Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier: osE1m98Vc4QMTvaF1VUd9TV6dWD2/nFp1S1LxnVSI6w=
Subject key identifier: 08:A7:49:15:C5:82:0A:F5:00:46:13:0A:A6:D3:CA:C3:8A:31:80:EC
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial: 019579EC427E550C9C80ED71FE4E34755705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number: 0E0C
Signing time: Sun 09 Mar 2025 08:01:21 +0000
Manifest this update: Sun 09 Mar 2025 08:01:21 +0000
Manifest next update: Mon 10 Mar 2025 08:01:21 +0000
Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=)
2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: YyEHBVU5hUAJlUCVL4qe1awYTgjLrLgrFe1bN6RW1qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:ec:42:7e:55:0c:9c:80:ed:71:fe:4e:34:75:57:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Validity
Not Before: Mar 9 08:01:21 2025 GMT
Not After : Mar 10 08:01:21 2025 GMT
Subject: CN=08a74915c5820af50046130aa6d3cac38a3180ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:31:f0:2c:ed:d5:4b:b1:51:6c:b0:37:f5:
57:17:54:c5:05:a2:c9:98:21:79:a7:7f:44:75:64:
63:c2:f8:a3:df:6d:d0:78:ab:b0:a2:7f:01:f0:58:
26:14:75:b5:08:6f:71:d0:c2:a1:3a:5b:d1:fa:18:
06:35:c6:a0:f1:56:24:ff:38:6a:98:58:b6:36:2f:
80:00:bb:38:22:c1:0c:bf:5e:4c:46:ec:c8:0b:d9:
71:e7:98:c6:1f:a1:77:1b:f5:cd:98:93:ac:32:66:
eb:cd:a2:4a:8d:48:88:7c:81:8e:4f:9d:6b:85:75:
93:ea:39:bb:3b:07:63:87:28:9b:b1:62:82:c0:24:
7d:11:cc:4c:b0:af:14:ae:8a:d2:f6:5b:6c:c3:10:
2a:3e:af:b0:8d:74:f7:26:5c:bd:eb:b2:67:35:ad:
12:93:fa:9a:11:c1:a8:fe:4d:50:56:77:fa:f0:b1:
a1:ad:65:3f:ef:1c:7e:74:eb:5b:b0:2a:84:4b:36:
39:4e:97:12:13:fe:2a:ef:ee:88:6b:0a:41:7e:0c:
91:f9:72:bd:25:51:84:66:44:50:d7:ac:c9:95:69:
87:4f:f8:6f:c6:2d:ff:75:a5:91:90:dc:e1:2d:88:
1d:12:08:be:ca:65:b0:31:06:d5:07:db:8a:3f:80:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:49:15:C5:82:0A:F5:00:46:13:0A:A6:D3:CA:C3:8A:31:80:EC
X509v3 Authority Key Identifier:
keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ec:41:a0:6e:09:4f:b8:b9:68:f0:d0:bf:d6:7a:3e:a2:54:
69:1a:8e:7a:72:b3:36:51:0f:7e:72:26:5d:da:63:a5:14:18:
de:97:01:06:3c:85:80:3a:c3:4b:56:97:20:5c:c2:48:11:05:
f3:50:23:47:82:4f:31:53:5c:19:47:e6:d8:30:5e:b0:67:01:
80:59:57:e8:ea:9d:7d:9a:78:e8:18:b2:14:e3:51:b8:3c:d1:
ad:06:61:fc:06:48:18:e7:8f:1a:9d:91:97:b8:5d:b8:1f:35:
a5:5c:c9:74:2d:e6:60:68:b5:4b:48:fc:aa:68:02:94:26:a4:
24:05:33:68:09:87:10:5d:f8:46:32:55:1c:b5:30:4d:67:ef:
86:b6:ec:8e:b6:74:46:58:16:cb:71:10:50:ef:bf:b3:c0:64:
f8:73:c5:ac:c6:64:ff:82:27:77:98:ee:dd:0a:67:cd:95:d7:
50:dc:a5:ef:95:41:e5:fb:1e:b7:4d:01:17:5c:84:e5:3e:1f:
43:50:1a:bd:40:85:34:5e:13:cb:49:23:12:1e:fc:b1:84:d1:
44:e6:4b:a7:a6:4e:16:e8:e2:a5:38:a1:6e:2a:2e:f6:4c:22:
37:92:3f:e5:08:32:90:24:d2:11:99:58:49:f0:dc:3c:3e:ce:
99:6d:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:43:44 2025 by rpki-client