Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
File: VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json)
Hash identifier: i84B5tGDwsxjw4Lazr1DRsgJqZlZGQBeAHQL7MWRsqM=
Subject key identifier: EE:25:AD:8F:B3:E1:F7:8D:97:A4:DD:93:41:C2:03:92:AB:0F:1D:63
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial: 019657CAF0E15D1217AF0A2094C7F32A1F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
Manifest number: 0400
Signing time: Mon 21 Apr 2025 10:00:39 +0000
Manifest this update: Mon 21 Apr 2025 10:00:39 +0000
Manifest next update: Tue 22 Apr 2025 10:00:39 +0000
Files and hashes: 1: H7y3h5egzZRq_DcRMXxnHePpEqo.roa (hash: SsgPkP/OTMccNNIk11dqOnNXkC8Kebf+Srm+sRJHeWM=)
2: IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa (hash: J6Aqupuzh1XHZTyQ8eqa5z/nXeBEsxyVOCdiPL4Sgt0=)
3: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: a9dE8ArPvMrcUwA4mXDv70AOnIfNwJKvMzaXEj7JugM=)
4: ixZP8lw2F7ZQ1n6z2ul-PVTfMYc.roa (hash: 8HnGm/A9kKO8qk6ptSile1LUya5t/LNEUOnSh7y0uik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:ca:f0:e1:5d:12:17:af:0a:20:94:c7:f3:2a:1f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Validity
Not Before: Apr 21 10:00:39 2025 GMT
Not After : Apr 22 10:00:39 2025 GMT
Subject: CN=ee25ad8fb3e1f78d97a4dd9341c20392ab0f1d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:a7:1f:70:f9:94:dc:61:26:86:5a:a2:3f:
c0:f8:80:22:6a:b2:b9:f7:5e:b8:71:ad:43:1e:c3:
d7:c8:f5:95:37:bc:c4:24:09:5f:83:3b:6f:57:69:
ea:1b:64:bd:f9:0c:78:cf:f6:f4:d0:23:93:82:3a:
46:8a:6d:69:b8:19:14:0e:c7:c1:55:04:db:ce:cf:
93:4c:4c:be:ad:8f:97:a8:4a:00:34:c0:1e:aa:74:
4b:46:a9:6b:73:c2:85:d1:44:b4:3a:c7:a4:ea:17:
aa:38:d0:39:51:f9:4c:2e:11:9e:22:7c:0f:98:03:
c5:3b:d4:67:7f:a7:a5:88:06:0c:61:48:e3:f8:e0:
68:2b:5a:ae:6b:b4:ff:f1:1e:89:dc:34:dc:08:19:
76:c9:e2:a3:3b:0c:e4:2b:f8:78:d1:cd:c7:e4:70:
58:6b:33:a3:0e:02:24:a5:3f:67:aa:20:8c:de:ee:
4f:d0:df:b6:60:a4:c8:b4:64:bd:d2:b7:ae:f0:38:
be:ea:1c:0f:3f:5d:bc:41:da:09:80:a2:a7:53:a7:
81:ab:d5:aa:6f:c3:05:96:a7:bb:e5:a4:1e:a4:60:
be:40:aa:51:00:02:12:50:a6:04:3f:af:e6:b0:11:
93:5b:80:ad:c3:79:fd:55:e0:bf:40:54:6f:81:38:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:AD:8F:B3:E1:F7:8D:97:A4:DD:93:41:C2:03:92:AB:0F:1D:63
X509v3 Authority Key Identifier:
keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:78:e3:94:5e:84:47:b3:4d:c9:5f:cf:dc:03:16:5e:30:ff:
9c:ce:c6:35:d2:8f:e7:35:cc:c7:d1:4e:b4:89:f7:77:97:2e:
9e:9d:e5:5e:2c:42:a1:a3:b4:ed:d8:29:67:a1:43:ca:a6:ef:
bc:d5:2c:cc:d9:7b:06:04:b4:3d:2c:44:10:d1:e3:3f:4c:7c:
42:e9:da:7f:26:a1:5d:44:e5:7a:c4:3d:ee:be:fe:5b:b4:10:
bb:5a:6e:0f:ce:b0:b2:9c:a1:8e:50:c3:58:47:53:fc:2f:f3:
68:ba:14:6e:74:34:b2:f7:6c:29:72:df:5c:7a:25:db:fc:ce:
d4:5f:c4:44:c7:62:2c:a0:ae:3d:72:2e:04:a0:35:47:70:20:
96:0a:43:aa:2a:82:21:f0:bc:64:3b:44:71:fd:83:70:0f:9b:
c2:bc:d7:b0:04:6d:ce:61:50:87:60:ef:b6:a7:f7:42:6f:27:
e2:ef:e6:d1:f4:48:83:00:44:c3:16:bd:18:12:78:1a:26:b1:
46:a1:7c:84:5c:21:c5:79:44:b7:a6:52:b2:bf:1c:de:7b:b4:
c0:99:b9:1c:28:25:41:75:26:2d:bc:4d:f2:1a:90:65:7e:3d:
11:81:85:66:f2:de:28:6d:70:ee:60:3d:2f:c3:1a:a7:8f:4b:
ee:cc:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:55 2025 by rpki-client