Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: FQIyYAnRYbzycqB3ZBD6dkJhSEDrg0c9eqTyA0IrNuw=
Subject key identifier: 8B:3D:33:DF:FE:52:86:DF:EF:D5:4B:EE:B1:5B:D4:8F:D5:D4:98:B5
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019606E68F1C3EA2AD3ECE83FD524C20FD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 14D7
Signing time: Sat 05 Apr 2025 17:01:35 +0000
Manifest this update: Sat 05 Apr 2025 17:01:35 +0000
Manifest next update: Sun 06 Apr 2025 17:01:35 +0000
Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: yjTQ49bhcK6hTCAL0GM0pDBk2zxASkEPcctgdrQK1sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:e6:8f:1c:3e:a2:ad:3e:ce:83:fd:52:4c:20:fd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Apr 5 17:01:35 2025 GMT
Not After : Apr 6 17:01:35 2025 GMT
Subject: CN=8b3d33dffe5286dfefd54beeb15bd48fd5d498b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:d8:8e:c7:7c:80:83:95:96:13:7b:02:09:
18:76:4a:a4:d6:4a:ac:a1:2d:3a:9c:34:b7:e3:bc:
7a:a3:e1:b7:e9:f9:a4:40:38:9e:06:fe:ef:5a:c1:
dc:fc:3b:13:d7:ae:e5:b3:ac:f7:ee:01:7b:c5:8d:
2f:80:cc:02:b4:b2:fa:b4:37:fb:0f:28:f2:2e:52:
56:8e:0f:b8:67:17:cd:64:a2:97:f1:b8:28:d6:7a:
1a:61:38:e9:cf:b1:7a:18:fb:c1:a1:d0:8f:68:a2:
20:38:52:30:f5:3a:b6:b2:09:1a:16:ac:ba:02:89:
df:a2:0f:33:b3:3d:1a:6d:65:28:19:76:cd:f2:b6:
69:1c:cb:69:82:c2:9c:fa:cc:5a:9c:59:4f:99:99:
ac:b3:05:d6:06:ab:16:d5:63:fb:3c:e0:a1:31:fb:
74:b5:a3:c2:4f:3d:3e:10:16:53:ce:63:36:a7:08:
1a:50:0a:0f:a8:59:11:af:69:b5:19:bd:95:3d:7e:
e5:3b:c2:d2:ad:56:49:7f:ee:c3:a6:a2:6d:d9:e7:
86:2c:52:8a:91:97:eb:b3:ae:7b:d5:24:e2:94:27:
e9:b2:ed:47:3b:e0:39:16:d7:50:07:ad:0e:c4:f1:
38:4c:6a:eb:be:97:f9:5a:5e:30:17:c6:6e:a3:05:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:33:DF:FE:52:86:DF:EF:D5:4B:EE:B1:5B:D4:8F:D5:D4:98:B5
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:db:10:34:f9:39:4a:69:f6:e2:ee:c7:87:34:9e:0c:0a:e6:
be:41:8e:5f:36:26:30:04:2d:d1:bb:fc:43:0b:33:0d:60:dc:
b8:03:8a:b5:6d:29:73:66:8e:29:8f:81:01:f5:7e:05:5c:52:
8e:ee:bb:59:53:be:5a:84:50:73:68:91:2a:de:a5:b9:c5:10:
02:90:c0:32:e6:4e:ef:12:ee:a9:13:fd:ce:fc:41:b9:b8:c7:
14:1e:d9:35:09:1d:2c:a6:72:71:bc:d1:9e:7f:6b:89:ea:da:
b9:88:0f:9c:a6:88:f1:01:1f:d8:09:f8:de:7a:98:19:b2:be:
37:95:fa:a3:49:e4:17:a8:51:ae:f1:4c:d1:a2:29:d9:c2:80:
9f:39:9a:74:17:08:1d:6d:01:f5:54:c3:14:4f:b3:4f:41:17:
b0:b0:08:7e:3b:19:92:60:42:a1:2d:fd:50:c5:cf:e4:7d:e8:
fe:c5:86:47:b9:d2:2f:1d:ad:97:c4:5d:6a:e5:09:1c:71:ab:
4a:9c:7a:77:7d:10:f1:1e:53:05:23:eb:aa:95:e0:a3:cf:50:
7c:63:5c:b5:cd:37:85:0c:dc:cc:1d:78:2a:08:ef:b6:6b:02:
8f:3f:95:5f:f6:82:ba:af:c4:c8:ee:5d:83:cb:8c:d0:1e:40:
b8:8a:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:30:55 2025 by rpki-client