Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: 1PgsMXp4VAQ35Waah/DLGs5BYqBYe4mGtkRsd0ZgQwM=
Subject key identifier: 90:E0:4D:D8:23:B3:D2:56:65:6B:6D:45:4D:30:68:C4:B0:C5:A8:39
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 0196CB04EF8648946AF699D4CEF49BE32F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1287
Signing time: Tue 13 May 2025 19:00:20 +0000
Manifest this update: Tue 13 May 2025 19:00:20 +0000
Manifest next update: Wed 14 May 2025 19:00:20 +0000
Files and hashes: 1: EMuW5Z9DWUHZG18MkN4T9RSyVCo.roa (hash: bxVgw2um9ah/cRF/XmN35x0nCwDRiz2wAFfpllVfiIs=)
2: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: RX9ZppS+OZF053E8LN7q69YFFcJinQ1vTxzdWOxKgBE=)
3: xZnyBjCkriJ1YeC3VfWZrgA556Q.roa (hash: 293GfITlnhmhe1K2eILEjZ2R6DzcMg4jFXcmpOzbL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:ef:86:48:94:6a:f6:99:d4:ce:f4:9b:e3:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: May 13 19:00:20 2025 GMT
Not After : May 14 19:00:20 2025 GMT
Subject: CN=90e04dd823b3d256656b6d454d3068c4b0c5a839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4a:1c:38:2c:fb:7a:16:ca:00:b4:0b:40:00:
6a:27:e9:97:58:44:77:62:ad:1b:07:e6:e6:60:00:
37:30:dd:32:18:cf:b6:2a:f2:48:56:07:ab:d2:1e:
32:40:8f:24:2e:e1:57:d4:62:08:86:b0:b5:d6:07:
68:53:2a:b2:3c:3f:9b:54:4e:4a:11:c0:12:0b:5f:
e3:ed:7c:ab:7b:57:e0:86:b6:53:d4:92:f1:af:d5:
06:2f:2a:06:3c:b4:bc:3d:43:af:cf:fa:86:ea:44:
f3:e7:49:13:c2:ac:16:26:91:e6:47:d0:13:83:8a:
4c:a3:11:88:1c:68:41:36:c6:df:91:a9:85:ab:47:
66:63:da:29:cc:65:ba:de:40:54:cd:fb:82:ec:c2:
87:e9:32:1c:d8:6b:2c:0f:73:07:f2:4e:3e:77:21:
ee:50:3d:52:23:55:85:5e:91:ce:10:40:44:21:da:
d9:33:d6:5b:4d:01:c3:5b:5a:11:8f:86:09:91:8a:
b1:9e:15:41:b8:c4:4d:87:f8:c4:42:71:3f:53:51:
bd:7f:44:7a:e4:4a:66:58:df:2c:1a:cc:5c:99:25:
34:30:5f:ff:ce:64:a3:d8:8d:e0:bc:c2:7d:e8:e4:
c2:46:2c:e1:ea:c9:29:b5:9d:88:89:45:8b:05:cd:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E0:4D:D8:23:B3:D2:56:65:6B:6D:45:4D:30:68:C4:B0:C5:A8:39
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5f:cf:ab:31:14:de:28:b8:a5:06:2e:23:7b:3d:7b:f4:a3:
27:3d:16:52:27:99:14:07:99:5b:f7:da:6e:aa:20:2f:66:d3:
14:56:74:c4:7f:62:13:14:69:dc:12:76:9a:7a:ea:1e:b4:e2:
a9:57:2c:42:e5:d1:e1:82:01:9f:1c:51:3b:3f:8d:89:5a:36:
a8:f8:69:41:88:7a:e5:52:b5:36:7d:40:fd:f9:23:96:e0:30:
41:b8:63:c1:ad:40:21:fc:5f:a0:8f:01:19:49:54:3d:90:61:
86:0d:6e:cf:3d:53:1e:3f:a4:c5:ce:d0:35:18:83:dc:ae:b2:
60:bb:f9:6c:50:b2:8b:49:f6:a3:18:aa:2c:75:fe:d8:82:c1:
db:4b:1a:4c:e1:94:c2:92:80:09:a2:c2:e0:e5:09:14:98:c5:
e5:73:f2:36:36:82:04:24:dd:32:1e:33:12:4f:78:18:53:31:
f4:0a:cc:7f:02:cd:ff:bf:c4:4c:e0:a2:3e:57:b5:de:c4:a7:
14:ed:f7:27:1d:54:f7:dc:54:0f:94:33:bb:c5:67:bb:2e:08:
c3:e5:d0:06:7a:ac:65:9c:8d:11:c1:1f:4a:36:e8:98:e1:78:
a5:22:8c:8b:fa:4e:36:81:65:42:d8:b6:10:6e:9a:b5:16:14:
95:89:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:15:21 2025 by rpki-client