Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: mRIORIuCVElPUqzBTX5a390faeFagQwjP/04qO9KQiI=
Subject key identifier: D4:02:68:7C:DA:15:64:FA:3A:AA:6B:48:02:D4:EA:44:E2:58:11:0F
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 0196D2F58C07D0AA8124294BE9E215B3DB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0834
Signing time: Thu 15 May 2025 08:00:29 +0000
Manifest this update: Thu 15 May 2025 08:00:29 +0000
Manifest next update: Fri 16 May 2025 08:00:29 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: QEQ+r5Zf8yoqRQDDu21XQy+0RFbWsJM5zbDuto1e0b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:f5:8c:07:d0:aa:81:24:29:4b:e9:e2:15:b3:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: May 15 08:00:29 2025 GMT
Not After : May 16 08:00:29 2025 GMT
Subject: CN=d402687cda1564fa3aaa6b4802d4ea44e258110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:5f:6b:bf:e9:ab:a4:9c:ec:81:68:32:91:
26:d1:6e:7e:36:98:dc:a4:c5:9f:45:c9:6b:bf:f6:
dc:15:7a:cc:0f:c4:35:97:83:5b:06:f7:68:8f:a4:
9c:5e:74:04:d7:09:47:69:e6:a6:ed:44:50:16:4a:
17:05:5a:91:44:40:e3:79:bf:d9:64:e2:da:69:e8:
dd:fc:be:13:10:35:70:f2:39:5c:80:a8:29:44:b6:
cb:89:73:70:00:cf:7f:9f:f7:22:87:23:d1:07:96:
df:7a:fe:c2:38:31:c5:da:54:ca:9e:7b:99:c4:1b:
24:9b:aa:04:43:b0:59:10:56:26:4b:b3:7c:12:dc:
80:ee:4d:12:71:fe:0a:8f:e7:13:a7:6b:ff:38:d5:
a6:7c:e4:a7:d0:92:e0:be:42:ed:da:ee:87:10:4d:
06:30:dc:f4:97:6e:91:2f:b3:d3:32:d6:8a:71:6d:
0d:08:39:c4:dc:1e:8e:93:fa:7e:97:3c:46:3b:d7:
f6:fa:3d:db:1d:ae:6e:78:4e:a7:a1:8d:c2:cf:76:
cc:6e:0e:77:82:36:cb:f0:b3:93:e6:5b:d3:16:7a:
2d:9f:3f:6d:fa:7e:e3:3b:6b:97:82:af:5a:76:9b:
3f:86:83:b3:f1:67:e9:76:c1:37:97:0f:15:ba:8e:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:68:7C:DA:15:64:FA:3A:AA:6B:48:02:D4:EA:44:E2:58:11:0F
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:a3:83:89:03:22:19:5b:eb:2b:d7:f3:7f:bd:40:6e:1e:
ba:cc:d9:ed:de:39:de:f2:8d:e9:c1:5f:94:2a:b9:af:18:d5:
c9:82:76:45:23:19:db:d0:70:7c:ce:4c:27:04:67:10:1e:2f:
af:f5:69:7b:cd:f5:da:c5:9a:d4:cf:6f:14:e0:98:aa:de:fc:
ad:fa:be:3f:ea:0c:88:f9:b8:95:f3:3a:86:ce:20:b7:7e:5c:
12:dd:69:4e:31:89:a4:bf:2d:fb:76:a6:be:45:aa:25:72:3b:
76:46:58:ca:86:47:0d:37:82:21:76:99:62:10:51:ff:e3:4c:
97:00:ff:29:fc:31:48:2e:f2:80:9d:71:f9:e8:92:9e:3f:2f:
28:77:b0:1f:84:18:fe:8a:85:ea:41:07:be:81:ab:9d:5d:ba:
f8:f4:98:9a:cd:01:85:98:aa:b4:5f:d0:1a:92:7b:ba:e3:a7:
c6:93:c0:d2:25:df:d2:ee:07:61:10:79:d9:7e:8c:2e:99:a6:
c7:9f:e9:07:cd:c2:02:24:76:0c:75:27:88:79:d4:0e:22:08:
a1:46:1f:3c:7e:b7:f6:e1:fa:06:24:a4:2a:81:c0:d1:71:26:
f0:cf:a4:32:7d:f8:24:5f:b9:47:23:7a:c6:35:40:02:6c:98:
e0:39:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:36:10 2025 by rpki-client