Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: 0PXa2ooC4qFPg9jsc1zJ2i4ClGK+5xeMdXZz2zDuXCg=
Subject key identifier: 2B:55:F3:CF:33:4C:F8:10:B3:F7:71:69:B4:D9:9D:0E:7C:EB:2E:93
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 0196CC85721DE634DDC812565262C7505487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 02:00:19 +0000
Manifest this update: Wed 14 May 2025 02:00:19 +0000
Manifest next update: Thu 15 May 2025 02:00:19 +0000
Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: y7kwqnrOUblxQn/tGWWveUX+ZFtYAZGrCoKkRBKh2XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:72:1d:e6:34:dd:c8:12:56:52:62:c7:50:54:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: May 14 02:00:19 2025 GMT
Not After : May 15 02:00:19 2025 GMT
Subject: CN=2b55f3cf334cf810b3f77169b4d99d0e7ceb2e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:98:ac:5d:55:4a:cd:f0:98:64:31:e5:ca:
bb:7d:eb:90:30:ae:23:b2:a9:5d:aa:81:e5:87:13:
d0:28:f1:36:e7:47:22:95:f9:71:4a:ba:b4:79:3c:
01:54:a4:bc:a4:f1:8c:ec:9d:f8:f4:5a:80:64:6d:
c1:1a:6d:7d:7b:46:27:56:41:70:22:50:c1:2c:6b:
30:56:5c:34:00:9b:db:05:1f:6d:ca:64:11:c2:bc:
29:3a:7d:48:10:c4:02:04:36:3b:b0:1d:e3:91:d7:
27:31:46:39:2d:2e:c0:44:1c:28:d3:70:47:df:67:
16:ab:67:3e:1f:2e:09:79:69:36:d9:c0:06:8a:aa:
9b:0b:2f:93:98:d4:9c:59:8c:c3:e5:88:7c:aa:aa:
38:b3:0f:b8:b2:41:e8:30:f9:b7:53:fe:7b:f6:33:
b6:68:73:bd:36:f8:1b:4a:8e:f7:56:9a:e0:c3:90:
f3:ba:bd:c8:f4:66:f3:af:bc:fb:ad:45:2b:62:e5:
b3:34:71:7b:16:08:8f:22:7d:d2:8a:0b:5e:a4:a2:
20:e4:c9:20:ce:dd:b4:f9:00:34:a6:8c:7f:dc:43:
60:4d:eb:b5:9a:7a:df:62:d6:0f:6b:cb:8c:fc:b7:
df:06:cc:8e:f8:b1:32:b9:45:0e:65:11:6a:a4:5d:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:F3:CF:33:4C:F8:10:B3:F7:71:69:B4:D9:9D:0E:7C:EB:2E:93
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8c:d1:14:78:cc:76:08:b7:65:fa:a7:88:f8:52:9a:bd:98:
54:3d:1d:77:03:5e:1e:c4:0e:28:58:0f:41:6d:91:9e:a4:19:
4b:d9:d1:b3:1a:a0:8b:ec:8e:ce:f0:29:1b:09:8a:c7:08:46:
8e:e1:bb:ee:13:d7:87:e6:5b:a3:c1:9e:24:f4:14:34:75:e3:
2f:f4:04:d2:a6:bc:59:be:9c:2b:82:3e:07:45:85:66:11:36:
08:e9:1b:a7:2d:31:05:28:b1:39:22:2d:68:69:6e:e8:a0:c6:
c7:b0:00:cd:1f:c0:c2:40:d7:dd:04:07:cc:1b:5f:25:ad:72:
3c:ad:dd:c9:8d:fe:9f:34:7f:04:80:7c:bc:32:6c:02:4a:3d:
df:f7:68:13:3c:1d:7b:91:40:78:f7:d3:78:ce:42:9a:b7:87:
48:80:25:1d:18:0f:07:38:57:23:49:17:d6:c1:15:db:02:2e:
2c:d4:7a:e1:9f:00:88:34:78:ee:b3:dd:5c:8b:c8:9d:4b:8b:
3e:f5:39:a7:ca:e1:6b:d9:1c:03:32:ff:73:49:fd:bf:ab:21:
90:08:57:e0:e2:53:0b:2f:2f:ea:89:6e:09:8b:d4:0d:b7:9a:
04:16:88:fc:91:e3:f5:b5:26:da:72:cb:b9:00:57:06:1d:3e:
ad:7a:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:17:37 2025 by rpki-client