Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: +VVDQWGG94QkPcNCOSbsK7dU0yPxswzeaySEnO3r+Ng=
Subject key identifier: 50:B5:01:18:D4:C1:7E:3E:E9:0B:AC:90:F3:B9:74:FE:5E:35:EF:E4
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 01969FACD9A080207A809D36898958A42FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 147D
Signing time: Mon 05 May 2025 09:00:27 +0000
Manifest this update: Mon 05 May 2025 09:00:27 +0000
Manifest next update: Tue 06 May 2025 09:00:27 +0000
Files and hashes: 1: 2UJUcXgEXfunFA21jmeL2YNS9MM.roa (hash: 6FVHb9+rMImArAonsBYihu+wIYZJbNNs1MntdRcJc2I=)
2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: 474WZq5VssWwlbd38TpvVg4VIFXKPjn/UGcaVlyYzng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:d9:a0:80:20:7a:80:9d:36:89:89:58:a4:2f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: May 5 09:00:27 2025 GMT
Not After : May 6 09:00:27 2025 GMT
Subject: CN=50b50118d4c17e3ee90bac90f3b974fe5e35efe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:ac:e8:3c:9e:83:d3:c3:b6:3f:d6:d4:d2:
20:f6:3e:0f:8e:e7:2c:30:79:4f:20:9c:ad:14:c3:
5b:84:b7:7c:fe:ab:54:ac:a2:6d:f0:17:96:8b:1c:
83:70:07:35:4a:ab:b2:d4:de:44:19:87:0b:92:90:
92:db:47:cf:83:ab:3f:fc:07:ff:81:4f:38:ad:f9:
e2:f2:af:07:10:f9:36:23:f4:72:00:e3:37:0c:0b:
22:a9:4c:b3:4e:69:88:4e:b8:5d:61:52:88:e5:f7:
47:9a:06:c4:e3:0c:1c:88:79:38:98:86:81:42:59:
4f:75:74:22:f6:2f:0a:1f:ec:ef:29:55:3d:91:ec:
cc:a2:48:0f:f0:19:ee:19:94:f0:1e:5c:3e:dd:52:
15:e6:4e:0e:46:9c:b0:1b:49:38:a4:c6:94:96:69:
04:30:f4:a1:a1:c2:21:d6:2b:07:79:57:d7:52:5b:
b7:75:bb:0b:6d:f6:94:03:f4:ea:94:32:89:5c:ec:
c0:a3:12:cf:79:14:6e:25:39:00:9c:ec:8e:9c:b3:
22:b5:00:c1:0d:d0:85:88:64:ac:91:9a:f6:dc:56:
a9:d4:8b:5c:c8:87:60:6d:86:10:f3:03:91:c2:c7:
e1:ce:05:9c:19:97:50:7a:1b:b5:da:fa:bd:11:f0:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B5:01:18:D4:C1:7E:3E:E9:0B:AC:90:F3:B9:74:FE:5E:35:EF:E4
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:af:59:26:66:eb:31:54:53:7e:73:07:de:dc:46:93:53:c7:
de:d0:51:78:13:19:f6:b9:43:f7:af:a3:b2:40:f4:f9:b5:09:
a0:f6:79:a7:da:01:df:28:a2:48:45:2b:29:71:1a:b8:44:97:
24:f6:2c:c0:f6:7e:a0:1d:32:66:b5:a5:d5:5f:f3:08:7d:20:
75:41:8e:6c:dd:71:5c:78:e8:c3:a0:e6:b3:90:36:0a:b3:7f:
5b:65:b8:0a:68:f2:ad:50:a1:f2:14:af:9a:65:24:7d:fc:ac:
d9:cd:08:c5:62:c5:8e:20:74:b1:bb:b2:54:d3:f6:ba:74:08:
fc:d4:4d:d9:f1:b0:e9:5d:63:3f:f0:27:2b:cc:b7:17:37:1e:
a3:3a:2a:3a:56:84:f5:1f:3a:9c:48:63:86:ef:bb:09:53:36:
28:50:52:f6:f4:07:b1:0b:42:49:d3:d3:04:b6:98:f0:78:8d:
1b:3b:f3:ce:12:60:7a:bc:c4:97:38:6f:6e:e8:01:d3:fb:da:
e4:22:f2:6f:5c:0d:be:85:63:74:21:0a:e9:f5:c1:8b:59:e0:
b7:ee:4e:be:e0:7b:5c:fe:fa:ed:2a:90:5c:45:78:fd:b5:76:
05:b4:41:b1:f3:89:29:12:7b:60:04:2e:11:24:7f:0c:30:0f:
38:26:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:02 2025 by rpki-client