Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier: +FBLOojH+vrfF48pf9LB6qc9JeH9lZ3G8C1izdmacEQ=
Subject key identifier: D0:0F:73:5E:BD:2D:C9:A6:33:12:AB:0A:9E:D6:7D:4E:6E:19:18:19
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial: 01965838917C42F239496E7DBD14D74C7BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number: 07CA
Signing time: Mon 21 Apr 2025 12:00:24 +0000
Manifest this update: Mon 21 Apr 2025 12:00:24 +0000
Manifest next update: Tue 22 Apr 2025 12:00:24 +0000
Files and hashes: 1: sxWKrzqIBBqkeo4-v2Jw2EzqS3k.roa (hash: DWZadMWJyiM8F0IG02kO3n/vWw1f6vECk5IkRqLr9qY=)
2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: 8ZamXG6zOo+5SJfyiNjE/gryJH/G7XWrQFLf8q8PWSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:91:7c:42:f2:39:49:6e:7d:bd:14:d7:4c:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Validity
Not Before: Apr 21 12:00:24 2025 GMT
Not After : Apr 22 12:00:24 2025 GMT
Subject: CN=d00f735ebd2dc9a63312ab0a9ed67d4e6e191819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:aa:8b:58:25:dd:52:ec:8b:79:ed:2e:b3:
f0:b9:3e:65:a8:65:9f:c6:5f:06:33:94:f1:de:37:
c4:42:de:0e:15:52:5d:a6:c3:74:5a:24:77:af:8f:
ea:5e:d2:3e:e3:20:27:9d:9c:81:ce:36:13:c8:b3:
50:bd:44:9b:c9:01:5f:ef:04:02:26:f2:ff:18:59:
ae:db:b3:b8:4e:9c:33:7d:10:b9:a6:95:6e:e1:0c:
ea:f2:7f:a0:08:57:9b:b7:46:7d:6d:42:f5:13:95:
a1:ef:3e:0f:0e:71:39:e2:91:8f:50:84:96:87:ea:
bc:ad:dd:95:e0:85:f7:52:6b:68:62:c1:13:01:eb:
b5:a2:44:f0:0c:ce:05:6e:59:a7:f1:67:4c:af:df:
d5:9a:81:e8:0f:4a:8c:d7:4d:e9:f2:81:66:03:2f:
b3:28:8b:8f:a5:5c:93:24:66:06:dd:bd:40:9e:c9:
40:fd:0b:08:12:cb:44:df:ef:46:01:f6:aa:a0:36:
bd:91:16:b9:ea:27:ed:cd:01:81:0b:7c:98:9e:8d:
98:0b:e0:16:db:3b:ee:05:80:eb:fa:43:69:12:ca:
82:7b:5d:c6:05:75:cc:a0:5e:6b:31:9c:be:8d:b0:
df:de:c9:c8:0d:19:e2:f5:02:68:53:ec:04:89:38:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:73:5E:BD:2D:C9:A6:33:12:AB:0A:9E:D6:7D:4E:6E:19:18:19
X509v3 Authority Key Identifier:
keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:16:48:95:8a:f4:c0:d8:29:09:d3:16:23:25:55:1c:65:
91:31:a8:01:7e:03:bc:32:5c:48:26:31:00:b3:55:73:58:ab:
3e:1f:83:e0:9a:82:9b:67:c6:43:05:c1:41:bf:d6:99:c4:98:
c7:87:81:65:fc:0a:9a:ec:f4:8b:d5:49:be:ce:64:76:28:96:
69:1f:fa:23:15:36:c6:de:4a:c0:ce:46:96:57:33:2b:31:ec:
66:a9:bb:36:6b:8b:03:1d:0d:28:92:54:90:f7:d6:f6:1e:e4:
c6:ee:c2:59:b5:78:00:32:d4:ba:d6:3f:63:b3:99:dd:7f:66:
8f:74:9a:c8:4b:c3:86:8a:02:f1:ac:0d:69:06:99:3f:ba:c9:
04:66:c0:f6:e7:94:af:73:32:bd:11:0d:67:a9:c2:43:a4:2d:
25:c6:36:ec:a4:36:f0:0e:31:9c:58:75:ef:c5:cc:45:61:12:
53:db:f7:8f:5b:d8:11:49:4f:7d:7f:2b:dd:dc:1c:8a:f2:9f:
83:20:85:15:a8:e5:72:f8:d5:02:97:8d:91:ac:aa:88:2e:39:
8f:77:e4:7c:e5:86:1e:8b:2e:5c:30:71:b2:81:a3:3b:b5:28:
d1:82:7f:19:25:3c:78:05:95:12:09:ab:02:19:e2:d7:b0:aa:
c4:8d:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:01 2025 by rpki-client