Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier: grFd2QICctovrgMLXqSJyGOwqubVdxHd+vovLbzv8WQ=
Subject key identifier: 8C:BC:C6:B7:FE:9E:44:14:D7:E4:0E:9C:AD:78:BD:EE:68:03:D7:41
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 0196041D0B6E052002F3D26BA9014CE4AFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number: 0315
Signing time: Sat 05 Apr 2025 04:02:14 +0000
Manifest this update: Sat 05 Apr 2025 04:02:14 +0000
Manifest next update: Sun 06 Apr 2025 04:02:14 +0000
Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=)
2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: nJd4XucnI1CnHDXk+aJ8QiAns2g7cE2whTjZd9dSwf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:1d:0b:6e:05:20:02:f3:d2:6b:a9:01:4c:e4:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Apr 5 04:02:14 2025 GMT
Not After : Apr 6 04:02:14 2025 GMT
Subject: CN=8cbcc6b7fe9e4414d7e40e9cad78bdee6803d741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:68:92:f8:2b:db:ab:73:3e:22:08:7e:95:
53:7d:6c:1b:39:1e:4e:15:f0:aa:26:4c:7d:e1:d0:
14:c8:8b:0d:f3:a8:8e:fa:b7:1d:a4:bb:c9:6c:59:
ec:c4:90:7a:12:66:b6:bb:53:3d:4d:65:86:35:83:
b7:df:40:1a:e3:c2:f4:43:63:9b:2d:61:bb:f8:d5:
8b:19:bd:25:b1:0f:e0:63:ec:a8:58:91:5e:9b:14:
a3:ee:e9:57:67:91:90:9f:c7:49:fb:70:50:65:5f:
99:ad:36:7b:80:67:65:cc:c1:32:d7:7e:e8:0a:aa:
f6:bc:88:6a:cd:d5:4b:f3:46:ac:e9:5d:0e:a9:e7:
cb:c4:2b:b5:65:fe:6c:ff:53:b4:fb:72:27:ff:87:
ce:85:8b:72:bd:96:97:31:e8:bc:75:70:a5:b6:88:
9b:dd:a0:5e:a2:0f:4f:66:61:20:9b:45:09:65:52:
b2:e1:24:0e:d8:b7:b6:d6:62:9d:c2:6b:99:5a:d3:
ff:59:e7:7c:b8:ba:34:42:7f:77:dd:7c:ad:7a:7b:
4c:2c:38:36:39:39:3c:12:01:e1:59:05:58:fe:fb:
04:b3:fd:7b:a3:1f:a0:ca:4e:72:ee:7d:00:24:77:
77:2a:05:59:e6:a8:00:04:82:4a:c3:1b:22:12:2b:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BC:C6:B7:FE:9E:44:14:D7:E4:0E:9C:AD:78:BD:EE:68:03:D7:41
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:13:f3:43:c7:14:d2:4f:c4:e4:bf:65:14:d9:9a:c3:e0:91:
d6:05:62:cc:53:a0:d1:ac:c3:28:44:b9:bb:3f:6e:21:85:93:
37:09:61:f2:cc:44:c4:c2:96:6e:da:46:de:d4:c8:0b:f8:f4:
99:d2:79:95:23:cf:35:fd:c7:e6:4f:47:a3:75:3f:68:98:69:
4f:50:a0:58:94:30:a3:6f:70:9f:7f:c7:94:fc:03:f9:7a:23:
74:5c:fb:1b:23:fc:19:8d:f1:69:9c:a0:fc:46:78:90:7e:c4:
7a:aa:d1:6c:2b:e2:28:31:04:e2:5f:8e:54:09:fc:73:23:d6:
e3:c6:f4:e3:89:73:49:63:af:36:a5:34:8c:0b:b8:c7:ae:e9:
3a:a1:6d:ae:c5:25:06:50:88:9f:16:98:27:d1:7f:37:79:45:
04:64:4e:ca:77:21:c9:a5:6d:ae:e2:b3:d6:6a:5d:cd:4a:69:
06:17:f5:99:92:c5:03:fe:db:0f:34:f4:20:1f:7b:c7:f8:d5:
34:9a:cc:f4:e6:e9:09:67:dc:d9:7d:22:41:ef:25:f4:4c:fa:
0f:3a:d9:59:91:51:5c:62:32:cb:e9:37:01:1d:9d:8f:93:2c:
a4:f4:e9:e0:34:14:dc:da:da:4b:c4:80:ff:73:26:c5:34:c2:
87:cc:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:13 2025 by rpki-client