Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: a1wzjuuOCKMpy8M5GoPFdiPV/qzSaENpDyNmw0i6UVU=
Subject key identifier: 3F:27:CE:D0:A7:8F:B6:53:AC:00:25:57:02:88:67:44:68:EF:8B:2C
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 0196BCDB9B1C2ACB600FFAB7D0C18FCF0462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 09B2
Signing time: Sun 11 May 2025 01:00:30 +0000
Manifest this update: Sun 11 May 2025 01:00:30 +0000
Manifest next update: Mon 12 May 2025 01:00:30 +0000
Files and hashes: 1: 09p6kbowRqEqmGsIE-X77ssBdvE.roa (hash: aNbCunzaHj8fcPNQtO0tqEMAuZSFNh6caJLvvgjcZUM=)
2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: b9lrT8cTdm/0BrobxFGH/Ra8IomfSY6wYAL5pC3fRyY=)
4: pH__rL1RVjxMSUxHKGG7zRUGK1o.roa (hash: jLPbh/4LV4yxXAw9vyooJrfcnHymRshQqR67+HD469o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:9b:1c:2a:cb:60:0f:fa:b7:d0:c1:8f:cf:04:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: May 11 01:00:30 2025 GMT
Not After : May 12 01:00:30 2025 GMT
Subject: CN=3f27ced0a78fb653ac0025570288674468ef8b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:2e:51:b0:71:0f:b6:12:19:04:ae:b2:a9:
bd:2e:72:88:ae:29:4a:69:39:22:5b:9d:d6:78:58:
8a:d1:f9:d7:2b:d8:2c:77:6c:75:0f:4e:67:56:46:
06:d2:18:cb:b7:17:d6:cf:0c:a6:42:c9:5c:f8:ec:
11:6e:bb:0e:e1:c0:72:6e:fc:97:e3:6b:90:69:02:
8c:d7:1d:c5:d8:c2:30:77:3c:9e:fa:ee:c3:db:f2:
50:9f:bf:98:c1:c7:1c:18:0e:08:70:0b:42:a0:d7:
19:30:6a:8b:29:da:4c:60:d7:60:c9:af:be:fb:e9:
97:f3:05:a4:d1:1b:b6:2b:dc:3c:b0:60:b5:e7:5b:
da:60:d6:29:88:8c:1f:36:6e:41:91:e0:22:5b:a4:
c1:8e:9d:8b:3c:8b:f3:7b:42:8e:e5:7b:81:cf:d0:
9d:3e:cf:64:e2:0e:03:58:8d:29:90:02:c8:76:ad:
4c:f7:3c:52:a5:1b:95:8a:c4:a4:84:0b:64:6c:bf:
2a:81:47:d6:3e:a4:6a:f1:42:8d:07:43:c0:8e:fe:
ec:91:56:ee:b8:de:30:b6:4b:c3:7e:29:c1:1a:bb:
c5:c2:b2:ca:94:65:68:04:59:b4:40:92:33:af:d3:
88:38:e6:7c:b5:09:e8:5a:51:ba:20:f8:1b:b7:ae:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:27:CE:D0:A7:8F:B6:53:AC:00:25:57:02:88:67:44:68:EF:8B:2C
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1f:f0:83:83:b4:3e:d9:69:0e:b7:d6:99:72:f5:6d:17:51:
09:87:30:c5:40:2f:3a:7f:bc:37:1a:c4:bd:81:36:87:a7:f4:
97:ae:92:85:88:dc:39:4c:fe:66:50:c7:e1:71:28:17:a2:05:
70:99:9d:d6:60:ef:25:84:87:16:09:a6:1a:96:10:07:d9:2c:
d9:fd:2d:4f:96:ea:b6:ea:cd:34:dc:45:29:17:d3:ba:99:97:
d3:e4:4b:0e:96:8e:55:f8:09:22:29:ad:16:01:27:14:03:a9:
0b:67:37:30:10:22:55:70:35:d9:56:68:b0:ea:90:15:df:66:
ba:40:fe:74:a0:d9:67:bc:03:4a:0c:60:b3:ac:6a:de:ca:fe:
b2:a5:3d:6b:47:59:76:d3:7c:c1:68:62:14:bd:12:4b:4b:1d:
b2:51:4c:89:58:42:7b:fa:59:51:1b:51:a6:a9:8a:84:2a:53:
e2:a8:38:5f:a1:80:0c:1b:14:62:05:52:ca:05:60:a3:d7:e8:
94:17:48:d7:dd:c7:82:08:50:5f:0e:4d:6d:ea:66:66:54:91:
ca:c1:ec:d1:bf:85:50:e2:0e:47:97:6a:ce:16:3a:68:c0:df:
98:9e:f6:9d:75:e2:7c:de:c3:59:ce:62:1b:1a:f1:e6:1c:48:
28:9b:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:04:32 2025 by rpki-client