Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: FDEc9v3mdtxd26zvOGzXQO2dlN3freSox8k3uYwwr9w=
Subject key identifier: 8F:98:71:F8:9F:A9:F6:40:37:3F:81:49:9F:C5:5C:9B:C9:3C:87:90
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 01963387FD47C4436FF806E230EBEAFC04E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 14EE
Signing time: Mon 14 Apr 2025 09:01:12 +0000
Manifest this update: Mon 14 Apr 2025 09:01:12 +0000
Manifest next update: Tue 15 Apr 2025 09:01:12 +0000
Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: tmWdSZkc/6gTjMjtgF5y9ktwakxqEf2bt9pA+0IXNhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:87:fd:47:c4:43:6f:f8:06:e2:30:eb:ea:fc:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Apr 14 09:01:12 2025 GMT
Not After : Apr 15 09:01:12 2025 GMT
Subject: CN=8f9871f89fa9f640373f81499fc55c9bc93c8790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:53:72:7f:e0:07:3c:53:09:c5:34:b5:03:
00:4a:4d:d5:8f:64:00:f6:34:fe:23:86:52:59:a8:
33:73:67:0c:25:30:1c:50:e2:74:b7:36:d9:9f:04:
56:1a:f8:10:da:05:8d:9c:73:df:77:c1:ea:39:d2:
1a:1f:63:7a:50:b5:be:cb:3c:25:cd:77:fe:8d:a9:
9f:39:56:2a:94:03:fe:4b:a9:61:9c:82:8e:be:7a:
c8:06:77:65:0f:2a:93:60:2f:44:18:4a:c6:3c:ce:
13:c9:fb:d6:fd:bf:62:d9:36:1e:74:3b:30:c9:54:
13:4a:33:5f:1a:22:b0:63:32:a3:cc:e3:c5:ab:8c:
8d:88:93:17:e7:fe:6c:e4:7a:3a:14:97:51:23:f3:
fe:44:1a:58:67:5f:f9:ef:f4:ee:f7:15:c7:fb:25:
72:11:a8:5b:b8:5c:cc:f9:82:a8:9a:f7:d3:88:a8:
6f:b4:f1:99:4c:01:7d:39:11:d3:75:77:0f:fa:ed:
d6:a5:03:90:fe:3b:38:3b:e6:d9:95:3c:8e:3f:bf:
fd:cd:13:ea:ca:17:01:90:63:d4:e5:7d:8e:8c:41:
45:7b:ff:3b:f3:35:d4:90:d6:9d:c0:55:8c:6e:61:
c4:3c:e1:d2:4c:59:2a:fd:ec:c3:18:37:43:fd:6e:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:98:71:F8:9F:A9:F6:40:37:3F:81:49:9F:C5:5C:9B:C9:3C:87:90
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9b:85:7d:42:94:f4:bf:9a:f2:95:31:3e:ac:f7:31:c1:8b:
93:f9:b9:4e:a4:fd:b2:f8:fc:17:eb:b8:36:e7:3b:f3:35:c1:
e8:b7:9b:72:ac:8e:e5:57:84:21:65:01:ef:50:bd:88:20:c6:
25:cd:77:57:0f:d3:14:82:9e:a8:49:ea:9e:c3:7e:79:e7:9a:
b4:1e:92:bd:ff:83:e3:b8:48:d4:24:e1:49:f3:b5:71:4d:b9:
58:f4:5d:f2:24:af:61:65:a3:51:e4:e8:d6:81:9d:35:e4:95:
7e:d0:d4:7a:97:9d:62:5d:b4:cb:ee:56:d7:48:66:36:49:ed:
a3:6c:2d:a2:1e:8f:8f:b4:2d:63:b0:ab:ad:42:46:b1:dc:78:
7e:5c:50:12:ef:fc:da:53:b4:75:02:fa:f1:e0:69:ff:65:76:
12:4c:1c:ab:d5:96:9c:11:ea:c1:b8:a9:3c:3f:c5:0d:7e:28:
7c:39:79:8c:e3:eb:fc:bc:fc:78:76:b1:e0:0c:40:44:1d:39:
ce:6c:c0:db:0d:c2:09:8f:e4:14:8e:10:4c:53:05:29:b9:c4:
45:d6:ef:dd:0f:4c:6e:69:28:15:6c:8a:a8:ad:f6:72:87:09:
10:c0:55:03:93:e6:23:68:f3:9f:c6:d8:13:97:ac:69:73:a0:
39:76:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:06:28 2025 by rpki-client