Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: sJ6yEvv6NvbX0BWW3VspsrgipjDbsN5GmojZPHQcVYY=
Subject key identifier: 59:01:C7:47:0F:DD:05:90:32:E3:B3:98:B6:4E:C6:3E:4F:E7:FE:90
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 019649D813A2268B49010EF6734192FE7D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0A44
Signing time: Fri 18 Apr 2025 17:00:19 +0000
Manifest this update: Fri 18 Apr 2025 17:00:19 +0000
Manifest next update: Sat 19 Apr 2025 17:00:19 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: uSnuAE2kPDPzvlXXZJroNciFqeRauxqbP1LwSZI3GsU=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:13:a2:26:8b:49:01:0e:f6:73:41:92:fe:7d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Apr 18 17:00:19 2025 GMT
Not After : Apr 19 17:00:19 2025 GMT
Subject: CN=5901c7470fdd059032e3b398b64ec63e4fe7fe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:9a:70:2c:e6:d1:e4:13:ac:42:f7:17:ac:
f4:0a:9f:6c:b9:39:90:9c:af:cf:96:e0:09:34:d3:
b4:3e:33:76:8e:d9:2b:e0:20:43:ee:60:15:6c:6c:
ff:bc:82:48:10:d9:86:c9:10:25:94:51:18:2d:50:
2b:34:c1:42:c4:4e:d4:87:53:b1:a8:9d:17:c3:84:
10:d6:2f:23:99:cc:af:ee:ae:c1:3f:8c:78:a0:ee:
db:5f:73:27:c3:34:68:c5:4d:50:1a:a8:3f:75:9b:
79:55:0a:ac:85:7b:4e:23:f1:ba:fe:c8:e0:b6:1e:
dc:72:48:8f:01:e2:6b:e5:89:99:5c:3f:db:35:ee:
29:79:ff:05:de:78:e0:ee:44:6c:69:84:47:a1:52:
73:b3:5a:a8:b9:26:f4:e5:99:20:bb:24:8e:8c:3a:
0f:94:d3:9a:17:03:64:be:44:20:4e:f9:48:fe:45:
48:0c:58:5b:a0:4b:f2:46:52:76:e2:fa:50:c1:8b:
dc:11:49:6e:1b:cd:f3:ad:15:2b:c3:a4:de:fa:40:
db:64:ae:ce:3b:7b:a1:d2:cb:d4:bc:06:29:ba:99:
c0:8a:9c:32:7e:2e:e0:7d:ae:80:df:c2:2b:a3:e3:
e9:7a:fd:f9:f9:d8:c9:8d:fe:5e:ab:a8:47:59:73:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:C7:47:0F:DD:05:90:32:E3:B3:98:B6:4E:C6:3E:4F:E7:FE:90
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2d:1e:33:ff:92:f6:29:2c:89:64:24:00:2a:4e:75:ba:38:
2c:fb:37:dd:63:8b:32:4f:b6:00:a7:54:5d:ee:86:ba:45:5e:
36:52:70:e5:14:17:ef:22:e7:14:a6:63:c0:13:6a:2d:9f:dd:
8a:3c:0a:06:6f:e8:cc:49:6c:81:58:26:c8:6f:3a:45:4b:7e:
d8:45:bb:eb:46:70:25:04:91:e0:2e:f2:5d:95:76:21:10:7c:
d7:ad:dd:d8:e2:21:16:cb:b2:33:69:60:81:40:8a:da:23:93:
1c:33:d0:2c:68:67:31:c7:07:6c:d5:9d:e8:11:f1:09:f8:6a:
3b:22:92:15:74:5f:ed:5d:14:fa:6f:b9:02:5e:17:8f:d0:db:
a7:48:70:23:59:05:1d:f3:a9:0f:33:b3:b5:59:50:a9:10:c6:
e3:32:c7:97:ef:81:1f:8f:f7:2c:2f:45:70:e5:3c:58:04:1f:
c7:58:9a:4b:68:c0:52:04:76:72:b7:20:ca:87:3e:d0:9c:de:
46:03:3a:5b:f5:ce:1c:ff:4d:cc:d7:73:f7:61:3d:46:df:91:
57:56:8c:15:6a:b5:8f:8d:91:dc:b3:fd:02:97:74:77:ad:7d:
02:3b:9c:4e:6b:7e:d5:c0:5c:24:ea:20:b7:4a:7c:f3:af:82:
74:29:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:31 2025 by rpki-client