Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: Mi0wupqJj97+9ePLLm/TljXTFA23JEDanQd3BPsp/0A=
Subject key identifier: 76:EE:E4:95:76:00:52:44:D0:1D:8F:45:57:55:21:28:27:41:9E:BD
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01964B8FC678E96DB3131695F2A35C642618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 0F1C
Signing time: Sat 19 Apr 2025 01:00:35 +0000
Manifest this update: Sat 19 Apr 2025 01:00:35 +0000
Manifest next update: Sun 20 Apr 2025 01:00:35 +0000
Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: cvrBFb1owL0mWPOX6Ffm/0mFzR7Hj+WvgD005RZ4yIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:c6:78:e9:6d:b3:13:16:95:f2:a3:5c:64:26:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Apr 19 01:00:35 2025 GMT
Not After : Apr 20 01:00:35 2025 GMT
Subject: CN=76eee49576005244d01d8f455755212827419ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:4f:46:4c:2a:f5:b9:a6:97:af:2f:47:38:
a9:45:15:2e:46:c2:47:34:33:f1:56:87:84:05:d6:
64:58:d4:f3:f5:ec:5e:cf:0b:44:b8:8a:58:6e:dd:
07:46:14:93:0f:54:7f:fd:7c:6c:b7:cc:0a:ce:d5:
a9:0a:af:c0:94:3d:98:b3:39:46:3c:1d:60:b4:71:
9c:2d:b3:6c:d5:d1:94:61:eb:58:fa:fa:dc:68:88:
cc:ad:83:22:e5:70:c5:b6:35:9d:6a:0e:4f:9e:54:
c5:55:0a:38:5a:a4:59:a6:ff:56:fc:a9:d8:7c:2b:
9d:12:89:9c:1a:82:5d:83:b2:33:e6:54:6e:af:8b:
9a:ce:b9:9d:1b:1b:fc:78:e7:fc:77:31:32:57:a9:
dc:33:51:fd:97:aa:bd:1b:16:ba:d9:2b:73:60:f0:
a1:92:f1:13:44:47:a4:0c:4a:7e:ef:fc:89:4a:a5:
4e:9d:42:46:ae:68:c6:84:59:aa:59:5f:0c:3d:76:
86:d1:b8:b6:02:c1:93:3d:38:31:5b:e2:12:fd:cc:
d5:04:98:1d:26:db:cb:30:50:da:d8:aa:5d:5d:e5:
dc:7e:c7:67:a2:a6:37:33:b9:4b:52:d0:b7:aa:a9:
26:09:3a:44:a8:c5:c1:75:24:d4:ed:42:30:4a:d2:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EE:E4:95:76:00:52:44:D0:1D:8F:45:57:55:21:28:27:41:9E:BD
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:27:69:6d:51:a7:a9:f1:d8:67:5d:d9:e2:a6:91:3f:90:ff:
bf:45:b0:70:a7:c8:56:59:31:45:25:00:4c:79:39:67:3f:e6:
69:09:71:cd:91:e7:b0:d3:0a:5c:76:60:4b:3e:48:1a:c5:0e:
ef:e0:12:3b:53:57:bb:05:d9:b4:42:da:f5:a6:fc:34:51:c3:
85:93:99:5a:34:56:90:8e:d1:db:26:73:cd:6e:97:7e:4d:42:
9c:f0:22:81:d2:89:f7:93:53:e2:c8:f9:58:0a:1a:98:7c:ee:
95:70:9e:ff:aa:2a:97:29:41:71:11:29:e8:d5:1f:57:bd:fb:
f7:6d:0c:28:b8:cb:84:2f:4a:6b:27:d4:20:f3:45:c0:ba:ec:
4e:03:77:70:58:15:09:f9:b8:21:54:13:ad:d4:05:9d:07:b1:
2e:5f:61:43:2b:89:dc:28:d5:40:0a:77:f4:28:98:96:97:b1:
f6:ca:e1:00:97:89:53:cd:0e:33:2e:b7:84:c2:dd:7d:0c:f2:
30:38:60:01:ff:05:a4:b1:ba:58:65:91:1f:65:00:7a:04:39:
7a:80:da:62:02:89:a6:04:a8:43:c7:fb:60:c4:40:d6:49:45:
b5:ac:35:b4:1f:35:7d:bd:a5:3a:7f:91:42:25:6e:cd:13:30:
4a:52:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:08:56 2025 by rpki-client