Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File: vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier: +DeEMWfMkjKkG9QXxMcxdD9KH++09dpcRDr9VzcneQk=
Subject key identifier: EA:82:55:C5:5C:DC:35:96:08:00:B8:69:7F:D6:CB:67:59:E0:1B:40
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer: /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial: 0196534A596DD52377A85ABFB143B6D442CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number: 1219
Signing time: Sun 20 Apr 2025 13:01:43 +0000
Manifest this update: Sun 20 Apr 2025 13:01:43 +0000
Manifest next update: Mon 21 Apr 2025 13:01:43 +0000
Files and hashes: 1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: gwNnX3nbm2iv4/ahNg5A6doTpkFKyQjZWEKXE7sT1vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:59:6d:d5:23:77:a8:5a:bf:b1:43:b6:d4:42:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
Validity
Not Before: Apr 20 13:01:43 2025 GMT
Not After : Apr 21 13:01:43 2025 GMT
Subject: CN=ea8255c55cdc35960800b8697fd6cb6759e01b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:7b:93:a3:7f:24:69:48:c8:ec:fe:37:0f:
b5:bd:3f:d2:b8:f5:36:85:f0:f8:39:42:bb:24:60:
e1:bd:10:89:e7:e4:53:b5:67:08:7a:40:e0:2d:29:
25:e8:15:25:a4:e7:a5:07:73:f4:f4:7e:0c:60:9c:
24:7e:1e:3c:88:eb:ba:87:e8:f3:c8:62:f8:f2:4b:
fa:41:7f:1b:41:b9:49:8b:ac:32:bb:5d:97:c1:18:
c6:a8:fc:6d:6f:a8:7d:75:76:7b:46:c1:94:33:48:
a3:22:90:3c:5d:72:67:93:af:2d:36:69:19:a5:56:
78:66:b5:df:52:d8:e4:f7:fe:0f:47:5c:a7:ef:f8:
3a:99:3b:e5:71:88:ff:2a:bf:c2:e9:b5:3d:af:24:
39:bc:eb:29:bc:f7:b1:2d:4b:4f:c1:7f:e0:ee:86:
25:51:96:08:6c:73:e4:57:0c:0e:13:71:b4:29:1a:
19:99:75:e5:3c:6d:59:3b:ba:89:b4:e9:6d:63:d0:
43:2b:8b:72:f7:72:aa:d6:12:dc:03:54:7a:c7:15:
d9:26:0e:79:73:8c:80:ca:cc:82:57:5b:16:ba:7a:
70:df:74:74:4c:b9:bb:2f:97:02:20:a1:5a:c0:a2:
48:76:79:18:98:88:0a:07:e2:32:46:71:8a:8f:da:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:55:C5:5C:DC:35:96:08:00:B8:69:7F:D6:CB:67:59:E0:1B:40
X509v3 Authority Key Identifier:
keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:88:a8:94:cc:fe:ad:5e:54:09:82:a3:08:da:b5:05:03:
49:15:04:f7:bd:35:ee:6e:8d:7d:02:d4:59:52:ad:ae:ad:2c:
64:dc:01:ac:ed:11:f0:b8:9a:2f:c3:57:b7:af:14:81:f8:5c:
c1:83:2e:ca:01:72:25:99:f6:60:d0:e3:fc:96:bd:ea:5c:5a:
0f:0f:44:a2:6b:51:96:93:9c:e8:7a:b7:04:75:80:2b:cc:f5:
b2:30:a8:ef:9f:47:2f:3a:25:85:fc:23:c6:66:19:77:da:73:
20:89:14:30:a7:0b:0a:f4:ba:2d:41:ce:81:2c:34:05:64:d6:
f1:4b:80:97:2d:88:ea:20:fa:fa:01:3f:a4:c8:e7:7b:bf:45:
f4:c3:47:4c:24:b1:e5:7e:e0:ee:c0:71:89:4e:f2:cf:4e:4b:
c1:fd:ea:70:fe:f3:3c:a4:7f:07:01:76:f3:eb:f7:49:e7:e7:
43:eb:75:13:e9:97:73:f4:f1:ef:86:9a:c2:ac:2b:86:24:12:
45:cc:98:2a:39:9f:da:39:23:8d:35:d5:67:7d:06:cd:2c:84:
f3:22:7f:68:be:96:8a:90:f9:e3:f5:84:46:9d:39:c8:a4:13:
36:2a:49:58:83:58:08:e5:a8:bf:25:d4:ee:a7:8a:7e:d3:f6:
66:1c:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:50:17 2025 by rpki-client