Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: XE10nt/v5DF42SPCM1g0ZnEduCw5BnkpRYXPBFaxmY8=
Subject key identifier: 54:0B:5C:76:79:F7:42:55:07:F9:FC:39:2C:BA:1B:3C:63:D4:26:41
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 019655DCBF9381CC5D4A64F1588883BFC7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0D85
Signing time: Mon 21 Apr 2025 01:00:52 +0000
Manifest this update: Mon 21 Apr 2025 01:00:52 +0000
Manifest next update: Tue 22 Apr 2025 01:00:52 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: sBugCuuaGymnktYBaiYY4BG3sZ96c9MdjUeKJDRxYto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:bf:93:81:cc:5d:4a:64:f1:58:88:83:bf:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Apr 21 01:00:52 2025 GMT
Not After : Apr 22 01:00:52 2025 GMT
Subject: CN=540b5c7679f7425507f9fc392cba1b3c63d42641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:11:7e:ea:f4:5f:b9:bf:78:a5:e5:e0:f8:
dd:cf:12:2c:3b:64:84:32:3c:a7:f8:1e:85:c8:c4:
47:d8:78:f1:83:36:ef:fc:5c:41:e1:b7:4f:0d:8d:
18:2c:af:3b:8b:20:b7:40:1f:54:cc:1b:ab:d0:d1:
f2:d0:0e:da:57:c3:69:96:73:53:b7:c3:e0:c0:13:
45:e0:a2:10:87:8b:b9:f0:5c:6d:68:d3:d9:5d:95:
a1:3d:71:dc:36:2d:76:39:d7:d7:be:aa:ff:f8:52:
35:53:28:c5:95:0c:47:b6:6c:f5:17:3b:22:af:35:
51:a7:c3:c7:1d:78:e4:43:39:50:3c:4d:12:24:c2:
b9:70:50:5a:48:d0:67:ac:a2:38:89:e8:fa:0a:14:
83:51:90:bd:bb:98:ea:54:f4:37:1f:8d:37:28:77:
64:a3:77:76:c2:ab:a8:95:01:62:02:3c:4b:46:41:
8b:de:bc:6e:b5:a9:21:2d:25:9f:de:0e:48:3c:1e:
c7:d8:9f:86:12:f0:a0:c7:0a:bd:ad:8a:b9:78:33:
19:1a:66:89:5a:d7:ed:d9:5e:b1:57:81:70:9f:f3:
f7:56:31:7f:66:f6:40:d4:cf:76:14:ce:5e:43:23:
ac:cd:92:ce:d9:68:24:bf:99:b6:79:25:b0:9f:d4:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0B:5C:76:79:F7:42:55:07:F9:FC:39:2C:BA:1B:3C:63:D4:26:41
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c3:65:d6:44:4e:e8:85:db:55:69:2c:09:eb:d0:c4:f8:be:
08:1f:ca:23:55:2b:93:02:88:5a:c8:a1:c7:6f:8c:52:4e:8f:
4b:8f:42:55:ae:1b:f0:2a:f5:e1:f8:69:43:84:f5:86:d2:89:
02:2b:9b:36:21:82:d7:28:ee:a4:bc:ea:18:45:2f:c2:eb:08:
ab:a4:b0:c0:07:5a:43:7e:a2:3b:c9:a5:5a:54:a4:1f:59:25:
c5:77:16:9c:85:64:2f:c7:8c:1a:e7:1d:c4:7f:7e:8b:46:93:
ee:2e:c4:57:00:56:cc:5e:26:cd:78:82:bd:9e:b4:92:82:a3:
07:1c:aa:6a:5c:9a:01:4b:cc:ae:2a:89:24:e0:d0:90:de:f6:
ee:6a:38:0f:0e:e5:be:41:a6:b5:4c:a7:0f:0a:51:2f:f9:5a:
12:89:c7:3c:af:cc:85:78:9d:80:90:ed:42:74:81:72:13:30:
e1:13:c1:53:77:5c:d2:f6:9e:76:21:e5:38:50:34:79:60:e3:
52:88:1a:e7:29:ed:89:2e:ee:c5:dc:fb:15:92:1a:76:90:6c:
ac:5e:ea:04:52:8a:7c:12:a2:bf:ca:eb:19:7b:db:88:01:a5:
36:58:dd:56:db:d7:8a:0f:49:1d:82:51:e1:88:1e:75:7c:09:
b7:e6:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:27 2025 by rpki-client