Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: 0GdmlQNI3dY1cf5fO+VOjAECaC1/gV4CV/tHkMin2zc=
Subject key identifier: 45:D6:96:53:3D:AC:51:87:9D:5E:2F:F1:2B:97:AD:58:9E:DE:1B:DE
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 01964AB404DD21579FD9D47A7C5D4928D63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 21:00:33 +0000
Manifest this update: Fri 18 Apr 2025 21:00:33 +0000
Manifest next update: Sat 19 Apr 2025 21:00:33 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: hZkyWMMTBP1AEZhJA7EoOZTdWo1hgb3Ic8sP6glPHOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:04:dd:21:57:9f:d9:d4:7a:7c:5d:49:28:d6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Apr 18 21:00:33 2025 GMT
Not After : Apr 19 21:00:33 2025 GMT
Subject: CN=45d696533dac51879d5e2ff12b97ad589ede1bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:20:18:a2:78:be:9f:c5:89:ce:5b:b2:a7:
04:9e:4f:b3:c2:0a:19:b9:cb:bd:38:7e:8b:c8:78:
60:1d:66:80:82:46:87:69:51:33:e6:47:f4:05:c3:
f9:64:49:38:97:cc:32:16:54:12:10:d0:89:7b:f7:
7a:41:24:19:c1:fe:9e:eb:7b:37:97:d5:9f:44:52:
8c:b5:4c:96:45:01:8f:aa:aa:c2:5f:c7:d8:41:02:
55:31:80:02:45:65:99:5c:31:5c:ef:2b:de:2c:3f:
3d:60:50:a0:87:af:a2:72:3f:dc:b1:32:a6:3a:6b:
ee:5f:c5:5d:2f:80:ed:d0:fd:40:2f:f8:65:d8:2a:
8d:cf:13:96:c0:1e:87:37:d7:db:6c:0d:d4:7a:fa:
70:5e:89:bc:74:4b:08:88:ee:a6:8c:99:65:5d:b3:
22:57:6b:7e:83:55:ae:56:5a:66:44:34:ad:4f:29:
c6:10:33:ec:dc:a2:aa:ad:55:9d:33:2d:c5:5d:75:
5b:50:81:4b:73:8f:21:e5:dc:44:78:6a:90:f2:e6:
98:62:a3:ff:3e:b4:6d:8e:2e:43:b1:16:7c:aa:29:
5e:03:40:18:c4:f8:3b:da:38:b0:de:80:9c:e3:be:
d3:42:b2:87:ce:d9:c7:17:7e:65:f4:b6:58:50:2a:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D6:96:53:3D:AC:51:87:9D:5E:2F:F1:2B:97:AD:58:9E:DE:1B:DE
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:54:4b:90:ab:41:13:a3:a8:35:b8:83:75:08:2a:58:04:e8:
41:3c:91:2d:3b:cd:86:36:f4:ab:50:cf:70:cb:65:d6:f8:d4:
ec:10:b3:dd:6a:d0:9b:fa:67:69:5f:88:62:8f:f5:f1:33:50:
97:24:3b:30:ab:d0:60:df:13:96:e9:a0:d8:fb:f1:c4:32:5d:
5e:bc:35:0f:53:dd:de:58:1e:b4:93:c0:4f:d1:10:77:94:03:
60:19:dd:b4:dd:9f:09:c0:b8:87:f8:89:95:86:62:6e:c5:cd:
01:7b:89:94:89:9e:4a:07:b8:59:71:eb:39:da:eb:ea:32:5b:
e1:2d:58:22:39:f4:23:db:3d:46:1c:9d:0f:65:75:b7:c9:05:
74:3d:fc:6b:8a:98:5e:49:2f:da:6a:c0:c5:4f:93:70:fd:e5:
a5:e0:21:bf:80:8e:90:83:f5:72:27:5a:56:0e:c6:f6:6d:45:
ef:b3:60:92:61:eb:6d:86:ed:ba:76:a1:e4:e1:ef:57:2b:09:
a0:2a:ef:f6:85:15:f8:54:1e:85:ec:24:3d:84:4f:43:81:33:
de:a2:b3:a7:16:5e:0b:dd:75:a5:54:dc:cb:db:3d:64:dc:38:
66:8c:7a:71:4f:38:fe:ba:16:15:9c:f5:b9:56:d2:6f:5f:2f:
fe:18:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:38:29 2025 by rpki-client