Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: OIybzYe5JAN2Mvojsw2wc54dSIT4Gx+wcUUOiXt562U=
Subject key identifier: EB:36:39:CC:FB:8C:86:7C:78:C9:E2:3A:FC:96:A9:10:26:D3:07:CE
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0196C26FC3E4BDE30C6C30A32B9B822D7A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 12F2
Signing time: Mon 12 May 2025 03:00:26 +0000
Manifest this update: Mon 12 May 2025 03:00:26 +0000
Manifest next update: Tue 13 May 2025 03:00:26 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: HghcYQe4+KDkYCapHP6L/6/9MeAaJLR7UPHhilOqfP8=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:c3:e4:bd:e3:0c:6c:30:a3:2b:9b:82:2d:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: May 12 03:00:26 2025 GMT
Not After : May 13 03:00:26 2025 GMT
Subject: CN=eb3639ccfb8c867c78c9e23afc96a91026d307ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:11:65:57:91:a8:49:24:6a:4c:94:99:3e:
d5:96:6d:b6:77:f4:87:3e:79:52:9c:76:b4:e4:36:
18:4e:6d:a3:29:f0:2b:df:47:f0:cd:7f:dc:75:a7:
be:b9:75:49:f3:42:7b:dd:22:e5:7f:b9:65:0e:ac:
8d:cb:a6:4e:32:e8:5a:98:50:31:c0:50:9d:c0:33:
51:da:80:36:2d:d7:96:c6:16:2c:55:b0:f2:ec:da:
b3:62:e0:c4:19:23:b2:92:29:90:c1:d0:7e:91:5a:
07:f7:33:dc:a3:ff:a3:5f:dd:af:1c:4a:e5:de:44:
51:00:68:3e:f4:05:8c:8b:d3:87:e8:8e:b7:80:7d:
88:64:7e:97:3a:4d:94:5e:61:6f:40:80:a6:80:9e:
e1:02:23:86:bd:65:80:96:b8:13:ea:21:0b:ef:bb:
32:ff:c6:87:c9:63:a4:98:0d:ac:93:dd:17:14:1f:
3f:5d:85:8a:50:20:06:bb:10:ae:59:39:d9:b1:87:
2e:5b:b6:70:08:73:55:62:45:4e:19:7f:03:b9:87:
46:2f:d0:f0:59:56:41:82:92:e4:72:45:a3:46:b8:
30:6e:6e:0c:e8:0f:1c:e8:c7:5c:22:46:b6:c7:e0:
17:23:92:d1:37:d0:c3:7a:be:d6:b9:25:e2:a4:76:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:39:CC:FB:8C:86:7C:78:C9:E2:3A:FC:96:A9:10:26:D3:07:CE
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:82:13:2c:b5:d2:2a:31:bb:88:7f:6f:06:a1:18:4b:58:e4:
60:c6:f3:2c:a2:df:09:1a:7e:cc:f4:15:65:e8:22:de:49:94:
c1:30:bf:30:13:55:60:99:ef:f8:9c:02:c5:20:eb:4c:1a:7a:
38:55:62:90:26:78:c2:f3:86:7d:0e:a7:75:d7:b9:5a:69:14:
54:46:85:af:9f:09:a2:55:50:fb:6b:54:7a:ee:29:f6:ac:a1:
59:3f:10:5c:62:95:d6:61:02:cd:37:8a:cc:3b:a2:68:c8:8f:
4d:4c:4f:5f:6f:62:eb:45:d8:55:b2:87:66:5d:2d:cd:c5:e0:
5f:1e:55:ca:e2:7d:54:d1:3c:bd:fe:fc:f5:32:97:ee:a5:35:
cc:9d:7d:23:f4:9b:6d:ee:b6:ac:36:1f:ec:69:56:20:ce:3e:
d6:c5:e0:17:13:f6:ee:45:34:24:90:6d:71:05:b5:de:d3:bc:
99:3c:a9:8f:3a:1d:7b:86:08:31:ab:35:03:4d:25:18:6c:f8:
60:a8:0d:be:82:f5:23:87:d3:e3:ba:ee:0d:d1:2f:ec:f4:d2:
02:6f:a3:96:3b:fb:9d:36:5f:48:22:d2:33:91:76:60:f2:29:
02:b4:79:88:02:b3:8e:aa:9b:de:c8:93:de:c0:ed:94:e3:80:
a6:dd:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:19:40 2025 by rpki-client