Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: u45CwCHssnXbpnTgLpr6qBCDq9c08JiTaG5KN4zzDpM=
Subject key identifier: 5E:F5:BC:2E:F6:95:DA:F2:F1:DF:DA:29:B2:F5:7D:8D:B4:86:B2:67
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 0196C728BCF3C549E5BBEAD02E79181F2C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 01:00:57 +0000
Manifest this update: Tue 13 May 2025 01:00:57 +0000
Manifest next update: Wed 14 May 2025 01:00:57 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: 4aXQtGhz7PQyEqK2fLhLYrRROacW8AjrxfW379ihv7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:bc:f3:c5:49:e5:bb:ea:d0:2e:79:18:1f:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: May 13 01:00:57 2025 GMT
Not After : May 14 01:00:57 2025 GMT
Subject: CN=5ef5bc2ef695daf2f1dfda29b2f57d8db486b267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:09:be:42:d4:6f:6f:f1:ff:03:82:ae:50:
ab:9a:c3:c4:94:e5:19:b5:46:a0:49:b6:4f:bf:2d:
c2:53:9d:72:a2:ea:b6:b4:55:85:46:4a:c5:fa:7a:
f5:5a:63:c2:6f:af:72:d7:a3:7b:f9:eb:99:e7:67:
f8:6d:1e:93:66:95:1a:d4:b1:87:3a:c2:21:06:ad:
b3:f3:26:f2:58:97:40:9e:3c:e7:23:c0:e2:c5:f0:
47:4d:ab:3d:b9:c6:5e:02:a9:f2:9b:49:95:79:0c:
54:7a:6b:e7:49:12:71:41:61:af:18:6c:82:11:c8:
b4:ab:b7:83:63:d6:65:bb:1b:56:51:6c:07:1c:ef:
30:ad:c2:b7:5f:2f:5a:9d:8f:6f:db:2d:95:d1:3a:
3e:cb:21:74:f3:71:cb:86:93:03:4b:cf:e2:6d:e0:
93:31:4c:c9:84:d1:f6:b2:6e:ee:5c:f2:74:24:c3:
f7:11:6a:8f:ba:33:d3:27:41:ba:5d:36:ec:16:eb:
94:18:10:7d:0f:98:10:5b:b9:47:60:c7:f5:ab:61:
a0:b9:82:6c:2a:61:3d:85:75:01:27:0b:11:1f:36:
18:88:eb:c0:31:96:bb:5c:7c:41:23:60:c2:61:3d:
4e:02:e3:27:72:59:25:f9:07:dd:b3:87:c7:76:04:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:BC:2E:F6:95:DA:F2:F1:DF:DA:29:B2:F5:7D:8D:B4:86:B2:67
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e0:0f:ea:96:c8:1d:27:5f:39:ad:29:6e:c0:75:a5:7b:0c:
54:b3:40:dd:98:e8:d0:ff:ba:13:eb:1e:96:12:77:4f:3d:30:
bb:f7:a4:a7:d3:92:a0:b9:e2:54:44:76:07:2c:ef:a6:6e:51:
95:d9:be:12:5b:92:22:3b:50:74:ca:f8:57:93:d8:66:8f:4f:
b7:b4:14:7b:2e:ed:6a:ae:6f:a7:c0:c1:46:d0:84:74:cc:31:
51:59:65:67:99:1f:78:b0:28:d1:f6:36:ba:84:21:c5:1d:29:
5e:3e:bb:32:0d:1c:c2:fc:a7:a4:5f:33:5a:e6:40:1d:b3:ff:
a1:59:74:d8:ef:de:6b:ee:a1:af:12:f2:30:2f:56:39:07:61:
78:73:5e:3d:0e:ad:38:ef:d7:63:ef:32:13:46:3e:69:97:58:
e5:9d:c9:71:c9:72:86:c5:09:ea:20:17:41:45:ec:8b:96:04:
d3:d5:45:6f:b8:d2:a5:5a:b6:c8:20:9f:c8:f5:3a:c5:c4:ac:
2d:9b:22:e7:3f:b0:b8:b7:6b:b1:ba:96:b9:71:5f:d4:01:d4:
54:18:46:08:27:81:41:70:f2:ab:9d:67:31:e9:7d:ae:4e:67:
5c:a6:c7:25:2a:b3:82:ca:a2:93:8e:61:bd:66:1b:17:22:98:
5b:25:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:35:12 2025 by rpki-client