Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: 5/z6p4fhQ6CX5kvdI58n97LalqJV68FACNMRwE+lfjo=
Subject key identifier: 9A:69:8F:99:9B:20:3B:FB:F8:E1:B2:C8:04:C8:AA:39:CE:13:8E:09
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 019655A630C202D5BF79AEA56A6F90C5C97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 0FD4
Signing time: Mon 21 Apr 2025 00:01:16 +0000
Manifest this update: Mon 21 Apr 2025 00:01:16 +0000
Manifest next update: Tue 22 Apr 2025 00:01:16 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: y5z8ZVGcpu5nwaU2XAyhSNCv7BESv4daA1XFmjRNTnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:30:c2:02:d5:bf:79:ae:a5:6a:6f:90:c5:c9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Apr 21 00:01:16 2025 GMT
Not After : Apr 22 00:01:16 2025 GMT
Subject: CN=9a698f999b203bfbf8e1b2c804c8aa39ce138e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:5b:f9:8b:7d:66:9c:2a:2a:24:98:58:40:
8c:75:0f:c9:0a:f8:fa:db:3f:9e:01:d9:6d:db:1a:
81:b7:68:d3:b2:04:36:20:0b:66:09:55:51:88:30:
42:8d:01:b6:8b:f2:4a:fd:94:3b:98:28:e0:ca:a8:
15:c3:9c:24:27:b1:7f:15:70:71:42:5e:b2:3f:33:
01:8e:f4:9a:2e:6e:85:33:32:d6:10:5d:b8:bc:ad:
ea:00:ec:d9:35:04:4c:f3:c1:9b:d0:64:66:eb:f2:
e8:d1:14:5e:6f:69:09:4c:ca:e4:5c:7d:69:8e:a6:
8c:c8:8c:4c:c0:ae:46:0c:9b:a3:26:65:bc:41:57:
fe:19:45:d4:1f:a1:44:17:82:37:0d:fc:0b:30:c9:
b6:09:80:d9:b8:c7:b3:20:e8:87:3b:45:5e:6c:e5:
8b:ab:c7:d9:65:d0:bf:08:d9:e6:4a:8f:7f:bc:00:
aa:4d:6f:42:ae:af:c4:45:6a:7c:c9:7e:1b:43:ab:
47:21:db:32:d6:25:34:ce:42:1f:00:16:53:4c:25:
96:89:64:b1:01:a0:3f:f9:fa:3a:fc:0b:a3:4c:dd:
a6:62:f6:71:49:18:2d:bb:df:88:98:1c:22:33:ab:
76:77:be:34:16:11:62:14:d1:54:7d:ad:f9:fe:b1:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:8F:99:9B:20:3B:FB:F8:E1:B2:C8:04:C8:AA:39:CE:13:8E:09
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8e:5f:e8:dd:3e:a0:79:ab:bf:49:ab:46:db:34:29:ca:17:
9c:84:ad:e9:38:3f:b7:a0:a3:8d:c0:83:b2:8d:84:3c:75:17:
c9:73:e2:f9:14:70:c2:3b:b1:af:e2:f9:ec:1d:b7:4c:16:42:
bf:90:77:c1:f4:7e:f5:cc:54:da:8c:2c:8f:af:b2:80:c5:57:
77:cd:07:cf:57:20:d8:a8:fa:f1:bb:08:15:4e:c3:44:1f:a0:
87:65:7f:59:53:be:39:87:53:d3:87:15:a9:2c:9f:75:26:35:
66:1e:0b:d8:8d:c8:c3:a9:cd:72:df:82:99:9d:a4:f6:f1:db:
fc:2a:4e:bb:c1:b2:35:0e:a6:ed:81:28:0e:68:44:3d:82:ca:
b7:6d:37:30:c6:16:66:c1:30:d2:a3:72:4a:e2:63:8b:56:a3:
3c:1d:76:d6:40:87:c7:fc:1f:b3:1a:17:8f:09:ea:4f:1a:18:
db:60:76:b1:95:2f:44:95:0e:e6:19:c4:cb:83:79:b1:40:23:
d1:40:b4:d3:d3:54:d9:e4:30:b6:a6:60:32:da:0f:41:a9:be:
8c:07:54:9b:50:14:ae:5b:a0:04:74:f8:9c:a2:3b:cf:18:14:
47:64:11:9d:e2:00:3c:00:6c:03:80:e8:b8:a3:7a:f9:34:a2:
fa:2f:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:02 2025 by rpki-client