Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: 1BRcVqNt16zytnALHCEbZkG3oZMpgahJd8Ip/TB2bNQ=
Subject key identifier: 62:9A:E4:5C:9A:B1:AE:EC:55:2C:8A:BC:2B:3C:A7:F4:BE:2F:B6:F0
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 0196CE73CEA9C2647CE31F77AB01C9422AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 11:00:17 +0000
Manifest this update: Wed 14 May 2025 11:00:17 +0000
Manifest next update: Thu 15 May 2025 11:00:17 +0000
Files and hashes: 1: iGx0ASbC0IY_V38PaAKzK-E2dmk.roa (hash: H2ehYzvvVTx5ItHmx2FObso7EsAZmXEeB6Z16rR/dFQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: 47E+K0MejM709fg/Jh0YgcajqHZ8+nz892bQV3KUaWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:73:ce:a9:c2:64:7c:e3:1f:77:ab:01:c9:42:2a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: May 14 11:00:17 2025 GMT
Not After : May 15 11:00:17 2025 GMT
Subject: CN=629ae45c9ab1aeec552c8abc2b3ca7f4be2fb6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:f5:cc:8e:ab:0f:30:8d:2d:74:5f:7d:b0:
d6:00:d3:7e:38:01:84:55:18:8c:6c:5e:1b:9d:4b:
ae:bc:e6:c6:08:39:eb:2b:fd:8b:05:69:8d:b5:77:
b8:00:82:62:45:f4:07:8f:18:0e:33:fd:1b:41:ae:
d8:25:f7:fb:b9:ac:13:ac:a2:e5:07:c3:61:02:c1:
34:7d:f7:4d:79:3a:91:7a:64:72:a0:fc:8c:58:4b:
1f:71:ea:d0:8b:63:79:98:96:db:c6:97:63:ae:36:
d7:cb:fb:db:aa:20:46:46:4b:c0:65:ef:6c:c3:b9:
29:88:59:ed:ea:a8:96:6e:0e:bb:f0:18:49:bd:1b:
a1:af:74:cd:46:7d:51:d7:50:52:41:18:fa:21:40:
14:a5:29:e6:09:63:4c:42:9b:eb:aa:71:8a:bf:b1:
d5:0e:dd:0d:6e:7e:b4:70:a3:12:b5:20:62:3c:a4:
7c:3b:59:38:47:b5:da:e2:e7:39:e0:ef:5c:9c:77:
d1:66:e0:58:4a:71:00:0e:dd:26:f2:47:5d:62:87:
76:ac:41:92:50:ec:46:6e:76:39:a6:dd:22:c1:5b:
77:e7:23:77:cc:cd:31:47:24:72:e2:e8:78:e7:71:
13:72:4d:71:29:7b:a9:f1:96:13:84:e4:ef:0e:4a:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:E4:5C:9A:B1:AE:EC:55:2C:8A:BC:2B:3C:A7:F4:BE:2F:B6:F0
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:86:f1:cc:6e:ac:2f:f1:da:12:78:40:21:88:be:eb:72:8e:
cc:df:c0:f8:87:10:e6:59:11:53:07:ef:44:0d:ad:5b:d4:a8:
1c:18:74:09:0a:56:9d:16:fa:a0:90:0a:06:d8:d2:6c:e7:04:
48:c4:17:ab:96:28:22:28:03:94:ef:02:0f:f3:25:f0:4d:17:
00:2c:57:02:c8:61:a2:48:50:1a:ae:73:3f:54:28:b1:2a:82:
a3:24:40:9b:de:85:8f:fd:f2:21:72:4c:80:79:50:b7:ed:60:
89:dc:d7:69:36:0b:6d:bb:17:ab:83:eb:8a:2a:aa:fb:99:77:
f8:d3:f4:67:db:43:ab:c7:30:fd:8d:29:ff:f3:08:62:6d:3a:
a9:6a:de:89:1c:25:31:1b:a0:17:bf:48:54:7a:e2:7a:a1:f4:
9f:0e:e5:ff:71:59:9a:95:b4:35:1b:4d:46:79:6b:75:b5:34:
ad:19:ab:61:39:32:3e:16:ae:fa:70:4b:70:45:92:79:14:3d:
79:81:6c:cf:57:14:d7:44:7f:9f:b2:3b:c4:92:ae:85:d1:12:
cb:47:d1:a4:60:d9:4e:2d:b7:e6:25:ab:34:d1:08:5a:f8:5b:
07:84:4c:37:b0:af:d6:22:42:16:14:a1:c6:09:4e:39:a8:1c:
af:cd:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:41:19 2025 by rpki-client