Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: ZK0DMAwmmeec10gO1aVF8M6JDaRwIoh3cwGoFM4SOSQ=
Subject key identifier: A5:03:7D:E4:B6:FF:FE:34:12:D6:38:31:70:35:B1:78:9D:4C:F3:65
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 01965CBA16D6C8DB516502F7624DF08C03D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 037C
Signing time: Tue 22 Apr 2025 09:00:21 +0000
Manifest this update: Tue 22 Apr 2025 09:00:21 +0000
Manifest next update: Wed 23 Apr 2025 09:00:21 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: yiWlomn3BrIqhixqlSl1DR9EpWtVA7rCQYoYwh3E/jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:16:d6:c8:db:51:65:02:f7:62:4d:f0:8c:03:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Apr 22 09:00:21 2025 GMT
Not After : Apr 23 09:00:21 2025 GMT
Subject: CN=a5037de4b6fffe3412d638317035b1789d4cf365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:42:4a:93:20:bb:ab:f6:88:de:dd:8e:c0:
37:42:e3:65:68:8e:9e:6a:d7:19:19:4c:2b:82:6d:
47:11:e3:11:42:bb:4a:78:6d:58:20:b8:70:40:99:
31:5d:42:36:0a:4c:4e:ff:84:86:26:3f:2c:be:c9:
31:b8:fa:a6:91:05:e7:98:a2:9f:e9:98:32:b9:bc:
72:d4:5a:7a:5b:f5:0c:24:3b:66:e7:91:07:36:91:
58:10:37:96:37:1f:ff:f0:a3:4d:4a:96:41:14:d9:
3e:04:41:c2:8f:3e:38:95:94:ea:8f:c1:17:f4:7c:
0c:85:79:44:0d:8c:36:9e:57:d8:cc:63:a9:c4:8d:
d0:75:05:70:d6:2d:a1:83:ea:05:bd:fc:6b:de:b1:
e5:a9:a5:eb:48:19:fa:4d:3d:3b:cc:df:8e:e4:a9:
22:47:52:a3:8f:40:0c:33:3d:10:af:af:b1:5e:2e:
8b:ac:1c:ee:8e:a1:02:7b:84:73:fe:70:ba:a8:0e:
c4:20:7f:f5:64:fa:98:db:a3:d4:16:b4:91:e6:3c:
2d:b7:81:a3:f3:bb:1f:9c:15:2b:15:fa:fd:df:3a:
ee:01:91:0f:c6:83:c4:b2:fc:9d:03:9e:00:e5:d4:
bb:06:d9:77:c5:91:48:e6:65:5c:ac:ea:f0:b2:38:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:03:7D:E4:B6:FF:FE:34:12:D6:38:31:70:35:B1:78:9D:4C:F3:65
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c3:9c:33:cb:23:ba:36:a0:89:be:dc:e2:96:42:af:40:f5:
0c:c5:60:88:ce:9c:23:79:a6:1d:23:b4:4d:15:40:21:2a:88:
17:78:05:57:c1:c2:c7:92:76:07:de:02:c9:1d:ec:93:d1:29:
05:9c:53:28:a8:e5:42:88:f2:59:30:16:44:31:63:57:42:29:
ab:0d:38:38:52:12:de:72:14:ff:d6:8e:03:1d:12:e1:d2:ec:
ab:92:18:c8:30:98:9a:83:6f:96:86:87:54:ed:f2:28:67:1d:
77:e7:a7:17:50:55:31:6a:e2:f8:f1:3b:f9:68:ec:37:ed:08:
da:6e:23:11:ce:04:06:ae:71:83:fe:ba:2f:b5:79:77:9f:ad:
67:0d:06:8b:9d:65:bd:90:ae:f4:69:3c:d0:78:29:83:1c:f9:
05:9c:79:ca:c1:bc:e4:fb:0b:9a:a9:e7:ee:34:61:f4:33:80:
e9:24:6c:d5:ae:c6:39:77:b6:99:27:a4:68:89:98:d2:f6:73:
2d:09:96:a0:29:42:14:c8:2c:3e:d3:ae:c3:b5:0a:ce:88:06:
b4:eb:89:ad:ce:bb:23:e8:4b:05:78:14:6a:b9:47:1a:9f:e2:
03:04:fd:72:ca:b5:fc:37:0d:6c:97:f7:24:ac:ee:47:15:77:
fe:cb:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:27:54 2025 by rpki-client