Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: 6RAPBQ7TDlXx39M6HsExKlq9jRI9oDRy86B12bTlgGM=
Subject key identifier: C5:E1:B2:8C:4D:FA:4B:13:8F:EE:A4:06:21:BC:19:CD:6C:7D:F8:2B
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 019651FFC857DE4D1FEED0A2260A2AA639BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0AED
Signing time: Sun 20 Apr 2025 07:00:39 +0000
Manifest this update: Sun 20 Apr 2025 07:00:39 +0000
Manifest next update: Mon 21 Apr 2025 07:00:39 +0000
Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: Q71cmNj1UChi7UrXj2lFbwnE3uh5/QCUeoFSap1JmlI=)
2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:c8:57:de:4d:1f:ee:d0:a2:26:0a:2a:a6:39:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Apr 20 07:00:39 2025 GMT
Not After : Apr 21 07:00:39 2025 GMT
Subject: CN=c5e1b28c4dfa4b138feea40621bc19cd6c7df82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:1a:2a:33:94:01:32:4e:e8:4d:bc:21:af:
ef:cf:c4:40:c8:67:55:5e:93:d6:92:17:8d:aa:ad:
d3:26:ff:5b:9e:d9:b4:fb:ce:e3:17:e8:1e:45:98:
58:6b:b3:33:1e:79:90:b6:16:2b:ff:ff:80:9d:be:
48:a7:20:40:d2:4a:6e:1b:70:0b:c0:d1:26:4b:27:
dc:77:4d:2e:2b:70:d6:0a:c1:ee:3e:b3:59:87:34:
ca:a6:99:c0:47:09:87:9c:28:f7:15:2f:cf:ff:9f:
62:be:5c:4c:31:4d:5c:2b:86:cf:b7:e1:76:14:fc:
3b:ec:b5:7b:2e:49:56:a9:4e:21:e3:78:56:65:87:
f9:58:87:00:e8:d9:39:71:4d:b5:d3:33:d1:49:5b:
f8:77:a7:30:8e:4e:0e:51:9d:52:ac:90:24:24:31:
c9:02:c9:0b:13:d3:34:ea:37:a6:23:b7:f2:70:34:
c5:b8:09:96:f7:e5:a9:34:13:81:6c:54:e5:eb:3a:
26:33:03:52:48:39:20:c7:2f:68:e7:07:89:de:d6:
aa:bc:5f:f6:b1:7c:41:d2:87:c3:c7:29:4b:93:88:
7f:f2:25:95:96:f9:b1:b1:dd:60:d4:3b:77:c9:94:
e0:a4:8c:61:20:e0:28:b1:45:5a:9f:19:bf:54:e8:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:B2:8C:4D:FA:4B:13:8F:EE:A4:06:21:BC:19:CD:6C:7D:F8:2B
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a1:25:c5:85:80:18:88:8c:09:a4:20:53:b7:23:d2:13:dc:
35:2b:4b:18:3b:a9:ba:a5:c9:c4:22:74:7c:60:90:05:e3:df:
bd:95:e6:a2:a5:ad:24:2b:84:00:ab:d2:81:72:51:0b:ef:a7:
f8:b0:d3:3f:47:51:d7:5d:ed:4e:2b:7b:e4:94:3b:62:73:74:
0e:a0:85:b5:6b:1c:33:c7:2e:fb:76:f2:90:d1:6f:ae:d0:a1:
e7:e4:ab:2a:33:5b:25:d1:42:ee:3e:43:c7:df:32:92:20:df:
1e:65:f0:6b:f6:df:c3:88:6d:fa:e0:17:f8:84:91:b1:fc:86:
8a:be:e0:e6:35:50:1b:8b:0d:91:d4:c2:db:f3:58:b2:63:9a:
e7:31:12:2c:1e:f3:86:5c:2d:f0:22:61:18:07:a8:7a:cf:1e:
05:af:dd:c3:5f:77:5a:6f:5f:20:49:38:0d:5f:12:51:2c:85:
e2:ab:b6:a0:66:68:e6:dd:09:3f:82:26:e3:1b:eb:78:3a:40:
eb:5c:28:ba:5f:51:06:bf:b1:d3:87:fa:57:cd:6f:a2:a1:b0:
6f:86:49:60:5a:fc:7a:56:7f:07:ea:56:0d:3b:a7:89:33:1a:
d3:44:89:6c:df:8f:ce:ee:bc:12:8d:9a:26:e4:ec:0e:43:71:
2a:c8:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:54 2025 by rpki-client