Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
File: VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft (raw, json)
Hash identifier: 3UmF/itxxC3tCzG+JG6+LbqrhbiA0K1GIgkk3e/Bo9E=
Subject key identifier: BB:80:FF:C6:27:C5:83:8E:A5:08:26:4D:FB:4D:57:24:88:80:5C:87
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 0196CB72B3313A5AD8AF348FE03460A141DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 21:00:13 +0000
Manifest this update: Tue 13 May 2025 21:00:13 +0000
Manifest next update: Wed 14 May 2025 21:00:13 +0000
Files and hashes: 1: 46uMqFoZIbx_W9-E8n9u53LtPPw.roa (hash: 2dilAY9A0HBjLWWldEcSomY7yF95pmwR+zYOHTlJZo4=)
2: IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa (hash: snBSRgtB4DOLpSGdb4h6kFLqnhtBFWYeDh0vluESnyk=)
3: VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl (hash: rC/0q9ZXX9uXHgeY1cNq3lBPpDN/8Vd+147ZlNGxfNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:b3:31:3a:5a:d8:af:34:8f:e0:34:60:a1:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: May 13 21:00:13 2025 GMT
Not After : May 14 21:00:13 2025 GMT
Subject: CN=bb80ffc627c5838ea508264dfb4d572488805c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:11:db:94:2c:f7:3e:81:a5:2c:ca:70:c5:
ec:60:9d:30:0c:22:20:f0:8b:06:91:c3:c9:7f:4f:
b7:d0:1a:a6:6b:1e:b2:07:3c:33:38:48:ff:a8:c4:
d2:66:ef:11:6b:a6:38:69:8a:73:f2:c3:24:ea:74:
b5:ff:07:df:ac:46:32:ee:27:4f:db:58:87:43:31:
9d:41:cd:38:78:70:99:8f:43:68:3f:9d:33:96:d3:
06:1f:6f:49:c5:d6:38:5b:f5:09:f1:09:de:f2:62:
44:df:a7:3c:5d:7b:e1:21:4a:9a:86:f3:77:81:dc:
86:15:19:8e:60:ad:84:1a:33:31:4a:4b:80:3f:32:
8d:0f:10:ec:e5:76:9a:81:bb:bd:5d:eb:39:f6:27:
0e:bf:09:b1:87:40:e1:33:0c:4a:2b:33:18:cc:8d:
74:db:f0:86:f0:18:42:18:1d:66:33:13:82:18:9e:
88:33:42:78:4a:c5:e5:e1:30:76:f0:9d:31:5f:52:
04:4b:ee:3a:b5:4b:a9:70:4c:fb:23:b3:b6:bc:94:
c1:f4:06:25:9d:c3:8c:e7:b8:e6:fa:16:5f:5d:03:
28:88:00:0b:c9:1a:ed:b8:63:9b:43:e9:58:e9:03:
ac:f4:70:78:82:43:0c:0b:5d:24:d0:f9:1d:10:ea:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:FF:C6:27:C5:83:8E:A5:08:26:4D:FB:4D:57:24:88:80:5C:87
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:17:fa:44:70:5c:05:05:ac:f9:3c:72:c8:28:4b:77:10:b9:
04:fb:6d:95:34:d6:1a:e5:76:21:05:c6:30:d3:ce:55:af:51:
e3:1d:7c:0a:c8:2d:0f:10:8f:74:36:1d:67:1b:1c:0c:62:70:
47:dc:a8:80:f6:87:2e:f6:14:b6:47:af:42:2b:02:da:72:6f:
b8:21:4b:25:0f:60:a3:73:f8:c5:bb:eb:3d:14:82:b5:3e:44:
45:ae:9f:40:b9:24:4c:91:32:26:09:e7:16:84:c4:ac:3c:2f:
01:98:e0:34:13:e3:98:b0:89:1b:cb:a6:74:fa:d7:b5:66:92:
fe:3e:68:a9:52:8e:ab:ab:01:2a:0f:44:a9:65:88:a2:87:43:
80:2d:0b:ea:69:6e:4f:f9:dd:8f:43:76:41:e5:8c:52:f9:8d:
c1:fc:b0:1f:cb:e1:c9:5b:23:43:eb:6d:a4:68:55:ef:f4:28:
1e:4f:4b:84:a4:c7:33:4b:6f:1c:00:51:75:68:13:c4:a8:dd:
3f:dc:ed:0d:9f:be:6a:8e:86:96:3d:27:c1:cc:a4:81:2e:69:
c1:69:45:6c:d4:0e:3a:dc:4a:99:55:d8:7f:cc:e6:8a:da:64:
a6:c3:1c:b4:81:d1:0f:6e:81:47:b9:2b:7e:11:11:91:f5:2f:
94:88:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:28:56 2025 by rpki-client