Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: oS63ADCIDb7Hr+7FmA23nlGXVpGVB8LptrWy/FnO5OQ=
Subject key identifier: D5:F6:69:1E:06:28:3E:20:C7:C0:A9:02:32:A7:3B:C4:AF:78:30:63
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 01969D1A71A6777E6537950D693B67FF5F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 1242
Signing time: Sun 04 May 2025 21:01:18 +0000
Manifest this update: Sun 04 May 2025 21:01:18 +0000
Manifest next update: Mon 05 May 2025 21:01:18 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: qsLkZWLuMUHAzVkPhwv78SmGqXAp52knQZKmEk8Gysk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:71:a6:77:7e:65:37:95:0d:69:3b:67:ff:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: May 4 21:01:18 2025 GMT
Not After : May 5 21:01:18 2025 GMT
Subject: CN=d5f6691e06283e20c7c0a90232a73bc4af783063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:62:9b:9d:45:7b:ae:ae:d6:96:4b:3e:1e:
fb:4c:ff:e3:ee:60:3e:69:98:55:bc:c6:11:ed:79:
bb:c7:e8:af:87:c6:de:81:3e:d7:09:8b:bd:92:f0:
22:84:b0:50:0c:22:1a:c0:a3:fe:98:ce:84:18:61:
33:a5:b6:8d:d6:ad:6a:44:21:32:2f:fd:9a:13:08:
e5:22:5f:d3:ff:fb:e6:6a:15:52:f6:59:ae:69:36:
1c:a1:b3:e8:45:57:1f:c7:24:da:86:30:ad:d6:85:
ff:c7:82:26:a9:c5:c6:f4:b9:5a:15:65:5a:3a:18:
43:28:ff:be:c5:0d:97:d8:f0:d0:83:14:34:e4:86:
fd:93:94:c0:b2:c7:cc:5c:eb:f9:44:68:83:5a:09:
27:96:06:a5:f9:ab:5d:f1:d1:b7:ce:fb:b1:eb:c1:
b5:2a:9c:31:96:0b:61:71:86:20:56:10:36:38:49:
e0:35:81:48:27:51:66:b4:f7:c1:dd:82:41:4b:ad:
2b:46:1b:2c:68:23:d6:53:1d:7f:74:e8:de:ff:68:
08:77:f3:94:e0:59:5e:92:69:55:cb:20:86:94:55:
12:53:58:3c:c8:95:75:07:25:88:a3:61:19:88:6e:
4f:f5:d2:ac:2d:f4:c6:55:2b:23:fb:0f:9a:ba:0a:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:69:1E:06:28:3E:20:C7:C0:A9:02:32:A7:3B:C4:AF:78:30:63
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:e9:4f:e0:50:ae:e0:9f:6e:c0:dc:d5:a8:cf:eb:9f:b9:
7c:4e:25:aa:e4:e3:de:1c:80:24:7b:70:27:44:19:94:d4:fb:
69:1d:0f:bf:82:6b:4d:6f:31:11:d2:60:8f:58:5f:32:9b:cb:
d5:ef:ff:64:11:73:6c:f9:af:b9:f0:aa:85:45:00:54:36:b7:
1c:97:ae:c6:d6:74:d6:9d:61:04:4a:83:88:14:3b:13:11:22:
f1:08:68:38:72:8b:39:5f:68:e5:26:62:fb:08:1f:47:2c:da:
99:c4:51:60:8e:8e:29:ad:84:4d:72:7e:dd:b9:69:38:86:2e:
f0:00:78:71:ad:4e:12:cf:d9:c6:ab:02:b3:ec:e2:20:34:2d:
65:ea:bf:37:88:a1:1c:34:b1:4a:3a:e8:4c:73:99:4b:61:ae:
37:6f:8f:48:67:95:60:07:7d:ab:3c:f2:58:f1:bd:b3:67:9e:
b2:02:c4:cd:47:49:05:f0:1a:43:32:a9:63:6c:2d:ea:34:a3:
3c:41:72:15:ff:e8:df:c4:af:06:b4:e3:bf:40:ae:64:9d:17:
62:84:3c:f0:f9:9d:86:84:63:bc:5a:66:cc:1a:a8:7c:db:92:
61:b9:28:b1:65:51:35:00:0a:d4:2d:83:e2:49:e5:2d:88:d0:
e1:dd:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:01:29 2025 by rpki-client