Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: VMgWFinfi23ryX4XOexN1IbyLtPGWI+Aos4UAsII68o=
Subject key identifier: C2:C1:11:2E:05:BB:F4:76:E7:5D:12:99:07:23:36:6E:10:5E:FC:AE
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 0196C3B9AC887BE2170832B62C0438BEE437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 077F
Signing time: Mon 12 May 2025 09:00:47 +0000
Manifest this update: Mon 12 May 2025 09:00:47 +0000
Manifest next update: Tue 13 May 2025 09:00:47 +0000
Files and hashes: 1: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
2: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
3: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: E2PHBP1gA/b5ASmRVO7MqeQtYWxSa0q3dkKjdUorgfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:ac:88:7b:e2:17:08:32:b6:2c:04:38:be:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: May 12 09:00:47 2025 GMT
Not After : May 13 09:00:47 2025 GMT
Subject: CN=c2c1112e05bbf476e75d12990723366e105efcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:44:8f:a6:ea:61:90:34:6c:17:b3:a4:a8:
3f:77:c4:7e:2c:5c:db:51:e6:f5:9c:62:1e:db:f8:
13:27:b9:38:2e:4d:55:7d:8f:79:a7:4b:4c:ae:08:
2b:c9:e2:a3:a9:4c:9f:f7:6f:cc:5a:71:eb:f4:40:
71:d6:40:38:c1:df:54:a7:bc:a4:39:82:5f:27:37:
7e:58:a7:74:07:77:f8:60:25:46:52:fb:5a:d9:f1:
9b:d9:58:16:28:e9:e8:1a:96:c6:4c:d7:25:a9:c4:
ee:68:fb:9d:af:e2:be:50:4b:18:7b:fc:f4:50:84:
d1:b4:a9:2b:f6:40:59:27:bf:b2:35:20:40:7d:58:
6a:91:1d:e5:ca:a8:e2:c8:f5:eb:df:e1:0b:fa:34:
c6:bf:92:19:0b:58:73:3b:d5:00:98:18:49:8d:66:
89:eb:ad:e7:a5:00:f1:49:41:71:f0:8e:19:f2:30:
be:37:7d:c3:94:15:42:05:95:d9:b7:70:32:13:ee:
b4:62:59:12:a2:8d:6b:66:a6:51:c7:5a:03:e2:c4:
0a:dc:a2:27:5a:5d:64:51:3d:e5:bb:1b:b5:40:be:
80:7b:4c:07:df:e6:86:e7:3d:60:3d:2f:f2:66:90:
57:03:ea:5f:7e:00:0e:01:f6:f3:88:c9:86:b7:33:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C1:11:2E:05:BB:F4:76:E7:5D:12:99:07:23:36:6E:10:5E:FC:AE
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ab:a9:4b:dc:d5:ca:e8:46:54:f6:6c:83:be:28:a4:12:6f:
82:8e:a3:5a:3c:23:ce:0c:b1:33:47:a5:0a:60:ea:35:49:79:
c2:ae:5f:81:4b:41:72:2b:00:46:65:9d:2a:c8:03:15:87:68:
75:58:e4:7d:8b:68:34:15:66:96:c6:b8:9e:62:a5:15:64:ca:
76:3a:8a:3a:56:1d:b2:67:1b:71:5b:90:43:4e:24:bd:6b:a9:
44:8f:35:64:d9:96:00:e9:7d:99:93:eb:da:7c:ad:85:fe:08:
cc:00:c2:5f:98:54:c6:b6:07:8d:b0:cb:f6:87:a2:d5:13:8c:
11:cd:b9:d1:12:c2:47:af:a9:5d:bb:a0:f3:4e:b5:6f:65:38:
55:48:a1:b9:87:53:d5:b1:12:a3:34:9e:0a:64:67:b1:b6:e2:
eb:42:be:89:de:0f:17:92:57:1e:e4:2a:e9:09:f9:35:ca:3f:
4e:52:7a:41:f4:32:26:21:fb:c6:45:e1:0d:15:b8:1b:cf:96:
1b:cd:36:d2:08:97:58:b2:82:b9:64:17:ab:4a:07:3d:12:7e:
9f:aa:d7:f2:bc:c1:7d:ba:c0:42:90:7e:08:5b:4d:74:6c:6a:
39:c4:c5:4b:e7:a6:bd:67:f3:e6:a8:6c:31:42:14:b1:f2:19:
c3:5a:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:24:36 2025 by rpki-client