Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: MaGZ4mfkxcopSbJX4YYto4hJ82iH77Rot1sw2W+9w8s=
Subject key identifier: ED:43:08:38:52:63:53:22:50:B6:2B:66:AD:C6:4F:1C:F5:42:2F:75
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 0196B935C08BD83A253CBBFA5F9152178C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 096B
Signing time: Sat 10 May 2025 08:00:29 +0000
Manifest this update: Sat 10 May 2025 08:00:29 +0000
Manifest next update: Sun 11 May 2025 08:00:29 +0000
Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: bTK9LWBDyQuK+PpdX0NjVBsRiA2dsfpMZ7WLFEVsjeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:c0:8b:d8:3a:25:3c:bb:fa:5f:91:52:17:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: May 10 08:00:29 2025 GMT
Not After : May 11 08:00:29 2025 GMT
Subject: CN=ed4308385263532250b62b66adc64f1cf5422f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:73:52:e5:fe:15:b7:84:b9:d9:2e:45:96:91:
bb:0d:22:2b:37:9c:7d:05:e7:f6:8f:c7:fb:94:9c:
43:78:c4:19:6d:13:ef:2d:27:01:e9:6f:51:b5:ce:
ce:82:d0:c3:21:d7:3d:44:92:18:dd:64:c3:aa:6a:
70:c0:39:17:c5:59:99:37:fc:51:64:91:b6:68:5c:
5b:39:4c:43:91:35:01:1f:bb:b3:2b:f1:32:9f:b0:
16:0d:40:26:3a:48:48:22:ce:83:3b:77:d7:26:d9:
42:2e:d6:31:a5:16:f4:31:0c:ba:33:45:de:9b:52:
ab:64:35:ef:ed:f3:75:a6:e2:81:06:12:29:cc:65:
0e:45:13:6f:9b:58:7b:76:08:41:6b:df:2c:aa:02:
5e:a7:88:30:f6:0e:e1:ed:96:6f:ef:6a:14:13:87:
f8:40:2e:2e:fb:c0:bf:7a:5e:6d:90:38:ae:a7:df:
d4:5a:2b:bd:42:f9:e6:11:a4:21:5c:88:84:4c:a5:
6e:a3:ae:af:f7:a5:72:f5:c6:65:40:08:a8:7b:a7:
df:d3:59:b1:16:98:0b:c3:83:ce:8c:6a:29:2f:84:
b7:64:62:31:5d:dd:fa:00:68:4b:95:37:8b:ca:a5:
74:db:71:31:c5:8a:3c:6a:e5:b4:bb:01:ca:bb:91:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:43:08:38:52:63:53:22:50:B6:2B:66:AD:C6:4F:1C:F5:42:2F:75
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:98:68:90:64:24:67:28:79:a9:1c:ba:07:c0:bd:c9:2d:
8d:82:5f:ff:d2:be:5e:a3:a4:b8:05:12:d0:17:4f:31:e4:8b:
40:dc:db:9a:b7:3a:29:16:24:73:c2:85:94:19:ff:f4:f9:fe:
fb:0f:33:1b:54:38:43:b4:fd:9e:c6:30:a0:16:cb:68:22:00:
76:2d:86:89:68:77:36:ec:d2:c3:3f:7b:45:ca:e7:91:7b:f1:
82:26:14:60:c2:94:f5:5d:2d:97:87:19:b6:97:52:8c:69:0e:
7a:72:ab:e0:0e:2d:d9:c2:0b:0c:9b:8b:6a:a6:88:89:ed:e7:
e3:85:8b:65:11:94:5e:a0:1b:32:5a:89:d3:c3:4e:f8:ab:f0:
49:8d:9c:10:19:fd:67:ca:3a:09:e3:aa:02:57:fe:f1:11:1e:
f4:34:f6:23:03:91:9c:63:51:80:c6:e7:88:d4:de:43:da:ec:
5c:f2:cc:93:c0:09:6c:1b:05:df:b1:96:18:18:7d:4a:8a:00:
7b:5e:4a:b2:d2:1d:5c:df:66:72:bc:75:a2:e4:8e:46:30:ee:
08:09:5c:63:75:c9:61:7f:0a:a9:87:d2:f9:35:29:fa:c9:bb:
5a:ad:e8:98:cb:2f:e7:bb:b1:e3:5b:86:d2:e0:6d:78:02:a7:
0b:67:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:45:15 2025 by rpki-client