Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: oqReA5RaNmLwCrHHP/7ruNtLLK8YdQLTf0apZlp6u9k=
Subject key identifier: 0D:47:5C:C0:82:7D:5B:CA:6B:C8:89:8B:42:C7:27:51:ED:79:29:92
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 01965BDE706C0344EA9632DC8F1C0D6F6B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 1451
Signing time: Tue 22 Apr 2025 05:00:26 +0000
Manifest this update: Tue 22 Apr 2025 05:00:26 +0000
Manifest next update: Wed 23 Apr 2025 05:00:26 +0000
Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: DYJRHSolUyaL8suq8xnySKWZrmxODjKyeMq9gDcM+WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:70:6c:03:44:ea:96:32:dc:8f:1c:0d:6f:6b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Apr 22 05:00:26 2025 GMT
Not After : Apr 23 05:00:26 2025 GMT
Subject: CN=0d475cc0827d5bca6bc8898b42c72751ed792992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:68:4a:a1:20:b1:b8:d1:50:d4:17:45:8a:
56:d3:2d:ad:56:94:9d:20:e0:88:43:89:f4:ae:ae:
0a:f3:1a:11:cd:b5:8a:0a:bd:c8:95:d5:88:c8:95:
1e:9c:9f:1a:5b:28:ba:ef:a3:13:91:50:4c:6d:42:
68:7a:b3:f8:14:03:77:77:cd:b1:ad:97:ef:b9:e3:
0d:1b:ab:75:19:ed:cb:e5:7f:4d:34:53:38:de:c8:
d6:8e:3d:9c:e6:48:46:39:77:c2:d9:4e:1e:97:bb:
b5:f4:f6:3d:5a:4b:6d:88:a8:6d:30:88:51:9e:e8:
a7:52:cc:ad:0e:a7:7c:e5:a5:72:79:74:a1:1c:e8:
ca:1c:e0:95:71:a1:7a:3c:63:d9:7d:d7:63:36:97:
17:6f:48:0c:ef:b5:e7:37:c4:f1:52:1b:82:bd:f4:
0d:13:af:77:cb:62:64:96:27:7c:6c:82:1b:ce:1d:
d9:0a:62:45:27:8a:91:f5:52:da:d5:4b:c1:6a:1f:
9b:3f:aa:51:df:4f:43:60:ab:ed:1a:0f:c3:2b:66:
94:4f:82:8e:6b:e0:46:bb:09:d1:2a:aa:c9:ed:85:
4e:5d:5a:ed:12:69:3d:d1:fc:db:24:91:4b:7d:92:
ae:18:07:91:3b:65:4b:33:f1:c0:47:9c:88:9c:66:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:5C:C0:82:7D:5B:CA:6B:C8:89:8B:42:C7:27:51:ED:79:29:92
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f7:9d:a5:11:08:38:73:ad:1c:22:e1:22:4f:42:e0:58:7e:
54:67:52:d3:32:70:cc:0b:98:51:ed:1a:29:ea:0b:ca:97:34:
9c:9c:34:95:86:0d:42:11:a1:68:ce:86:9e:8b:87:33:b3:bd:
87:2b:92:35:b9:02:f7:05:c9:70:ce:94:b4:a3:f7:fd:9e:af:
4e:fa:ef:a3:d5:c3:40:5e:46:4f:9e:43:12:34:b0:09:c8:97:
59:54:30:36:d5:06:11:fa:e9:f0:e2:24:3d:d1:e3:27:06:80:
3d:e7:04:2d:3d:8e:b9:c9:7e:db:c8:0b:a7:1f:c1:71:5f:fb:
02:8e:e8:a0:eb:d5:e0:1c:9a:04:7b:46:f3:10:df:ba:d7:40:
55:10:6e:14:1f:83:39:6b:18:ce:3b:96:fa:60:3b:de:60:b5:
88:2a:0f:07:eb:cd:80:e3:f0:d7:05:77:5e:3b:4e:d9:09:73:
70:14:09:90:c1:dd:fd:17:ac:7f:2f:9d:26:c8:43:cf:73:6d:
1d:bb:77:c8:05:43:e1:38:e6:e5:aa:01:82:f2:5e:12:d9:8a:
0d:1a:60:53:71:55:b6:c0:80:14:f7:a8:29:40:64:d3:ca:5f:
1b:5a:6c:93:bb:a0:f1:82:34:28:1d:bd:5e:40:61:a6:26:c4:
68:a4:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:29:52 2025 by rpki-client