Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File: VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier: VqtOHFLMSw+/NDpRo0O8DgHJX1RGCEpDo3JRBKV5gVI=
Subject key identifier: F7:BC:F4:31:2F:3B:0C:86:64:1E:2A:CD:E5:1F:A0:FC:FE:ED:49:0E
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 0196C0B895A6A0EB1797DFB03288557CECB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number: 0943
Signing time: Sun 11 May 2025 19:00:44 +0000
Manifest this update: Sun 11 May 2025 19:00:44 +0000
Manifest next update: Mon 12 May 2025 19:00:44 +0000
Files and hashes: 1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: 6k7yfbJ7POUU1z8ELAJ6iZMewzUswm+LaDXwGhFlfHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:95:a6:a0:eb:17:97:df:b0:32:88:55:7c:ec:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: May 11 19:00:44 2025 GMT
Not After : May 12 19:00:44 2025 GMT
Subject: CN=f7bcf4312f3b0c86641e2acde51fa0fcfeed490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:13:12:54:84:3a:f3:12:3e:c7:62:ab:41:
ed:d3:b8:10:f4:86:81:58:5c:a5:ef:c0:53:76:52:
fd:71:a3:e1:08:e0:4c:c5:55:39:f7:81:4f:30:6f:
dd:59:a3:f8:90:a4:4b:1c:b9:59:4a:44:ee:1e:fc:
5b:49:85:f3:05:44:f0:ec:b1:53:f7:29:8a:c9:a5:
10:a9:7f:c2:76:cd:3a:4f:44:2a:db:d8:1d:9f:b0:
b5:3b:cc:9e:51:45:a4:03:82:a8:a6:e4:b7:9d:d0:
ac:1b:9b:d7:de:5c:73:c9:5a:7b:91:58:2d:e8:e1:
3e:96:41:f3:23:f5:43:ee:6b:1c:56:f9:31:92:ce:
ce:0e:e4:a8:fa:79:6e:6e:f4:21:19:cb:49:35:5c:
bb:10:91:03:5f:d3:d6:2b:5e:2d:3b:32:b0:ca:94:
a3:83:b7:d3:76:ec:be:50:46:03:03:2a:7b:35:d2:
0c:92:a6:79:43:38:de:61:d0:a4:3e:82:3b:80:7f:
01:e1:a9:b3:67:c8:c0:cd:6b:9a:f9:7e:1e:73:5b:
6c:99:92:41:e3:14:e0:8e:ad:d6:e7:7f:d6:a9:29:
b2:b2:56:6c:37:97:31:01:61:0d:0d:56:38:84:70:
3a:e1:3c:07:16:77:20:48:cd:7b:4b:78:83:14:b4:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:F4:31:2F:3B:0C:86:64:1E:2A:CD:E5:1F:A0:FC:FE:ED:49:0E
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:64:ab:96:5b:cb:e4:a7:e5:04:96:50:90:3b:8a:b0:8c:
55:20:41:75:44:43:5c:98:46:23:b9:88:01:91:16:b0:29:b8:
17:73:d6:9f:56:f8:41:80:4c:26:7f:65:b8:7e:dc:33:26:85:
8f:ae:6d:70:c1:f3:b4:18:16:c9:dd:81:e6:5b:fa:6f:ae:c8:
11:67:16:7b:f4:79:ca:a5:ee:4d:67:70:90:c9:0c:dd:34:84:
58:24:2f:35:29:59:22:b8:1d:1d:96:e7:77:bd:cd:ca:84:c9:
45:ef:02:bc:6d:20:d9:04:ba:cf:87:99:cc:a2:d8:9f:32:4b:
54:54:a3:1d:c2:f7:83:56:e4:b8:4a:19:0c:32:16:61:f7:b8:
5c:c5:c3:69:18:d9:22:de:06:f9:42:a9:42:b7:24:8a:ce:a8:
98:3f:1f:65:54:65:ac:09:d7:47:68:fa:48:26:f2:50:fd:91:
e1:ad:56:a9:62:c9:45:ab:f9:e1:e3:46:a2:8a:c3:1d:25:98:
17:cc:c7:2c:22:19:2c:73:db:79:3e:9d:02:86:5c:48:26:db:
cf:8a:13:e9:b5:bd:c3:4c:6c:5e:d2:16:e3:68:ee:74:3b:e6:
09:fc:a1:63:41:74:81:d6:69:1f:e1:a8:b2:28:3d:87:7c:6e:
24:4e:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:35:27 2025 by rpki-client