Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: wTpFyeL5b7z1ypsK8QMl8LT6sbacQGypSbe5iZYKuN0=
Subject key identifier: 97:88:E2:4A:A4:F3:F8:30:E6:32:57:F4:2A:13:65:97:0A:04:2B:9B
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019657CB26C95C6FF5647C5B1A0384787CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 0EF3
Signing time: Mon 21 Apr 2025 10:00:53 +0000
Manifest this update: Mon 21 Apr 2025 10:00:53 +0000
Manifest next update: Tue 22 Apr 2025 10:00:53 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: Pjp5zCNfTe7On49pQqCh2lS3gEAU/pPzzBdE9lj+/u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:26:c9:5c:6f:f5:64:7c:5b:1a:03:84:78:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Apr 21 10:00:53 2025 GMT
Not After : Apr 22 10:00:53 2025 GMT
Subject: CN=9788e24aa4f3f830e63257f42a1365970a042b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:fa:e2:53:aa:a9:41:64:b0:8f:00:f9:46:
cd:5e:6f:7f:35:4c:e0:ae:fe:41:60:9d:b6:08:d0:
9a:e1:88:8d:d9:ab:3f:3e:37:0c:b7:f0:0a:82:4e:
bb:b7:58:e4:1a:c4:a4:2d:ff:06:6b:bb:59:ff:5e:
0d:e0:4e:da:ec:7f:f3:2c:d8:1c:79:c9:f9:20:18:
e9:a8:9d:f1:57:12:bb:b8:c0:58:53:0c:f0:e2:f8:
1a:6e:07:6f:53:41:15:e3:b7:6c:aa:ae:26:8b:6b:
f3:01:fb:dd:0a:56:99:ea:72:3f:8c:af:3a:7d:e3:
0a:84:d3:ea:d8:ae:80:94:f8:82:7a:7b:7e:e0:bc:
c8:e7:8c:df:35:12:e4:29:5b:7a:d3:45:06:76:96:
6a:4a:6d:e8:70:b0:c8:22:d4:08:6f:7d:f2:86:fb:
36:0f:f2:d2:55:82:05:37:89:22:47:41:3b:6d:7c:
b1:58:31:17:ce:f9:84:c2:b5:ed:55:f8:a5:9b:8d:
0f:f8:ff:42:f8:a0:d0:78:24:7b:93:de:6c:40:eb:
d0:4f:a9:d8:de:00:d3:b5:27:55:bf:87:b2:9c:c2:
1f:79:d5:e4:af:c5:c3:9b:a1:38:ab:b7:e7:3a:5e:
d9:c7:44:00:4a:f1:d0:e9:11:bc:54:e0:33:ac:91:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:E2:4A:A4:F3:F8:30:E6:32:57:F4:2A:13:65:97:0A:04:2B:9B
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1d:2f:25:46:9c:08:73:bb:bb:17:86:d3:89:72:14:8a:58:
25:16:8c:4f:94:f8:b5:cc:fb:97:59:de:ea:25:ec:62:3a:b7:
a5:f8:4f:38:b0:5b:27:f1:86:98:5f:fb:47:60:01:b3:4c:e4:
d8:7c:0d:6f:ba:ba:16:2a:f3:cf:8e:64:89:56:c5:e8:12:d8:
8d:2e:c6:40:bd:e3:17:07:34:e8:5e:42:e1:6b:d1:94:11:fd:
8b:e0:67:97:8e:c7:3c:90:f7:ec:c5:5e:44:8a:09:ff:bf:95:
31:28:f9:6c:31:d2:87:5f:0a:ef:6d:5f:5d:44:e6:26:14:82:
ec:07:88:4e:88:51:62:2b:b8:49:82:3e:6e:8a:21:f8:df:b5:
98:d3:0c:6b:c2:dd:57:ae:37:03:10:6d:f9:3f:4f:5d:dd:05:
5f:d2:c7:a3:ab:5b:25:0b:27:d9:cb:f4:03:22:88:4b:4d:72:
24:9c:db:02:da:0a:29:1c:e6:fa:74:b2:0a:84:16:35:4c:f7:
ff:38:f1:33:61:ca:9c:0e:41:23:30:8e:c1:1d:f6:68:b1:af:
8b:e7:36:1b:cd:5e:a8:de:a9:1c:94:fa:82:b2:9f:0c:63:c4:
d6:47:eb:e2:86:b5:16:61:35:2f:51:be:67:5d:36:ec:5f:0a:
7f:54:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:27 2025 by rpki-client