Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: U+93PiEb0y+eyUlH7WiYBuE+dYNEQl8D7R5IfYql6Qg=
Subject key identifier: 31:BB:D4:BF:04:71:E9:1C:9A:8D:23:65:F0:D0:A3:3A:CB:2A:50:3A
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 019657264860F7B20D25B134470CB85AA6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 07:00:48 +0000
Manifest this update: Mon 21 Apr 2025 07:00:48 +0000
Manifest next update: Tue 22 Apr 2025 07:00:48 +0000
Files and hashes: 1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: 39D5YdbnaCk5CPSJ2GJKYjAthRi5S0VCuMEHn+t3tX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:48:60:f7:b2:0d:25:b1:34:47:0c:b8:5a:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Apr 21 07:00:48 2025 GMT
Not After : Apr 22 07:00:48 2025 GMT
Subject: CN=31bbd4bf0471e91c9a8d2365f0d0a33acb2a503a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:29:99:24:2e:4c:c0:93:95:c4:1e:1f:ab:
15:a5:dd:fd:de:85:2c:18:29:fb:14:37:dc:e5:ba:
04:ed:a1:a5:3f:c0:a8:03:f9:75:97:54:a1:78:a6:
95:b1:b0:c1:8a:4d:15:99:75:24:b2:9a:85:60:d5:
84:74:0f:8d:43:56:3b:fe:4e:e4:0a:d1:e4:45:2a:
8b:f8:e0:52:96:03:9e:4a:ab:1c:90:f7:93:cd:06:
9d:cc:a5:11:98:13:59:aa:23:7a:62:6a:86:0e:57:
57:41:de:7a:ee:e9:9f:9e:b4:2b:b9:7d:89:2c:85:
81:ad:85:ba:59:09:b7:52:85:ee:1f:be:fd:18:b5:
5a:7b:c7:80:a3:33:d1:9c:e2:97:4c:26:99:de:79:
32:8c:7e:8f:ea:c6:2e:51:98:d1:1c:87:00:c3:01:
aa:95:b8:07:e4:ab:d5:28:3f:62:01:b1:8e:3d:80:
10:52:cf:3b:ef:52:fd:46:9f:d0:59:2e:d4:1a:79:
8d:f7:a5:e9:bb:de:f4:68:bb:80:13:88:03:d8:65:
ab:4e:bb:60:52:e2:92:8a:6d:01:2b:83:de:2b:40:
9c:19:40:7f:06:9e:42:ff:51:33:a5:60:31:39:a8:
ba:d9:e3:2f:ce:f6:16:c0:81:55:b3:dc:da:1a:dc:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:D4:BF:04:71:E9:1C:9A:8D:23:65:F0:D0:A3:3A:CB:2A:50:3A
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8a:18:45:ba:2d:2e:55:ab:5d:3a:d1:42:96:f0:25:75:b4:
ad:b6:ee:a0:83:46:4b:d7:2c:a8:4b:fa:74:8f:0f:70:0f:9c:
52:c2:93:0a:b3:cc:a9:1a:4a:87:fc:92:b1:4f:14:75:e6:03:
78:21:51:9d:b7:6d:5d:f5:90:07:8b:8e:29:ca:cc:39:5e:fa:
81:05:1d:ed:cb:58:ba:3a:9e:82:4b:d8:94:78:92:f1:1e:90:
08:7a:bc:9a:b4:76:57:8a:2c:75:e6:ce:7c:c7:2c:9e:2f:9a:
58:40:36:85:a1:65:f8:69:5e:14:8e:36:c2:00:e5:9a:65:42:
0e:f3:54:23:45:a9:df:5a:26:7e:c7:5c:df:52:e9:6b:08:65:
24:4b:2f:da:f0:c9:41:7c:c7:a2:e9:6c:34:d7:31:0b:29:2c:
e5:75:f5:66:a2:2d:60:e1:ab:bb:ae:0a:bb:55:44:13:78:a2:
e0:28:a0:56:05:3e:6e:b7:00:b1:5f:67:49:de:05:9d:6e:a7:
f5:34:d0:00:ee:1e:eb:b0:55:5f:55:41:ea:d9:87:b4:c2:b1:
cc:49:26:ea:f3:86:72:c2:fb:fd:b1:06:35:f0:db:b5:ba:13:
9c:e2:8f:44:c6:6c:5d:fc:9f:9f:a0:2e:cf:b8:2f:ba:4d:b9:
14:2d:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:45 2025 by rpki-client