Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: c8bPSQgnEDIEsHcTmdsaIM1rK6o+b5KH3JMBOZbPWBE=
Subject key identifier: 89:6A:F9:55:AA:9D:BC:AA:FF:57:6B:13:6A:C2:8F:F2:65:8A:CA:01
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 0196C314791E67AF2AF2D5C7AF9ED6572C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0B0E
Signing time: Mon 12 May 2025 06:00:20 +0000
Manifest this update: Mon 12 May 2025 06:00:20 +0000
Manifest next update: Tue 13 May 2025 06:00:20 +0000
Files and hashes: 1: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: LM6FaKumuRVnGxB9VY4sDnFUjrIK+WbWWUypmy55F30=)
2: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
3: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
4: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:79:1e:67:af:2a:f2:d5:c7:af:9e:d6:57:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: May 12 06:00:20 2025 GMT
Not After : May 13 06:00:20 2025 GMT
Subject: CN=896af955aa9dbcaaff576b136ac28ff2658aca01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:fd:ef:12:c4:c7:1e:b6:d3:88:c9:5c:8c:
09:ef:50:33:d2:0a:a6:e7:b6:32:dc:62:9e:02:53:
61:c2:82:15:52:f8:6c:a2:c3:d8:41:68:1d:5d:43:
8c:90:66:94:fd:ed:0b:da:14:1c:33:64:4c:97:0d:
ad:99:9e:4f:f7:c8:28:17:55:84:3f:83:56:f0:39:
12:86:4a:1f:ea:3f:11:13:31:f4:fa:f0:7d:4c:a9:
88:3a:64:47:e8:a7:00:90:7a:cd:20:2b:3f:e9:00:
28:49:1b:d5:a0:f4:1c:eb:09:b5:2d:3d:48:5c:53:
c9:53:1a:0f:e3:98:e2:5c:0d:7e:67:75:44:1f:e2:
c2:08:d9:4f:0a:a5:57:07:6f:13:f2:33:b8:11:74:
a6:76:4b:02:ac:15:95:e2:50:c9:bb:44:1c:c0:5d:
08:c7:45:0c:47:0b:a9:c7:5c:0d:b6:7b:69:a6:2c:
a8:7e:6c:91:d5:3d:66:88:4f:b5:59:7a:f1:f4:eb:
2d:55:5b:ca:f5:5c:d1:1f:85:14:a4:35:26:31:57:
06:2f:30:fb:a2:b7:02:33:30:4f:a0:4d:76:73:0a:
43:19:af:eb:cd:7c:8b:14:26:90:34:09:66:5e:03:
92:95:c4:ba:01:92:60:ac:bf:07:f5:79:94:0d:a5:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:F9:55:AA:9D:BC:AA:FF:57:6B:13:6A:C2:8F:F2:65:8A:CA:01
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:65:05:f4:c9:23:3c:bc:fe:b0:d0:87:64:5f:d3:a7:a2:
77:26:7c:81:a5:53:ed:c6:fe:bd:78:a9:71:ad:1e:26:1e:ba:
d9:75:6e:c2:25:5a:b0:82:06:da:73:9a:8e:ac:fa:fb:5c:e6:
9e:0c:a2:5d:c9:da:7a:cb:bd:3e:00:f9:35:ca:99:92:4c:c2:
a5:f6:7e:d3:2e:52:62:5b:f8:44:d9:48:b9:88:dc:bb:a0:ac:
a2:4d:cd:ec:a8:37:89:76:81:57:8d:dc:fe:d3:3d:07:4b:4e:
8f:9a:9b:8f:31:14:40:00:fb:57:ee:1d:f0:92:e5:27:cf:70:
c1:5d:43:fe:91:00:eb:b6:6e:08:24:3d:28:4f:1b:89:ed:e4:
9e:bd:38:0a:0f:a1:6d:9c:f5:92:f3:dd:48:d0:a2:a9:b0:ad:
f4:12:36:1c:45:ed:9c:00:f9:fe:f8:6e:02:3a:ee:55:4e:20:
a2:c2:db:7b:37:7a:a5:ae:97:26:b2:ce:2f:82:03:75:96:05:
b1:04:b8:70:3d:23:5d:82:0e:ef:51:7f:c0:33:52:46:c7:16:
f4:5c:86:7b:47:aa:d8:27:ff:aa:b2:78:ba:02:a8:db:d4:f2:
a5:03:92:3b:18:d6:00:94:2c:d8:11:bc:4c:93:3b:59:96:d3:
6d:f1:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:25:49 2025 by rpki-client