Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier: 8W/Lt508MM4ktJc7A4udWie3dpVozhhdIvhuninq1a0=
Subject key identifier: A6:B5:A0:8D:49:4D:2C:30:7D:00:89:80:74:CC:82:71:6F:45:49:5E
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 0196545BE20292A0F18F69A991F84B835FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number: 1090
Signing time: Sun 20 Apr 2025 18:00:29 +0000
Manifest this update: Sun 20 Apr 2025 18:00:29 +0000
Manifest next update: Mon 21 Apr 2025 18:00:29 +0000
Files and hashes: 1: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (hash: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=)
2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: 88F1SXYSVOTmlRqVO46EFDvJiKnva9xPOGPDrLaKrm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:e2:02:92:a0:f1:8f:69:a9:91:f8:4b:83:5f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Apr 20 18:00:29 2025 GMT
Not After : Apr 21 18:00:29 2025 GMT
Subject: CN=a6b5a08d494d2c307d00898074cc82716f45495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:b3:38:df:c7:d5:77:0f:a3:65:bc:65:24:
e7:1b:80:f9:cc:3c:28:df:40:14:c0:18:6a:f6:05:
cd:7b:0e:b7:4a:98:24:af:13:10:41:62:72:01:6e:
a6:65:21:4a:46:e8:64:e2:99:93:76:ba:b3:5b:41:
d3:07:f4:7e:fe:21:0f:e9:cd:dc:ea:f2:49:25:5f:
03:3e:b4:25:6d:5e:a6:7e:dc:18:9f:90:8e:1c:4c:
f2:e1:6b:79:75:96:d9:05:32:f6:e2:f3:13:dd:8f:
0c:04:64:55:48:9f:9b:4e:98:02:c1:cd:a0:d1:62:
c9:f0:41:5e:86:de:31:ae:18:6f:84:9e:37:2a:6c:
48:ee:9a:97:f1:35:97:8d:90:87:0e:ae:b6:4d:ab:
cb:10:56:65:cd:64:4d:ca:c8:35:1e:62:11:aa:11:
c2:26:a0:04:bf:4a:27:68:7f:82:fb:78:2d:15:40:
1f:34:17:52:1f:9d:3e:08:f9:a6:48:1a:9e:ed:9a:
48:6e:c8:d3:d9:d3:1c:56:3e:ff:1d:6f:eb:90:ef:
e0:7b:2c:eb:43:4f:15:69:86:c0:60:42:23:7d:b7:
03:27:41:b5:b0:07:b7:0f:dd:6e:53:d1:75:7a:23:
c7:56:12:45:8e:cc:2f:e0:43:d5:54:14:55:c2:1b:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B5:A0:8D:49:4D:2C:30:7D:00:89:80:74:CC:82:71:6F:45:49:5E
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:17:80:4f:35:08:29:1f:5e:48:dc:a2:77:07:93:72:83:
a7:71:a2:b5:bf:cb:4a:d5:04:fc:c4:bc:d7:0f:48:ee:64:0e:
59:55:ea:da:ea:01:c2:bb:4b:c7:44:78:70:07:a8:ae:23:1a:
ec:38:a0:fa:cb:75:d7:0c:f5:c1:cd:fb:76:9c:76:8d:83:aa:
fb:80:80:a9:ec:3f:06:3f:f4:15:71:9c:70:8c:16:bd:66:a1:
bf:00:b1:bf:12:15:df:2b:f0:ae:b1:6b:2f:2a:74:67:67:43:
05:1d:2e:b1:58:2c:9a:1d:3e:a9:77:82:bc:2e:84:31:aa:68:
5e:92:91:e4:ce:04:b1:f0:61:cb:79:00:4c:a0:50:88:b3:93:
a3:07:33:63:76:ec:7d:c6:57:51:3e:87:a7:9f:4c:78:38:74:
e9:a6:b0:bf:d6:33:65:f5:57:6a:63:4a:34:53:c4:33:54:43:
1a:d5:53:7b:da:b7:a6:9a:cf:e8:2a:ef:be:14:a0:5f:85:58:
34:89:e9:57:cf:9f:44:09:e9:40:3d:cd:eb:db:cf:bf:b3:82:
ec:e6:e7:f2:06:1f:2a:1f:54:bf:b6:d1:03:72:e9:64:3c:1e:
90:27:a8:11:59:23:78:95:a5:a8:10:9b:e9:3c:6c:30:5c:27:
99:3f:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:55 2025 by rpki-client