Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: dQ+g8BXleRmo9u72NbKaKCdo8BJQYj4TuOHAbd76X8Y=
Subject key identifier: 82:58:FE:D9:F2:CC:9A:03:07:38:70:06:6D:05:FC:09:B2:09:31:6A
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 019613FD1FE546B72CD22FBCA3FA61C3A0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 14E2
Signing time: Tue 08 Apr 2025 06:01:17 +0000
Manifest this update: Tue 08 Apr 2025 06:01:17 +0000
Manifest next update: Wed 09 Apr 2025 06:01:17 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: FHgvegFIhKKIRcFviO0prB/WHt1nAxdfeTfIXWeU2WY=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fd:1f:e5:46:b7:2c:d2:2f:bc:a3:fa:61:c3:a0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Apr 8 06:01:17 2025 GMT
Not After : Apr 9 06:01:17 2025 GMT
Subject: CN=8258fed9f2cc9a03073870066d05fc09b209316a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:c1:6e:8a:ef:64:a5:ed:fd:a8:c1:a1:5e:
07:83:78:81:dc:c6:83:14:37:64:b1:aa:51:a6:cb:
61:f3:4f:94:64:16:78:5e:e5:71:4d:b2:a5:dd:94:
bf:71:9e:d3:b8:05:fb:92:e4:a9:8a:b5:17:a0:1f:
f6:25:78:71:71:43:d8:f7:12:4a:14:c7:52:18:17:
90:d9:87:98:b5:74:cc:4d:96:26:d0:f5:b9:4f:58:
22:a4:8f:29:e8:0c:b1:24:10:95:91:49:cd:3b:d2:
8c:b5:47:c0:bb:01:37:5b:92:ba:bd:fd:e7:b1:0a:
bf:19:9e:42:2e:64:e5:21:e2:48:47:84:be:ad:cb:
de:04:41:84:a6:4b:97:b3:11:c5:b8:1f:58:af:1a:
48:28:bc:e5:34:18:3f:cb:91:e8:d9:93:5f:1f:e0:
9f:57:4f:66:5f:38:c6:cb:76:0e:6e:1d:4d:f4:93:
41:57:ad:c4:23:c5:59:07:e5:cd:5f:82:67:a4:70:
05:7a:c2:14:c4:96:78:91:2f:33:6b:23:f5:c2:98:
8c:18:e2:7f:d7:a2:30:f3:03:b0:c6:4a:90:a1:8a:
b8:fa:ab:b2:f9:b9:9c:e7:09:99:27:33:6f:36:d7:
95:75:57:63:a2:d3:84:40:b2:ef:d8:fe:10:5c:5d:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:FE:D9:F2:CC:9A:03:07:38:70:06:6D:05:FC:09:B2:09:31:6A
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:c9:4e:d2:3d:cd:52:6e:cc:e1:c7:7a:03:bf:14:99:64:
e1:bf:4f:c7:8c:99:0f:f6:07:3a:b3:d0:70:20:8b:56:55:96:
bd:97:eb:2d:a9:6d:70:3b:cb:76:30:43:3b:d2:38:da:c8:7c:
e0:71:69:5d:eb:0b:d6:8d:11:9a:7c:2a:58:e8:55:ee:be:43:
c3:24:b8:31:fd:32:b7:b8:63:f7:80:fc:a6:81:62:d0:2c:a4:
ed:68:a4:2c:6f:5b:99:33:e7:92:ab:41:0a:42:e4:d7:b2:00:
0b:fb:b1:ed:f7:de:bc:f0:41:55:b1:97:17:ac:08:84:e8:a1:
6f:ed:43:64:b6:c4:ad:91:01:3a:a3:fc:7e:f5:cb:75:d0:00:
91:b6:8b:40:30:30:84:42:ce:50:b3:86:dc:cf:32:b1:3c:57:
7c:cb:9e:bf:8e:47:47:52:0a:df:81:88:67:dd:55:ba:e9:35:
75:5f:e1:f8:93:04:28:fb:e1:91:04:3e:13:33:f1:e4:ba:3e:
4f:5f:f7:77:5e:3f:07:5c:aa:4e:33:0d:ec:e2:a6:52:3b:a6:
de:fc:92:f7:f8:41:11:6e:95:1f:32:00:c2:00:6d:3f:94:30:
55:22:7d:6e:f1:68:88:a6:bb:6f:a5:50:af:62:7b:48:e6:34:
13:b8:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:22 2025 by rpki-client