:aa:bc:43:d8:e0:58:58:01:12:e5:10:
5b:5d:8e:af:81:9c:81:6b:8c:53:76:59:ef:77:b9:
b5:af:1d:8c:3b:47:12:7b:95:1a:75:a2:38:9e:82:
c8:90:4e:5b:41:59:81:36:72:22:69:bd:30:bd:51:
a9:62:9d:f5:5c:29:a6:f0:bc:f1:59:c7:34:0c:11:
cb:47:af:96:38:1a:cc:9c:60:d9:8f:2f:91:46:2b:
fe:93:9a:20:52:d4:67:92:ad:e0:41:d0:0d:3e:33:
36:ac:84:75:71:7e:cc:81:6d:54:7c:8f:e4:db:27:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:6A:4A:A7:0D:2A:CA:38:E5:C6:28:4D:E3:E8:4D:2D:FD:CB:1E
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:36:75:f9:39:e6:26:3b:8f:32:b0:5b:95:d2:ef:96:5b:6d:
e2:6e:fb:cd:04:70:c2:cb:a8:2f:da:d6:be:4e:ee:7a:85:78:
9e:34:af:b5:3d:e5:cd:ff:f6:1a:fc:96:8f:3a:60:f9:aa:83:
65:b0:3d:39:e6:55:df:07:0b:eb:57:43:c2:a4:33:87:d5:f0:
7d:d4:40:fe:37:a4:c2:77:dc:8e:f7:6f:04:4b:1f:02:a5:6a:
16:87:b5:a0:4c:5b:70:bd:09:94:1c:57:b9:7f:40:11:f8:d8:
b0:92:90:2a:6d:39:21:3b:54:57:90:cb:76:e9:37:62:fb:b5:
3d:8d:a0:4c:d2:30:da:b4:73:1c:44:9b:2d:84:9e:72:80:46:
9a:e6:38:5c:9c:33:c7:03:4c:07:6e:67:fc:50:f1:d9:df:21:
f0:89:a8:7f:55:aa:4b:a8:35:d9:ef:ab:8e:75:01:38:af:64:
a8:47:3a:3c:95:bd:64:cc:5b:ed:0b:44:db:36:75:22:85:21:
e6:ac:0d:22:94:b5:4e:6d:ec:86:3a:e3:5c:04:32:37:96:71:
a3:1c:5c:e4:5a:c2:0d:54:11:0c:50:f6:8d:cc:4c:13:4c:b6:
67:53:5f:22:af:a2:b0:38:a4:c1:02:48:41:cc:ae:f7:a4:af:
66:2d:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:22:24 2025 by rpki-client