Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: 1q6M3Ob79xfMGZLbrZHghefvPn3YYqSud+LXr96CMTw=
Subject key identifier: 57:2F:59:66:44:8A:CD:1B:20:A1:C4:5C:5B:AC:93:A2:BB:D0:FE:59
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 01965B397E0972A57E565C7756CDC56A470B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 02:00:16 +0000
Manifest this update: Tue 22 Apr 2025 02:00:16 +0000
Manifest next update: Wed 23 Apr 2025 02:00:16 +0000
Files and hashes: 1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: SSAVmt90znVW335Y8pQajZLtpTaAopu/fIM2uL5xXEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:7e:09:72:a5:7e:56:5c:77:56:cd:c5:6a:47:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Apr 22 02:00:16 2025 GMT
Not After : Apr 23 02:00:16 2025 GMT
Subject: CN=572f5966448acd1b20a1c45c5bac93a2bbd0fe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:2f:ba:47:a0:7d:71:c1:c0:36:4d:90:2a:
08:69:4b:78:69:aa:de:84:6f:f7:34:fc:b4:2e:e0:
0a:ad:81:29:8a:85:08:14:53:80:57:bc:20:ea:f2:
4e:2f:a2:0d:b7:98:ec:12:d0:b0:ba:6b:de:dc:5e:
d0:16:72:39:75:4d:be:43:84:4c:82:01:9f:5d:95:
55:4a:5b:27:15:cc:aa:e3:af:a3:f8:be:5e:57:3e:
ad:c1:ac:45:86:e0:95:18:98:7b:a2:ac:e7:2c:76:
44:45:23:87:56:75:dc:02:c2:e0:1e:03:5b:e6:b4:
96:27:45:f3:9f:e6:6e:ba:7d:22:c5:5e:2d:a8:36:
34:12:9f:92:08:b9:b8:3d:fa:8d:41:52:d3:cc:6c:
f7:55:2a:68:ee:8e:08:8a:74:9e:62:45:94:a3:1a:
35:5a:25:04:b0:d4:36:0e:a3:ae:81:57:0e:5f:40:
d4:7e:02:66:4d:e3:f1:8a:0c:0f:ba:d6:55:8d:65:
bc:2f:59:98:18:fc:0e:6d:c1:6f:96:02:d8:f5:e9:
57:73:96:cd:d6:fe:52:18:80:f4:c2:3a:68:70:50:
be:d2:7d:63:30:12:50:08:f9:e3:72:33:48:92:2e:
73:7a:a3:12:ac:49:5f:67:b5:97:cf:83:7f:c1:c3:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:59:66:44:8A:CD:1B:20:A1:C4:5C:5B:AC:93:A2:BB:D0:FE:59
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:ba:30:ec:1f:13:65:89:69:79:35:68:aa:13:e2:d1:d5:
8b:c9:5d:4a:30:b8:47:a0:90:0e:73:21:ab:e4:54:93:dc:76:
4e:93:e5:cd:c7:18:59:3a:fe:2a:ad:42:cc:e9:de:da:2a:cd:
b3:1b:92:b1:6f:0a:33:14:f8:1e:5b:34:7b:35:29:ec:fb:7f:
97:bd:45:6c:03:43:83:37:91:d1:d4:13:fb:cc:86:26:c6:cd:
1c:43:07:cb:2d:d2:49:c8:2c:8c:98:7b:20:b5:60:bc:05:9f:
3b:5d:7a:09:e0:b3:22:53:b9:fd:c5:bf:e3:4f:0b:5a:fd:41:
ab:7a:c2:49:ef:c8:a4:2f:82:fc:a3:3f:c3:ab:ce:e5:66:e1:
99:92:25:22:f6:2f:31:3c:4b:53:89:5b:09:52:10:fb:e2:ee:
bc:8e:be:89:42:5e:84:b7:b0:b5:0a:33:19:ba:56:f1:91:a5:
21:9c:bc:45:cd:1b:3b:f9:d0:d1:d7:22:70:90:61:69:49:b7:
68:83:15:95:42:8a:a4:95:7f:59:97:a6:43:37:9a:51:e5:3f:
fa:d5:65:22:51:07:05:3f:47:dc:35:8a:45:72:fc:3d:84:78:
79:9c:3a:1f:39:cf:42:4f:74:aa:13:10:49:62:03:10:2b:72:
45:90:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:41:16 2025 by rpki-client