Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: SOD2IsuN7wd2eeMaw+6jKWBo0OdY3dU/tDiA1zGYPSI=
Subject key identifier: 15:9C:70:AE:6A:26:13:7F:21:35:F7:79:4D:8D:3E:4C:D2:B0:93:F1
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 0196BB23E2D67C91F43124E245BC62B07E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 1065
Signing time: Sat 10 May 2025 17:00:13 +0000
Manifest this update: Sat 10 May 2025 17:00:13 +0000
Manifest next update: Sun 11 May 2025 17:00:13 +0000
Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: 5RnTXOMLofDg9VwHuMTzSgvXvFRJQ/e7CY9iEBFhohI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:e2:d6:7c:91:f4:31:24:e2:45:bc:62:b0:7e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: May 10 17:00:13 2025 GMT
Not After : May 11 17:00:13 2025 GMT
Subject: CN=159c70ae6a26137f2135f7794d8d3e4cd2b093f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:52:87:58:49:d8:29:86:1d:3d:ec:ab:88:
33:4e:60:de:e3:38:03:a3:ee:44:58:b8:79:9d:ce:
5c:c8:62:9f:8c:10:de:4e:08:dc:6a:bd:1e:30:6a:
81:1b:8d:46:8e:cd:7b:c1:d9:6f:f6:92:b1:4b:49:
3d:91:47:06:d3:bd:fa:0b:0d:d9:8f:d7:d4:63:4d:
88:8e:e6:7a:40:d7:21:5e:99:1f:5f:18:b6:95:b0:
59:05:ba:c7:1c:ab:98:a1:88:d2:cc:fc:50:6a:db:
38:74:96:53:c5:d8:0a:10:35:f8:a4:dd:b8:8e:ee:
f1:df:db:b3:5a:4f:de:15:dc:c5:90:0c:83:f8:cf:
9b:23:8a:56:8d:a5:67:e6:de:e4:0b:44:23:1b:5e:
d8:87:d0:6e:d0:28:17:f2:a5:95:a7:b0:e8:43:c0:
67:89:98:32:44:0d:23:74:7e:4a:f5:c9:16:ad:e1:
e9:c8:76:1b:b3:e4:46:7a:05:ff:c6:b9:55:08:cd:
0b:df:8a:0f:1a:15:34:25:93:71:9f:8d:53:2d:a9:
2d:b3:02:b0:a1:f9:8f:21:1e:a5:62:30:28:67:5f:
ba:bf:aa:63:2e:1b:14:bc:08:41:60:33:8b:97:3e:
f3:d3:fc:cc:ff:82:f1:9d:54:de:15:30:70:ba:04:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:70:AE:6A:26:13:7F:21:35:F7:79:4D:8D:3E:4C:D2:B0:93:F1
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ff:b3:2a:be:5c:e5:41:10:bb:e6:be:8a:54:ac:28:df:94:
af:27:33:d6:69:d6:c0:ca:9b:42:78:6f:9f:1a:d2:ec:4b:f0:
f6:8f:73:99:fb:92:44:3c:d7:71:13:ca:01:76:ab:6b:91:ed:
27:54:1b:93:f9:97:e6:fb:f2:ac:22:aa:4f:6b:5c:8d:48:26:
a8:14:43:dd:4d:71:cf:75:1f:28:5d:b1:44:17:9d:ff:61:4f:
8c:d4:02:6e:09:32:cb:9c:56:53:11:02:f3:62:d1:01:e2:22:
8f:81:44:a4:9b:19:ac:24:36:33:08:c9:b2:c9:08:2c:e8:ef:
97:33:ef:b7:19:c8:10:e3:b4:bb:41:cb:ab:ce:c0:07:e1:e3:
48:a6:79:a5:50:1b:e1:b8:5d:ef:39:f6:0c:ce:04:b0:fa:58:
90:43:3e:50:6c:42:be:79:1b:1b:1a:28:6e:36:c9:04:0d:a8:
c8:14:7d:dd:c1:e6:df:b4:bc:b2:d8:5f:f0:08:6c:cb:f6:6b:
01:bc:98:aa:6a:85:eb:75:3d:ee:b5:54:08:79:0a:57:e5:f2:
5f:f0:48:54:6d:da:bc:7f:38:fa:b4:9f:05:af:f1:e5:e8:29:
44:eb:40:42:cd:66:ee:1a:98:d3:78:43:aa:b0:93:18:16:a3:
0d:a0:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:27:46 2025 by rpki-client