Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: mSmkLapv+LYlXvTWxlvFPH0Zd4P/hRBqNTOZWM7bc9I=
Subject key identifier: D2:E3:ED:3B:F9:30:74:38:5B:12:46:2F:47:45:2F:05:E3:AD:04:3B
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 01969F3F5EE66B34CF7452E748E788DC2CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 02E3
Signing time: Mon 05 May 2025 07:00:52 +0000
Manifest this update: Mon 05 May 2025 07:00:52 +0000
Manifest next update: Tue 06 May 2025 07:00:52 +0000
Files and hashes: 1: LAyDLVrlWC7GYrIpkUltJFolhC0.roa (hash: 5fqulNX0pe/944CBeE9O8m/kZ++wdZNRG9xqatGIqks=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: 3Q+K2SEQ85hqRT4WuQoC2YJjkyR2g8jIDDJ+42Alpx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:5e:e6:6b:34:cf:74:52:e7:48:e7:88:dc:2c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: May 5 07:00:52 2025 GMT
Not After : May 6 07:00:52 2025 GMT
Subject: CN=d2e3ed3bf93074385b12462f47452f05e3ad043b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:a5:e6:be:dc:4d:b5:b0:52:51:ff:be:a6:
1c:43:78:a6:66:19:2a:e6:a1:9c:cb:fa:5f:5b:a2:
ed:f0:b8:a7:5a:12:73:25:55:ec:f4:50:d6:23:36:
89:26:69:56:f2:c5:b6:8b:b4:ab:f1:96:4c:03:f2:
eb:b9:b7:e1:20:f6:88:9c:70:48:e1:e6:a8:19:92:
c8:8b:d5:b1:c3:07:dd:bb:92:a4:48:e4:57:cb:f7:
47:8c:59:35:a4:ae:f0:31:c5:24:36:c5:a5:7c:c4:
c7:1c:7e:65:ae:fd:54:41:29:75:7b:32:78:bf:1f:
ef:01:4d:4a:ca:d3:6f:e4:94:c3:0a:36:90:ea:7f:
e6:b9:6d:c4:ec:6e:ce:23:ac:ba:28:eb:94:e6:8a:
2b:9b:49:ea:94:42:6d:26:de:9d:46:5e:b4:b7:99:
62:2d:61:c1:f8:be:65:60:01:d1:01:86:d1:c8:29:
40:a6:80:3a:8b:83:e0:62:29:aa:13:56:fb:c5:ff:
1a:54:9e:57:da:b9:4f:1c:62:19:2e:30:9c:df:6d:
58:a2:0a:01:4b:48:b6:45:b4:68:dc:06:ea:f0:0c:
1e:1e:74:12:a7:46:55:cc:e8:47:76:dc:6d:ec:e3:
b2:ac:c1:b6:e0:91:3b:a4:0e:4e:ca:2c:61:93:0b:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:ED:3B:F9:30:74:38:5B:12:46:2F:47:45:2F:05:E3:AD:04:3B
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7d:fb:fd:d5:51:cc:0a:48:d7:ee:bd:31:2c:40:a2:11:75:
fe:c4:84:5b:37:5a:87:1e:29:e2:be:07:b3:a3:d2:ed:7d:5b:
2c:43:85:45:86:50:89:21:c4:9d:fe:4b:37:c5:ba:a7:d5:08:
e1:26:68:9d:78:14:be:e2:39:11:40:c5:c2:be:9f:1d:34:95:
78:fa:e8:0d:b8:cd:25:30:70:2c:aa:18:45:e1:cb:64:c1:6d:
20:ff:d9:a2:7c:29:ef:48:8f:0a:4c:1c:86:22:53:67:08:6a:
4d:3b:24:f6:f2:fd:d3:d7:67:90:4c:fc:c4:a2:45:e0:76:dc:
19:c1:f6:62:99:39:c1:7e:5e:8b:7d:63:39:7f:d7:75:8b:08:
a6:cc:09:c8:59:be:34:39:58:03:37:4f:26:c2:0f:95:24:47:
db:00:9b:67:45:2e:34:18:3e:f3:3d:0c:08:7f:6b:c5:d5:36:
08:49:3e:4b:97:c5:3a:d2:ef:b1:45:be:f2:ac:e5:e2:94:cc:
37:91:02:96:dc:e6:98:57:b5:68:6e:b7:46:a1:81:d8:56:2e:
3a:ce:f6:82:ab:48:43:20:5f:51:53:2e:9a:d7:8e:3c:c2:75:
ef:dd:e7:bb:fa:a5:d8:44:bb:8a:4b:a9:68:e3:58:98:f1:80:
03:6f:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:48:00 2025 by rpki-client