Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: 5xdWpQSb9ZSCI3ghNJ23FzDlsX9aVxdMpm2uCS9jBIs=
Subject key identifier: A9:71:97:2C:46:21:F8:F1:E5:6C:2E:2F:22:0A:34:4E:05:AA:51:72
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 01965613183267484A6277C7E32C21069D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 02:00:13 +0000
Manifest this update: Mon 21 Apr 2025 02:00:13 +0000
Manifest next update: Tue 22 Apr 2025 02:00:13 +0000
Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: 0su+NVNJR8MD+v+GWFd6Wr5O5jpoGeK6Dinxks2kurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:18:32:67:48:4a:62:77:c7:e3:2c:21:06:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Apr 21 02:00:13 2025 GMT
Not After : Apr 22 02:00:13 2025 GMT
Subject: CN=a971972c4621f8f1e56c2e2f220a344e05aa5172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:6c:98:d7:8b:e1:cd:d2:16:bc:59:e7:db:
96:91:d7:25:f2:5a:58:28:76:68:0d:61:00:ac:41:
cb:eb:ae:fc:92:d7:cb:fa:cb:c0:ef:74:d9:3b:ce:
de:ac:84:77:3c:79:51:b8:84:79:45:2d:02:8c:94:
fe:a5:e8:cb:e5:a1:02:51:75:34:ac:06:a8:83:96:
3b:5b:43:fe:65:71:19:4f:05:cc:fc:d7:d9:a1:b4:
ed:47:08:3e:d8:66:37:d7:98:7b:85:7e:29:dc:3c:
8c:b9:ad:67:c8:9b:2c:d1:dc:6e:dd:d9:b6:65:11:
4a:d1:41:06:80:5f:d9:12:b9:c2:c6:7c:bf:e9:c3:
ec:c8:24:69:37:08:b9:f4:59:e0:6f:e5:78:6c:63:
c0:f2:37:34:f2:98:dd:28:6c:07:ec:17:9e:f5:e8:
06:6d:8a:e0:7b:93:f2:01:6a:73:72:a3:05:79:ca:
14:53:3a:ca:ae:3c:18:04:78:fb:9f:2e:f7:28:2e:
91:ae:89:f5:05:58:8b:3f:dd:f3:ed:eb:49:c3:b6:
df:59:a7:ef:8f:f8:21:3a:9b:6b:9c:38:1a:f7:90:
92:8c:cc:70:6c:ba:a7:3f:50:8d:44:8b:be:0c:8b:
61:d3:b5:8d:17:28:89:b2:1d:94:a9:27:df:62:cd:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:97:2C:46:21:F8:F1:E5:6C:2E:2F:22:0A:34:4E:05:AA:51:72
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:95:4b:d5:96:aa:02:15:3a:9a:f8:0b:ce:3d:c2:58:a0:2e:
8c:3e:f5:c7:14:4c:f8:fa:00:16:00:1a:8b:37:6d:9e:61:ff:
f4:cc:61:d8:c6:b7:cd:ea:15:20:a8:ff:89:c4:e0:d7:6d:5c:
ac:0a:3f:a7:0d:02:cc:f5:af:a0:be:42:b4:63:56:cd:8a:20:
54:cc:9b:e1:de:cd:29:8e:a8:e0:ba:e1:ee:97:5f:07:28:15:
9e:6c:9d:d6:18:8c:e9:c8:31:dd:f2:1e:90:ff:73:ca:57:f2:
82:85:82:e3:96:62:c8:26:7d:c5:3c:84:1f:17:06:0c:f0:83:
ec:4d:02:a7:e3:58:ea:d9:75:c7:51:f0:19:64:bf:9e:80:4d:
62:5e:90:d9:00:15:23:1b:ff:df:a7:2e:4b:57:45:79:7f:15:
d3:95:13:f4:85:48:bb:36:50:8d:5e:66:70:6e:ca:d4:33:20:
a6:43:2d:a1:54:80:df:89:97:d8:19:57:ba:b7:69:ce:1b:fc:
ce:71:15:d0:95:c7:18:09:ef:94:e3:bc:ca:7f:ca:05:6a:e2:
4f:36:d2:47:7b:dd:dd:e9:9c:ba:b9:d8:71:a9:1b:92:e8:00:
ae:4a:9b:ae:42:c6:1c:91:4f:ba:cb:2d:b1:10:c1:f4:b5:e0:
7a:89:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:33 2025 by rpki-client