Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: HTYvEagL7lcXSNB5wAUVUU3gN/ZMhpDXpB8OE8mQsOY=
Subject key identifier: D8:C8:25:56:6E:53:86:AA:00:D3:D8:C6:1F:79:7E:C7:95:4A:99:76
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 01964A46661520C98C87FED5AA3F672C9C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 148B
Signing time: Fri 18 Apr 2025 19:00:49 +0000
Manifest this update: Fri 18 Apr 2025 19:00:49 +0000
Manifest next update: Sat 19 Apr 2025 19:00:49 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: r/QZT7vqv7KeV9K80+YVbTSLRMkulqB96/l05zZk+l0=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:66:15:20:c9:8c:87:fe:d5:aa:3f:67:2c:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Apr 18 19:00:49 2025 GMT
Not After : Apr 19 19:00:49 2025 GMT
Subject: CN=d8c825566e5386aa00d3d8c61f797ec7954a9976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:2a:ba:fb:ec:75:76:2a:5d:89:ea:a7:df:
e3:bf:e6:b8:7a:db:b5:76:f9:b4:d4:1d:20:96:ca:
68:1a:e4:c9:16:d2:a5:96:d0:71:5f:73:fe:4c:f5:
96:26:3f:f8:b1:87:9d:88:e0:18:78:71:24:76:a6:
ec:c1:6d:9c:a9:26:78:8d:3b:1e:4d:dc:c2:5c:6b:
b4:91:6e:ff:ad:cf:2f:ed:be:87:48:31:4b:86:72:
ce:4e:37:95:57:77:e8:78:cd:78:9a:1d:7d:af:0f:
b2:aa:93:e0:2b:7a:a8:de:a8:20:23:58:c4:0a:6c:
d7:7c:d9:56:40:a6:90:cd:89:ff:7d:ae:be:02:21:
1d:0f:e3:a5:1c:2b:b6:bd:dd:ae:17:00:ab:0a:f7:
ea:b8:f1:c1:1c:f5:2c:5b:6c:8f:90:32:4d:4f:4d:
88:b4:f2:56:ba:c9:67:79:1f:04:8a:77:7e:19:cd:
e2:cb:b2:d3:4a:da:fd:55:32:ef:6f:e1:17:cb:bd:
7e:35:93:33:c7:d0:65:26:26:66:a4:a5:82:64:cf:
20:85:73:fd:f2:93:a2:57:46:58:66:d8:ac:43:65:
9c:80:11:58:26:af:a0:46:48:55:cc:8d:22:30:49:
d0:15:8e:d6:41:86:7b:d5:5e:bd:04:42:a8:94:42:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:25:56:6E:53:86:AA:00:D3:D8:C6:1F:79:7E:C7:95:4A:99:76
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a5:d4:09:3d:44:08:85:27:03:54:1b:3b:06:9a:3f:45:c0:
35:d9:ef:94:63:c2:58:4d:6f:e4:a6:38:33:2c:df:1b:2a:7c:
15:8e:31:35:1a:95:40:cf:af:47:3a:6a:62:13:9c:b1:75:77:
3c:c7:aa:09:0b:d9:57:81:b1:e2:60:34:48:8b:a3:5d:3d:17:
e9:e9:f4:b4:26:43:2e:88:ef:94:77:78:73:80:3f:4b:14:d3:
7d:d3:d9:58:58:c2:32:c6:72:ad:ef:45:f5:28:0c:f9:f5:73:
ba:ed:d2:8d:dd:92:fc:44:b7:6d:cc:bc:56:c6:87:2a:72:36:
03:c3:52:ea:1a:96:a9:b9:f0:3c:01:c0:0d:10:ed:d3:8f:a7:
15:05:da:0d:6e:2d:bf:b5:3f:9b:e9:77:bd:07:18:1c:e4:4b:
7d:69:c8:e9:5b:88:5c:b9:29:15:e8:1a:4b:fc:a1:7c:bc:cc:
cd:18:b2:04:bf:96:de:b3:ab:4e:be:d4:1b:47:2f:ab:94:f8:
40:d7:14:47:86:f7:ad:91:0f:20:cc:e6:01:a0:0b:c1:fb:19:
15:2d:c3:99:ed:75:06:e0:7d:a9:4a:ea:b3:47:aa:71:f3:c0:
46:90:05:a8:29:31:f2:14:5c:6f:33:2e:d9:4a:76:cc:29:9d:
52:ba:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:51:05 2025 by rpki-client