Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: eEropJvBAvJ3mA4xRtFvD/63uSuZGfZuOStlwGuw2C8=
Subject key identifier: 15:41:50:4B:3D:CA:24:9C:C9:8C:B1:18:1F:0B:3C:79:6B:C2:0F:B8
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 0196C916FFDFE28A9A2066DBC970B976B6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0B2B
Signing time: Tue 13 May 2025 10:00:49 +0000
Manifest this update: Tue 13 May 2025 10:00:49 +0000
Manifest next update: Wed 14 May 2025 10:00:49 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: YavX1ttmxkgaA48E4I5+tqK6D9d8s4vMWLBSXAiORHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:ff:df:e2:8a:9a:20:66:db:c9:70:b9:76:b6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: May 13 10:00:49 2025 GMT
Not After : May 14 10:00:49 2025 GMT
Subject: CN=1541504b3dca249cc98cb1181f0b3c796bc20fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:51:1e:c2:c9:a4:93:60:e1:38:1f:02:31:
72:00:a6:9a:e0:00:f7:96:b0:e1:56:29:c1:03:39:
a9:34:fd:e8:f4:95:b7:33:b3:1c:9a:7c:d1:12:1f:
8f:6b:32:c8:6a:b5:12:77:58:0c:ee:21:11:39:cf:
26:1b:84:ae:57:18:d6:35:c3:bb:05:74:af:83:ad:
5a:7a:bf:16:38:cc:d8:f3:97:69:3b:e2:ae:0b:0d:
1a:81:2b:86:37:51:7b:2a:ec:3c:17:da:f6:87:72:
59:6e:81:0f:a5:78:c8:5a:eb:91:63:ff:13:0d:c6:
b3:c5:2f:6c:a2:db:5b:22:9d:a2:4d:1f:9a:06:13:
53:2d:7a:71:5c:1f:36:18:c2:89:10:7a:b1:ef:64:
39:03:e2:be:35:18:b8:eb:d7:5f:82:d6:b5:07:75:
cf:83:42:5d:b7:78:b8:bd:89:be:55:43:51:04:07:
93:bb:01:bf:04:c9:b3:87:45:a3:c5:9f:1f:ad:98:
ba:af:ca:a1:19:5a:62:6f:4b:55:32:6e:96:e8:fb:
1c:9d:4d:e1:24:9c:01:c8:1a:9e:b4:27:cb:7c:0d:
87:27:d1:2f:15:4d:57:dd:77:df:3f:e0:5b:0e:0d:
b4:53:f4:ef:63:c7:02:6a:e2:59:86:a5:a4:99:74:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:50:4B:3D:CA:24:9C:C9:8C:B1:18:1F:0B:3C:79:6B:C2:0F:B8
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8e:98:f8:26:e5:9e:06:19:78:79:4b:63:93:b5:0e:e1:88:
4b:64:3d:13:a1:ea:60:05:f3:16:41:3f:92:98:77:5d:0b:d5:
3f:1e:9b:f2:2d:f9:73:46:0f:97:e6:e9:d5:c1:2d:88:b3:e9:
43:b2:41:6d:e4:28:d7:0d:cb:b7:c0:bc:2b:17:95:f4:64:19:
9a:50:11:8f:1e:47:57:b5:64:b1:22:b9:7b:8f:74:bd:48:d1:
db:6f:fb:48:fe:2e:87:6f:52:46:d6:3f:d7:73:46:07:69:92:
ee:3d:90:d8:b9:c7:db:80:df:d3:28:8a:db:63:59:f7:f3:89:
4c:b5:f9:60:9b:93:54:ca:8c:79:e5:86:a0:55:9e:48:12:5e:
c3:6d:53:d8:ab:42:1f:5c:09:3a:d1:65:71:02:62:34:27:da:
e3:3f:ea:d2:5e:45:d2:4b:7d:36:01:dc:96:a6:db:b7:e2:25:
4a:72:fc:2c:d6:38:80:0e:fc:88:9b:ca:95:5c:5b:f5:4e:7a:
e6:fc:92:f3:c3:54:74:c9:7e:8f:8b:d9:82:9c:91:8e:5d:75:
31:3e:a7:75:30:53:b4:04:f9:c8:14:6b:0a:43:e5:fb:29:2a:
b3:86:79:6e:f7:23:19:96:79:5f:2a:3c:50:fa:00:86:be:4d:
25:50:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:32:18 2025 by rpki-client