Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier: Jt+LhaiZY8ISos04dAT19ChrjqNfB9eOpvvmMaDLGMo=
Subject key identifier: E4:89:F1:95:9C:DA:5F:4A:46:41:80:BF:89:17:2A:71:20:5C:19:6D
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 0196A088C575503A642AE53B445DDE6AA0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 13:00:40 +0000
Manifest this update: Mon 05 May 2025 13:00:40 +0000
Manifest next update: Tue 06 May 2025 13:00:40 +0000
Files and hashes: 1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=)
2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: BpzURAJIKPjDDxbu7T7EOBfk0cOKpsz0k6meXV84RaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:c5:75:50:3a:64:2a:e5:3b:44:5d:de:6a:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: May 5 13:00:40 2025 GMT
Not After : May 6 13:00:40 2025 GMT
Subject: CN=e489f1959cda5f4a464180bf89172a71205c196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:8f:d3:84:f3:4a:c3:b4:81:1d:f1:da:17:
ea:00:a5:ff:4b:e1:35:9d:22:d8:5e:90:02:7b:3b:
a8:50:95:72:29:82:2b:cc:18:3e:d0:a4:2b:05:16:
d0:59:4a:a3:46:35:6b:38:e3:38:db:e7:08:46:c6:
98:74:72:bd:4b:f7:f3:a3:52:08:23:fa:fb:e6:f1:
8b:54:48:b3:6d:ed:f1:c4:fc:71:99:9e:76:cf:bc:
ae:fe:5d:b2:0a:f8:68:65:f7:f3:5f:22:3f:08:bd:
68:c9:57:1d:03:bc:73:b9:e2:a0:10:5f:e1:ff:1d:
94:5c:2f:e6:b8:a4:c5:1f:02:17:a5:03:c0:19:72:
66:04:eb:5b:ed:3e:87:ce:9d:ee:9d:ad:b6:48:dc:
99:a9:f7:42:35:4e:6d:f9:f3:d3:51:46:39:7a:2b:
65:1f:a8:38:53:dd:66:9b:10:5a:b8:11:3b:a1:a5:
7e:cd:0e:87:a5:a3:98:82:a8:77:51:3d:c3:cc:fe:
5b:eb:6c:e6:2d:18:22:bb:15:5c:ea:bf:bb:33:b0:
67:e7:df:23:62:83:df:07:66:46:26:22:ad:fd:c6:
36:22:92:d0:2e:bf:1d:d9:15:25:d2:f8:24:9d:80:
c5:8a:ce:76:72:2e:26:bd:a5:64:1c:b9:aa:a7:52:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:F1:95:9C:DA:5F:4A:46:41:80:BF:89:17:2A:71:20:5C:19:6D
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7e:f3:8d:dd:66:ef:08:d7:07:26:24:87:c6:af:e5:38:5c:
d7:a7:8a:4f:75:cb:21:13:48:09:79:6e:d2:22:01:da:63:4e:
4a:9c:86:e9:03:39:c6:0f:90:ef:e1:51:1a:2e:6a:5d:d3:b1:
b2:13:97:b5:86:6d:9d:b7:93:55:ff:35:33:63:fb:fc:a1:ef:
08:f6:15:6b:a1:20:bc:26:e2:29:f7:3b:75:80:2f:47:85:17:
47:68:f3:bd:71:37:aa:de:1f:28:a5:64:b3:53:bd:5f:4c:bc:
80:91:d2:93:ec:66:6e:7a:ac:77:8a:c9:92:41:ca:d4:59:5e:
06:8f:c0:43:92:4a:18:d9:35:26:7a:96:5e:73:3a:08:95:3a:
45:10:f9:d7:b7:d5:2f:60:fb:44:0f:54:d6:ba:39:86:4e:4c:
ed:f8:6b:86:23:97:f6:3d:45:5d:e4:b3:34:29:cd:6c:ce:03:
b9:c8:d5:b1:a3:56:1b:83:fd:e2:97:96:a6:04:4b:f9:f2:44:
ac:b2:53:8a:3b:74:76:19:02:58:56:df:8c:36:df:80:de:08:
87:7a:71:94:67:91:23:a8:05:8a:11:c4:be:25:42:d4:d5:b6:
a1:b1:d8:f2:d7:4e:57:08:53:01:ac:07:55:14:cb:15:bf:f2:
03:3f:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:50:02 2025 by rpki-client