Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: zRTthRDPZrlz5AEA4DtV2Kdxy3BQ4WxzuF5Lxv3so/o=
Subject key identifier: 3F:05:8A:D8:4E:9E:30:69:BF:74:8E:44:94:20:85:A3:66:E2:14:5D
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 0196C570B50E8C7C460BF141C6ED9728A6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 085D
Signing time: Mon 12 May 2025 17:00:19 +0000
Manifest this update: Mon 12 May 2025 17:00:19 +0000
Manifest next update: Tue 13 May 2025 17:00:19 +0000
Files and hashes: 1: SMgRC4CuBXV__0uh7hMZJPp526I.roa (hash: q90cjV8xUyFwL4y2m0KAQvnLqB0y5wCNss55Rkz0PM0=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: HBGVcVWxY/yHyWJkyEzMomDIs/nOo9QTLACIdvzLlV8=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:b5:0e:8c:7c:46:0b:f1:41:c6:ed:97:28:a6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: May 12 17:00:19 2025 GMT
Not After : May 13 17:00:19 2025 GMT
Subject: CN=3f058ad84e9e3069bf748e44942085a366e2145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:e5:14:d0:32:53:d4:96:b2:26:d4:d2:61:
54:cd:91:85:ca:6c:1d:60:4e:0c:bf:a5:8b:65:52:
56:3b:96:96:0e:91:12:cc:e2:51:98:87:7c:00:9d:
c1:0d:3a:5a:ac:e1:25:b0:4f:b2:a3:e5:3d:10:d4:
5b:e6:7e:39:b9:f3:f0:ea:e0:a8:5a:c6:94:56:76:
75:11:be:a4:ce:61:04:18:4f:cd:bc:94:cc:c8:f4:
72:ac:2c:4a:91:5b:d5:78:ee:f1:d1:83:ed:e6:09:
23:c4:a9:f4:29:e0:a2:e6:ac:48:85:ee:c4:b6:b4:
7d:d1:69:6e:2d:97:b7:93:ab:34:01:63:76:5e:fa:
db:72:52:39:4d:17:db:1d:df:18:94:0e:21:74:2d:
73:5b:75:4e:fa:c1:18:44:f4:54:d9:db:e3:e7:fe:
c3:08:7b:2e:23:c4:7e:eb:77:1a:69:e4:3b:24:8e:
77:e8:de:3e:24:d6:45:75:b4:f8:1c:e3:e5:d2:0c:
1d:b7:c9:8a:2b:80:7e:8b:31:66:5c:a5:19:6b:fe:
30:66:e9:74:5b:41:93:3f:d2:65:fa:93:73:2c:9d:
8f:0b:38:c5:e1:34:fa:24:1c:f5:4b:90:95:9d:37:
03:f9:61:7f:17:c4:9b:5e:cb:10:a4:46:5b:b3:fd:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:05:8A:D8:4E:9E:30:69:BF:74:8E:44:94:20:85:A3:66:E2:14:5D
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d1:e1:7b:c9:75:d4:f6:fe:6a:75:e3:29:b0:99:26:88:72:
b7:84:d5:06:c8:32:1f:a6:da:3c:c5:31:11:17:74:7b:78:3c:
28:1f:81:80:14:63:47:25:b6:6f:ac:eb:f4:b8:6f:00:80:b1:
44:30:cd:bd:30:31:f6:45:1d:c4:ce:d7:45:8a:db:f6:26:86:
81:cf:c1:9e:59:ba:26:4a:55:ae:6b:59:ad:8e:cd:db:97:40:
d9:f2:73:0c:05:1e:31:26:9c:1a:14:16:51:4f:8d:96:b9:76:
32:08:11:8a:b4:d5:c9:eb:39:ac:e7:f8:19:88:84:ff:ce:de:
6d:fe:98:85:97:3e:75:f1:67:a6:6b:fd:3f:0c:19:db:a8:31:
46:4b:e1:8a:7f:af:4b:c1:05:fb:7c:48:6b:bd:e5:7c:a3:78:
25:d0:09:90:89:93:1a:04:60:1b:15:82:41:80:d7:eb:fa:f4:
ce:00:29:0b:25:00:c4:42:a8:3a:8c:2a:9e:6d:1b:47:50:ab:
1b:01:e3:10:58:80:d1:a2:6d:08:33:39:27:2b:1d:62:95:58:
66:c7:ef:dd:e0:81:46:23:2f:cc:f0:4f:f8:8c:6f:73:5c:2f:
31:0f:75:43:5d:9d:b2:3f:d3:ae:18:6f:3a:5e:83:46:b3:be:
5b:0a:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:35:55 2025 by rpki-client