Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: o4zxezRcVnr7JKmrxbbVCn+NbMCGLfTNYr834ylxAws=
Subject key identifier: A1:4E:A8:6C:2D:B3:CC:4A:D7:B5:0A:5C:D5:A5:D1:A7:20:35:EB:4E
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 01969CABC47D3EEEAED41046640039833B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0C0A
Signing time: Sun 04 May 2025 19:00:24 +0000
Manifest this update: Sun 04 May 2025 19:00:24 +0000
Manifest next update: Mon 05 May 2025 19:00:24 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: WIAX6qX1G2JziYJ2xHoVfc+nhMbi6B/pdcaSNg9Ce54=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ab:c4:7d:3e:ee:ae:d4:10:46:64:00:39:83:3b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: May 4 19:00:24 2025 GMT
Not After : May 5 19:00:24 2025 GMT
Subject: CN=a14ea86c2db3cc4ad7b50a5cd5a5d1a72035eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:ab:2a:f4:05:9a:a7:74:76:51:b7:dd:09:
59:2f:e7:a7:7d:b2:0e:20:80:ad:c6:ca:e8:34:4d:
ec:e2:50:71:84:b1:d7:c5:3d:67:b5:db:07:f6:e6:
cf:b7:0d:d1:a7:62:d8:0d:35:8d:2b:53:55:d7:8a:
8e:86:4c:7c:69:2f:20:8e:0d:b8:0b:43:90:07:45:
0a:14:fa:94:d0:e1:9c:68:3e:b2:77:24:5f:81:9a:
93:83:f1:fc:8b:e3:65:76:d2:a2:68:e9:f7:58:51:
96:15:e8:59:85:d9:54:2b:72:06:7c:a3:b6:5c:f6:
2a:51:da:d8:c3:a3:96:a9:ee:44:65:6a:58:b1:ed:
34:43:28:65:8f:28:9b:0a:4f:44:3b:52:33:bd:d0:
47:94:a6:65:dd:76:9f:68:56:08:85:57:3d:c8:f5:
d7:f8:23:45:e6:15:98:9f:73:5d:54:3c:94:6b:65:
11:d6:3d:a3:7b:f7:4e:22:9f:ee:ad:6f:a2:ed:b8:
a0:94:a8:65:04:6a:f4:d8:23:97:f3:2b:81:e7:fe:
92:b0:18:91:11:31:b9:85:7f:1d:c7:73:69:7a:a8:
f0:91:31:e2:a2:95:26:22:6c:ff:46:a4:35:ec:ac:
9b:7f:29:b0:25:eb:f7:ac:00:6f:42:c9:a6:19:16:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:A8:6C:2D:B3:CC:4A:D7:B5:0A:5C:D5:A5:D1:A7:20:35:EB:4E
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:74:22:3e:1a:42:4e:a0:3b:f9:1b:5f:6d:16:56:0e:79:
24:23:b4:0f:94:48:81:14:0d:16:4d:07:9d:b9:59:06:ce:1c:
ae:76:63:87:a5:93:85:84:ef:bd:53:21:b8:f2:b3:2f:b7:de:
24:c6:a7:bf:0e:df:24:b0:3d:d9:e6:64:3a:e1:15:fb:5d:fc:
17:d2:6b:21:6e:c8:93:e6:b3:81:e3:85:28:94:0a:39:ac:e1:
96:68:9e:0f:25:25:29:30:15:0f:0d:cd:e2:6e:d4:76:c5:6e:
c2:a5:55:d7:7c:96:ff:4b:ad:9d:b0:b5:f1:16:33:b0:27:f4:
5d:ec:12:45:cb:32:2c:e6:af:20:cc:d0:06:d8:fa:6a:65:57:
ae:54:15:c4:90:b7:7e:2b:5e:7f:77:fa:eb:e0:00:72:a8:92:
f8:da:c9:7b:5c:44:81:75:5d:0e:b5:44:f3:34:65:41:4c:45:
fe:65:ce:28:00:5d:58:02:a8:17:b7:a0:db:4d:95:89:69:4e:
cb:10:69:bd:45:64:2a:50:39:ec:50:4a:ef:9e:cd:2d:85:af:
aa:12:b5:82:79:bc:dc:09:6b:c6:9d:c5:27:e5:78:b7:f5:53:
37:63:82:02:0b:d1:54:f2:a4:ca:7d:be:40:a9:2b:5c:06:13:
6d:0f:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:39:01 2025 by rpki-client