Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: NjdIyZPFNgzZ331C16Riv82c650kCEorUExmdSVcBLw=
Subject key identifier: B8:A7:4D:B2:71:DD:7B:2A:21:7D:5A:4A:77:9E:0E:3F:31:EE:E4:1B
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 019658DD76BA969506F34B35388A3C443CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 1042
Signing time: Mon 21 Apr 2025 15:00:30 +0000
Manifest this update: Mon 21 Apr 2025 15:00:30 +0000
Manifest next update: Tue 22 Apr 2025 15:00:30 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: U76r1SGPkqzjFqv89trUH4omXdgwJu85VgL1RB52QlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:76:ba:96:95:06:f3:4b:35:38:8a:3c:44:3c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Apr 21 15:00:30 2025 GMT
Not After : Apr 22 15:00:30 2025 GMT
Subject: CN=b8a74db271dd7b2a217d5a4a779e0e3f31eee41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a3:0d:57:e3:a2:d8:95:6b:62:de:b3:be:46:
8b:21:82:f1:f2:5c:2d:49:49:3e:a1:52:e3:7b:90:
37:10:91:fb:cc:1a:fd:5b:ad:c2:00:05:7c:97:ad:
09:9a:2b:59:6e:ca:33:f2:55:40:7f:63:ac:3c:7a:
79:c7:50:51:7b:91:12:6e:51:23:8f:ac:a8:15:ea:
c0:c3:9c:2b:16:c5:fc:f6:22:91:4e:09:68:f9:90:
e5:24:e6:f4:3e:4e:5b:5c:76:70:eb:86:2c:54:b1:
ce:36:18:92:4f:b0:b4:69:ec:ef:bc:c5:71:18:ff:
ab:7a:64:5e:50:2a:cf:83:e3:38:2a:fa:cb:ea:c5:
bb:90:9a:31:f3:de:5a:3b:56:20:97:27:49:61:9c:
03:49:31:b8:2d:87:82:b9:ef:8e:3f:e9:06:62:85:
61:ff:97:6d:4a:44:f0:f4:0f:d1:f9:2e:66:bb:8a:
fe:e4:91:15:87:0d:69:2c:17:ef:7f:b4:49:22:99:
d3:74:6a:a8:2d:58:39:02:b7:a3:d2:2d:a8:9e:e4:
51:ed:b5:6a:61:8f:f3:49:df:6f:70:09:96:51:eb:
29:5a:94:7d:cb:d2:fd:12:16:55:c6:c4:e0:9c:d7:
a9:2f:75:f1:8e:4e:bc:95:4d:3f:10:4b:79:23:4d:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:4D:B2:71:DD:7B:2A:21:7D:5A:4A:77:9E:0E:3F:31:EE:E4:1B
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bc:73:83:20:11:c2:b8:81:bf:03:2e:25:67:14:4b:33:95:
c6:0f:ef:28:b9:c7:f8:0b:6b:0e:5e:0b:31:eb:b1:2a:f2:c7:
47:b0:12:eb:62:00:8b:c7:08:73:4a:1e:3f:8a:69:56:e2:2b:
f5:5b:26:06:98:3d:9f:6e:ef:f0:28:58:23:a7:23:c8:41:31:
90:6e:22:35:d0:b6:72:3f:ae:12:e1:9b:38:df:b0:a5:1e:a6:
9c:86:20:5b:1e:d8:52:65:87:db:5a:78:27:ed:38:04:b5:c5:
25:1e:ca:6c:c2:03:11:7d:06:14:99:fd:cd:ea:d9:77:92:c5:
9d:e9:bb:3e:26:d3:03:a7:c6:49:52:98:0c:7e:0f:73:50:8d:
59:ea:9a:24:d9:a8:9a:80:1a:83:b2:09:81:67:fc:00:54:57:
9e:39:2f:b7:d2:5f:78:dc:5e:ee:10:1d:3d:33:12:c6:ef:41:
38:3c:77:bd:7a:3c:c3:0d:cb:a3:18:43:34:d1:f0:6a:f5:2e:
d6:98:95:12:e9:5e:98:26:5d:85:9c:9f:85:3a:df:f7:ba:e4:
20:d5:18:21:bf:62:a9:c5:04:e7:fa:c6:d7:f1:8a:65:c3:6e:
c5:81:ef:1a:94:9e:28:51:ae:52:9c:7f:cb:11:52:6f:1d:88:
f2:ed:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:12:11 2025 by rpki-client