Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: TI01YgKBuBjfQErJMpMROsebYwtoK6qK1SLuvnog9Kg=
Subject key identifier: 38:68:87:C3:BF:6D:7D:CB:64:91:30:2B:37:38:42:02:65:3E:DE:1B
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 01969F3EFDB837F3D161701BF8EEFEC87BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 07:00:27 +0000
Manifest this update: Mon 05 May 2025 07:00:27 +0000
Manifest next update: Tue 06 May 2025 07:00:27 +0000
Files and hashes: 1: 48X0W84hRzbzikjtu3NRrgiUVes.roa (hash: P9ZEa8jjn4X+qLk45EN8bhgk1iRKqKb3xPDq8e5YB94=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: VhjYK4CexMQDlagQT7bOppSpZ6Vj44THL+mZ/BdPm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3e:fd:b8:37:f3:d1:61:70:1b:f8:ee:fe:c8:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: May 5 07:00:27 2025 GMT
Not After : May 6 07:00:27 2025 GMT
Subject: CN=386887c3bf6d7dcb6491302b37384202653ede1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:dc:ee:dd:c8:19:c6:4a:f3:95:85:15:be:
f5:68:76:b2:14:c3:ca:5b:3a:df:d7:47:c6:00:e3:
85:c9:a9:8f:93:ce:22:6a:8a:66:8f:3e:2d:09:d8:
39:37:be:02:ac:ec:d2:31:e6:7e:87:4e:e8:c5:db:
9a:94:1c:48:2d:58:3a:80:5d:19:d5:ef:ee:1a:10:
d3:3f:45:d8:4e:8e:02:73:26:e1:41:9b:fc:ca:5c:
b3:bf:69:17:53:32:0b:cd:9c:1d:3e:31:ac:2d:e0:
1a:ea:27:21:bf:c1:39:d2:98:8d:9e:b2:75:95:ba:
fd:67:8b:00:4a:df:c9:a7:30:69:82:99:f7:07:17:
f1:91:41:e4:2e:c7:44:fd:e2:d7:35:f0:ce:e5:53:
ad:84:77:3d:46:4e:ba:5d:92:e5:ca:ee:20:70:28:
ba:33:45:9a:fd:f3:8a:2e:8e:ee:f6:79:f3:0b:92:
c1:c4:a5:7d:32:e7:29:84:09:93:7a:eb:f0:1a:8b:
0d:56:1c:9d:2d:7d:5a:dc:67:65:5a:cc:b5:fe:3c:
f5:fc:cf:93:68:3e:e6:fd:f7:4c:95:68:ba:14:cd:
50:2c:5e:46:7d:c9:f0:37:d5:51:c4:b0:c5:1c:1f:
12:f5:41:11:0a:e1:7c:e7:52:3b:c1:e7:51:72:2e:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:87:C3:BF:6D:7D:CB:64:91:30:2B:37:38:42:02:65:3E:DE:1B
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0a:54:42:72:5b:62:48:91:0e:81:1f:e6:8c:b8:9c:a0:dd:
94:19:52:be:96:22:72:03:4c:33:b0:c7:ec:39:33:52:9f:ea:
0c:da:8c:b2:0d:25:46:d7:d8:15:87:bf:3e:34:29:b7:2b:48:
42:45:10:3d:57:a0:ec:e1:c1:12:98:5b:5e:0b:cd:ba:03:d6:
84:36:a8:40:e1:6f:2c:86:58:f6:e7:db:16:c4:67:8e:30:1d:
5a:63:67:89:7d:83:e3:dc:4e:cc:60:56:a7:ad:fd:bb:0b:ef:
cb:18:16:78:f4:ba:ea:ec:3f:02:2a:2f:07:7c:e3:90:25:bf:
4f:c3:17:c8:fa:a0:a3:d7:ba:0e:18:12:a1:10:60:c4:4e:96:
53:73:dc:a1:b9:03:2b:33:d2:1e:01:df:b5:a3:8a:61:b0:79:
67:86:2a:d8:a3:11:93:2d:66:6e:58:14:62:5c:e3:68:0e:db:
3c:eb:29:5d:43:01:16:49:bd:0e:ab:99:87:5e:35:b6:27:d8:
17:fc:78:d7:b3:67:eb:f7:30:4c:83:96:d8:cd:3e:e9:ba:2b:
2b:07:aa:e3:72:7b:f1:f8:f2:20:ba:eb:87:ba:6a:87:8a:f9:
f5:db:45:2b:41:ec:80:ba:22:c5:df:5a:5a:ed:a3:43:e4:a5:
05:97:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:53:52 2025 by rpki-client