Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: SPxNGtD8DcgqUr8HWFJSD/AMiZ0enAecyuByUzDlQFg=
Subject key identifier: E2:9C:ED:49:87:E9:CB:4B:33:27:17:D0:B3:F5:43:D0:0B:EF:32:4B
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 0196BCDBE5A7DB06D4D0FBDDC28E9895229C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 01:00:49 +0000
Manifest this update: Sun 11 May 2025 01:00:49 +0000
Manifest next update: Mon 12 May 2025 01:00:49 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: g5gEgcwQgN9iIPl35ZX4hfnDsbmZrA9HU6IVgR3ndSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:e5:a7:db:06:d4:d0:fb:dd:c2:8e:98:95:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: May 11 01:00:49 2025 GMT
Not After : May 12 01:00:49 2025 GMT
Subject: CN=e29ced4987e9cb4b332717d0b3f543d00bef324b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:17:8f:65:ad:2e:22:1d:d0:dd:58:68:19:
db:12:f3:89:13:d1:3a:5b:a4:91:b2:e7:2c:4b:b3:
fd:cc:2a:1f:8a:28:31:4e:c0:9a:cf:5e:6a:94:a4:
fa:70:fa:61:e7:88:df:f1:48:19:f3:8d:07:fd:22:
7b:69:e9:3c:a6:5d:fd:c7:4f:e9:cd:22:08:b9:67:
11:d8:cd:c3:f2:6a:d4:ea:e1:ce:4a:76:a2:94:49:
d8:2c:ed:e8:3d:54:d2:bb:14:a6:d2:42:d7:bf:7b:
09:ea:cb:04:f4:3c:13:36:52:20:a8:0c:59:58:c4:
fc:e2:3a:58:b3:59:e6:ba:c1:95:53:84:37:02:25:
45:42:4d:de:26:c2:43:5a:c6:01:0f:f5:ec:ca:73:
76:85:be:b4:48:14:77:77:7b:7e:5d:d3:43:68:10:
8a:1b:54:87:de:8e:16:d4:14:54:86:51:ff:24:4d:
92:c1:79:0c:c7:ca:7e:62:92:0f:b7:c5:8e:73:60:
d8:30:6d:e1:64:12:5d:87:e5:6f:86:4f:83:ba:49:
33:72:b6:a7:ec:d0:82:66:07:a9:d3:91:17:5f:e0:
67:7e:c3:9f:0c:a1:54:08:84:f8:97:58:f5:06:a7:
8c:1e:cf:51:a2:84:9f:d6:df:db:74:ea:97:31:8b:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9C:ED:49:87:E9:CB:4B:33:27:17:D0:B3:F5:43:D0:0B:EF:32:4B
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9e:35:ff:8e:3e:9b:eb:4a:48:97:33:1d:f3:ee:d7:78:1d:
29:fe:c2:54:69:2a:0d:c2:6a:4d:76:37:2d:ff:8c:87:51:e8:
76:ed:48:8d:c1:ab:70:56:57:b7:c7:00:18:41:e4:36:3e:a6:
e6:fc:98:18:1c:e7:da:68:24:6d:2b:8b:79:17:db:c9:50:37:
31:33:d9:8b:27:63:b6:12:f2:1e:c0:f1:0b:42:9c:01:c1:53:
78:57:73:93:fb:ff:ed:51:e6:f6:60:af:7d:71:e8:8d:2d:5c:
a1:9f:84:46:40:0c:b8:6d:8e:03:15:9c:97:6c:7f:79:41:cd:
7c:04:0f:d4:8f:9e:58:68:d0:77:43:54:5e:36:55:53:d6:e8:
40:df:0d:17:1f:2e:ed:e5:d5:36:1e:0f:68:6a:a9:b1:b7:92:
0a:3b:f3:f2:ca:a3:52:cb:7e:f3:19:4c:bd:a2:6c:1a:df:bc:
91:47:ef:e0:4d:84:e3:0c:86:b5:b3:fd:4e:b3:9c:76:55:38:
c1:1c:ba:d9:46:b3:f1:4a:b5:53:81:15:ee:13:56:2e:ae:7c:
6d:be:d6:9b:cb:ac:34:7a:63:9e:b3:87:b0:19:1e:65:54:3f:
e0:75:bb:3e:3e:e9:56:e5:4d:d2:d5:d7:b3:a1:a5:4b:31:4c:
15:4d:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:38:58 2025 by rpki-client