Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: 7L/9ARe9H9/fH9OK0e6LJRm9/x6BIsHVEMSqWBEywxw=
Subject key identifier: 82:42:19:44:F4:F4:37:2E:2D:08:A1:B7:E3:47:70:A7:61:2D:4E:0C
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 019658A676D36DC649F061DF8372A5F183CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 13E8
Signing time: Mon 21 Apr 2025 14:00:26 +0000
Manifest this update: Mon 21 Apr 2025 14:00:26 +0000
Manifest next update: Tue 22 Apr 2025 14:00:26 +0000
Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=)
2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=)
3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: 5+AKmY/tNlRk9RjTCXLR6CsSSjarJtZmWzen+DUlSzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:76:d3:6d:c6:49:f0:61:df:83:72:a5:f1:83:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Apr 21 14:00:26 2025 GMT
Not After : Apr 22 14:00:26 2025 GMT
Subject: CN=82421944f4f4372e2d08a1b7e34770a7612d4e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:e1:51:06:b0:0d:1c:22:45:fb:e1:f3:20:
51:22:cb:a9:1b:4b:31:9c:0c:3f:47:7d:6c:5b:bc:
90:3e:cd:26:b9:10:88:08:8c:62:fb:0d:04:90:61:
5f:0b:34:59:96:31:b3:17:d7:f9:12:f6:24:40:12:
ad:8d:99:f0:0c:e1:43:37:65:c0:c2:c1:b9:5a:2b:
93:73:d8:8d:ca:cb:5b:5a:31:16:7c:87:19:0c:15:
9b:b6:ad:f2:35:10:18:1b:be:f0:d7:f0:be:15:fb:
9b:15:ff:fe:39:b3:e3:05:47:8f:92:6e:99:af:81:
30:29:82:a3:a2:18:6b:9d:5f:88:c5:12:aa:77:b8:
60:ba:6c:11:6f:2d:55:5d:00:f0:93:4b:bb:40:5b:
4a:17:bf:e1:e0:2f:79:b9:4f:43:b8:25:17:7c:cf:
34:e0:39:4c:11:57:2e:bc:6e:a5:84:2a:c2:7a:bd:
b4:8c:a2:03:3b:98:b4:1c:a7:a3:ed:47:b6:9b:d5:
41:8d:9a:ef:69:f2:0a:f4:dd:3e:0c:dd:4e:dc:af:
0c:97:15:bf:c9:43:1f:9e:fc:ec:57:4f:de:67:5c:
85:44:19:a4:ea:f2:7d:cd:e2:8c:54:42:b6:7d:87:
26:f9:0c:e5:67:58:89:07:d6:9a:2b:00:fc:78:7d:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:19:44:F4:F4:37:2E:2D:08:A1:B7:E3:47:70:A7:61:2D:4E:0C
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e5:a4:b6:12:c6:e6:c2:37:ed:c4:e7:08:aa:b4:19:7e:64:
4e:4d:98:78:dc:b9:53:55:22:bc:b9:8c:77:b9:fc:b7:91:ae:
a5:e3:e8:1b:91:60:5d:03:37:f8:b4:f5:3e:3e:45:3f:ee:43:
12:68:52:49:a0:0c:24:40:ca:29:43:35:11:80:ce:5b:17:d4:
79:64:c0:9b:cb:f9:4e:3f:a8:77:9c:db:e2:c1:3a:17:7c:69:
95:1e:e9:4b:34:05:1b:b9:9f:6f:2b:b5:2c:ea:ce:ec:4f:48:
4a:d7:69:de:00:e0:8d:51:11:2d:39:71:49:6e:6c:e3:de:dc:
b9:c5:76:95:0f:9c:38:3a:25:26:8f:59:be:08:92:55:16:2f:
d4:bd:31:b3:ea:dd:15:35:c3:8d:09:14:10:c0:cf:23:ae:60:
5c:fb:a1:25:d3:7d:63:9f:cc:d1:11:af:06:e7:a4:11:a1:35:
fd:96:41:21:4c:35:57:c3:3e:1f:ac:a0:cd:89:dd:3a:d6:b4:
1c:9c:fe:27:43:52:f3:53:99:09:0b:c8:65:e4:7a:b8:c5:34:
00:7f:49:25:89:9f:9c:96:8d:54:af:61:cc:87:7b:50:af:de:
09:f5:1b:f8:a0:17:36:e5:d3:65:44:e6:01:3e:fb:70:9a:7d:
e1:9e:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:24 2025 by rpki-client