Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: i2TBfTRTvnGi+mPQnljYnlsR3+ojbb1qLpytBoxb7WA=
Subject key identifier: E9:26:18:A8:9A:BF:EC:AF:44:58:BA:5B:9A:60:A0:99:AF:02:C9:A8
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019653807706E1C62650B71FAC4AC5770F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1159
Signing time: Sun 20 Apr 2025 14:00:50 +0000
Manifest this update: Sun 20 Apr 2025 14:00:50 +0000
Manifest next update: Mon 21 Apr 2025 14:00:50 +0000
Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: Bp8l624+uiupxjMSyJVNIHxW6VSvzUG0z3lUEdBHs90=)
3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:77:06:e1:c6:26:50:b7:1f:ac:4a:c5:77:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Apr 20 14:00:50 2025 GMT
Not After : Apr 21 14:00:50 2025 GMT
Subject: CN=e92618a89abfecaf4458ba5b9a60a099af02c9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:05:6e:66:4e:dd:c3:bb:d4:95:63:6b:e7:
03:86:d6:9a:4b:7a:30:ee:58:67:7c:97:d7:85:18:
bb:89:59:d5:d3:dd:4a:50:f7:7d:b1:02:fc:ea:11:
5d:bc:64:1b:a4:f6:b1:27:70:06:04:30:7f:f8:fb:
39:1f:12:da:63:09:13:6a:29:a7:1b:69:8c:57:77:
c3:00:8d:38:5e:12:ca:90:fa:57:f1:16:da:af:1b:
2e:17:f3:2a:33:f3:70:c4:ae:6b:dc:4e:1e:71:b2:
bf:ed:5e:8d:47:ad:d5:ca:2d:b6:7e:1c:d8:44:99:
8e:25:bb:1a:13:f7:ab:51:38:01:2a:1c:93:80:bc:
ed:60:c0:d5:f6:1a:a9:a8:bc:5c:59:7b:90:91:49:
1d:db:be:d9:cc:57:6e:45:9f:8b:69:5c:5c:e8:7d:
24:4b:67:03:4b:e2:02:5e:d0:4d:f6:b5:18:32:a5:
3c:27:d2:c4:1d:b5:11:88:40:93:06:fd:6a:da:d2:
95:4a:91:67:56:0e:26:9c:e9:c8:0c:d7:fd:ac:40:
f8:8b:96:c2:72:6f:ba:f8:00:58:e6:66:dc:e6:5f:
56:c9:8c:d1:60:12:c4:fc:62:07:24:27:6b:58:b2:
05:30:d8:ef:6c:95:55:95:7c:5b:a4:17:71:72:7d:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:26:18:A8:9A:BF:EC:AF:44:58:BA:5B:9A:60:A0:99:AF:02:C9:A8
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:00:07:3c:57:0f:81:c5:a6:cd:ba:3d:56:e5:f8:b1:d8:
1b:95:38:1e:f7:be:d8:ad:0f:cb:2d:5b:c0:b0:6d:9a:be:eb:
07:8d:5a:a8:45:57:26:65:a6:54:17:6c:4a:6d:2e:ee:f6:65:
d4:be:27:bc:67:84:4d:9d:02:11:dd:93:66:84:be:ec:ec:30:
72:ec:38:4e:4e:f7:fe:dd:47:32:09:2b:10:ce:fa:fe:56:ce:
82:ff:44:77:24:b0:00:28:be:56:6b:23:af:15:c4:ff:09:74:
52:c5:7c:1e:63:29:56:6e:1d:0d:14:25:c9:c6:64:41:99:19:
7d:0e:0f:ab:75:d2:a7:15:75:50:94:8c:a7:76:a2:35:d5:98:
94:d6:fa:8f:e5:00:d5:74:d0:17:eb:15:ec:64:04:f4:6d:ad:
d9:50:2e:7f:01:f2:9a:a5:db:7c:44:1e:b4:06:b0:87:c8:3c:
3f:ff:bf:5a:f5:6c:c8:51:7a:d4:fe:49:3a:5b:06:23:09:0c:
3a:bf:e2:79:d9:e4:c9:af:43:2d:3f:26:f7:50:06:7c:ac:ab:
3c:b1:17:4d:93:6a:33:5d:ea:ec:bd:41:5e:83:31:67:a1:77:
8b:31:42:3b:19:f2:a6:51:93:f7:e8:4d:c0:2d:d8:42:4d:66:
a1:ee:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:33:10 2025 by rpki-client