Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: 3rlXIf8+U6f4iWqFGnU2BbcAwhoOFaISH+yfLqOV2/8=
Subject key identifier: D6:BD:03:96:8F:78:C7:D1:18:69:51:E4:61:2A:91:E6:D3:B7:3D:6F
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 0196C495294BE87EF84A01B1842188B85E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 07E6
Signing time: Mon 12 May 2025 13:00:31 +0000
Manifest this update: Mon 12 May 2025 13:00:31 +0000
Manifest next update: Tue 13 May 2025 13:00:31 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: uMllHklhm6pk1vANbXunGNv8TXCXJ4ULBrV/Nw8/dEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:29:4b:e8:7e:f8:4a:01:b1:84:21:88:b8:5e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: May 12 13:00:31 2025 GMT
Not After : May 13 13:00:31 2025 GMT
Subject: CN=d6bd03968f78c7d1186951e4612a91e6d3b73d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:eb:f0:a5:cb:5a:be:24:52:4b:29:fa:57:
b7:77:c8:78:b6:09:92:6f:7f:c9:9a:c0:e0:cd:ca:
b8:db:38:34:32:de:75:4e:ac:e9:94:3c:5a:95:19:
50:70:20:7d:20:ec:b7:64:91:bd:08:2d:c8:23:f2:
4a:fc:3a:29:01:54:83:7f:36:be:2c:f5:1f:eb:6f:
3d:46:45:be:59:0d:35:7e:4b:3e:17:c1:a9:4b:3f:
54:d5:2b:b1:4b:13:e4:38:45:a2:c9:37:a2:6f:32:
07:73:2c:54:b0:35:33:d7:3f:c0:37:50:e9:c1:27:
78:8b:08:e9:fe:cb:60:9e:ea:4b:74:26:12:b5:c4:
77:19:33:43:e2:f0:b3:41:fc:d3:a4:24:7a:d5:af:
ce:52:7a:20:63:56:81:87:00:16:81:92:02:8d:e0:
ae:db:ba:1b:85:ad:a2:ff:4d:42:e6:c1:51:65:a7:
aa:2b:4c:69:47:45:e4:90:62:fd:9a:08:cc:61:6d:
2f:f9:e0:90:d5:3d:10:50:2d:ae:9f:0f:6f:9a:3c:
ba:b4:15:b9:7a:e1:93:a3:a1:d2:36:7d:0d:b0:c3:
b7:b7:b8:07:a2:42:5a:81:83:4e:e7:75:1c:a5:66:
3f:95:e3:7e:2b:26:9e:a7:07:b1:a4:3b:4c:56:a1:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BD:03:96:8F:78:C7:D1:18:69:51:E4:61:2A:91:E6:D3:B7:3D:6F
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f0:53:2f:25:87:5f:dc:5e:ee:62:ec:ae:9a:d1:9a:8a:86:
a1:28:65:e8:b0:bb:da:96:20:f9:a6:d5:75:2e:d0:f4:06:d1:
b9:c9:63:bf:6a:6b:51:27:fe:62:29:a1:d7:a4:41:60:9e:2b:
cd:47:f9:1a:a4:b2:4d:58:c1:ce:3d:fb:75:55:ac:85:a6:62:
df:92:71:63:d9:86:51:f4:4e:da:f4:01:6d:c6:90:66:58:62:
6a:09:4c:83:7b:49:29:a3:0e:36:48:ce:39:8f:9a:18:f2:26:
47:84:e0:0d:27:28:6f:d6:c9:31:d4:62:28:cd:e4:ec:ff:bc:
67:76:6c:d7:69:5a:31:fc:07:35:1a:cc:4a:cc:d0:31:c0:1a:
24:6e:b7:ea:03:9d:99:36:2c:bb:40:b4:9e:a7:a5:08:a6:57:
52:1d:c5:17:9a:48:05:2a:6e:6f:59:f9:c0:af:e4:d9:27:fc:
a5:05:5f:38:d0:88:ab:78:6c:8e:65:ef:8d:db:79:13:65:04:
53:00:93:e2:72:27:b2:de:4c:a8:6c:27:24:67:b4:68:a4:59:
95:5f:36:48:65:a8:10:df:ec:5c:2b:e3:78:fc:4a:96:91:1d:
3c:6b:42:ad:a5:23:83:33:02:8f:61:39:ee:ca:27:1d:2d:92:
30:8a:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:40:54 2025 by rpki-client