Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: n0B7tF4gPaIxs75UWESyCT4RjYv5R5MyVqLSJGxWptU=
Subject key identifier: 8C:0E:A8:56:CF:78:B8:F7:33:90:D2:4E:5A:DB:6F:5D:E4:53:E6:95
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 0196C615C828FC3AD3A65A86BCA62C8C883A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 01A1
Signing time: Mon 12 May 2025 20:00:38 +0000
Manifest this update: Mon 12 May 2025 20:00:38 +0000
Manifest next update: Tue 13 May 2025 20:00:38 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: F68n+6f2cW8sFDhDB3ABY0Qb8WbVo32dLrs8o5AQpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:c8:28:fc:3a:d3:a6:5a:86:bc:a6:2c:8c:88:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: May 12 20:00:38 2025 GMT
Not After : May 13 20:00:38 2025 GMT
Subject: CN=8c0ea856cf78b8f73390d24e5adb6f5de453e695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:3a:5d:f8:36:85:ad:d5:50:40:fa:f1:61:
58:9b:6f:48:b7:cc:fa:da:54:8a:be:11:e7:2f:5d:
6d:a4:bb:25:9d:56:c0:63:0f:a0:d5:4b:23:3a:e7:
8f:b5:5c:45:10:3c:56:98:ff:51:ab:7c:5e:f7:c4:
e9:a0:ae:9f:d5:61:60:7b:f1:8a:b7:0c:1c:90:4b:
e7:b9:55:83:d0:8c:55:ca:fe:1c:75:1d:c0:07:6d:
68:06:53:71:de:88:63:c7:e7:d2:d2:59:a7:fc:0e:
1a:d8:a2:4d:78:c9:7b:be:29:5b:21:1e:fe:ad:10:
9a:6f:0d:55:86:75:33:58:1a:5e:6f:27:4a:65:aa:
e7:4a:c2:5c:ad:cf:30:3a:a6:88:70:2d:4f:92:0c:
45:53:94:ab:72:06:d7:40:1a:76:a8:72:25:84:d1:
43:e7:53:3b:cd:25:72:ab:1d:e1:f2:8e:55:9d:af:
e5:de:fe:bf:fc:d4:a9:07:c4:13:4e:d1:4c:7c:75:
7b:32:26:0b:b4:7e:36:f8:7a:3c:ba:3a:eb:88:3a:
ed:4e:86:9d:cc:05:70:fe:76:64:75:24:04:ec:ed:
dc:66:3d:d5:5e:98:46:2d:c6:3a:d8:0f:d9:3e:df:
48:8c:a7:f1:25:6d:11:73:cb:57:ef:91:7c:54:d1:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:A8:56:CF:78:B8:F7:33:90:D2:4E:5A:DB:6F:5D:E4:53:E6:95
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a2:67:b7:cd:62:aa:88:e8:27:85:77:b1:e3:27:e7:9b:ba:
42:3d:cb:5c:ff:b8:19:68:79:cf:4a:10:aa:56:23:75:1d:c3:
6d:0b:dd:45:61:10:93:a9:2b:d9:80:56:af:82:1c:fa:58:43:
73:22:e5:c8:54:a6:14:1a:f9:f3:66:24:90:f3:d3:52:08:7a:
65:a2:13:b1:a7:f3:7d:2f:10:f9:dc:0d:d1:1b:63:9b:97:51:
ba:e3:95:12:e6:29:09:7c:df:36:ad:5d:c6:08:bb:44:54:27:
e7:74:55:2a:e4:b1:ee:aa:7c:f0:63:83:d5:37:73:45:51:17:
98:17:7c:c5:28:0e:5d:d9:5e:a9:34:21:b4:4a:c6:43:6d:b3:
3a:21:05:b0:1f:64:88:23:29:cf:d8:16:be:08:ca:e0:ed:30:
fe:06:74:8d:31:2d:8f:1a:9d:78:9a:b6:e8:76:68:6d:bc:dc:
3d:ce:99:2d:c1:5d:2d:1c:93:8a:fc:14:f7:ba:13:7a:62:3c:
ec:5c:c7:d6:95:86:e0:82:95:a1:cc:0a:b6:c1:94:c5:e1:24:
d0:07:f1:e0:29:54:16:fc:ce:86:39:d2:0c:c8:b8:9e:09:1b:
e9:fb:f8:b0:4e:8d:2b:b9:a5:96:15:c7:1b:81:1b:3a:02:7c:
13:cf:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:06:09 2025 by rpki-client