Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: 6iRxgf9oIYyZXFQK31pErwBTOfTvBbcLhf3UDeIXsrI=
Subject key identifier: 20:66:E7:2D:D8:58:B3:B3:F8:6D:69:24:AD:A6:AD:02:D1:0C:CC:76
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 01964FDAC21510500FC56EDF945EF4BAB1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0BC3
Signing time: Sat 19 Apr 2025 21:00:58 +0000
Manifest this update: Sat 19 Apr 2025 21:00:58 +0000
Manifest next update: Sun 20 Apr 2025 21:00:58 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: JEREbuUqEU0W9gqiJ9LYJWS2+pZuFzC1biocK0TXe/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:c2:15:10:50:0f:c5:6e:df:94:5e:f4:ba:b1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Apr 19 21:00:58 2025 GMT
Not After : Apr 20 21:00:58 2025 GMT
Subject: CN=2066e72dd858b3b3f86d6924ada6ad02d10ccc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:14:53:ca:ab:74:39:53:53:b9:87:cc:68:
33:11:d8:6b:ec:85:13:be:1f:f3:99:e0:4a:e5:9e:
2d:83:0b:75:b5:61:61:00:2d:18:ff:1c:58:01:8b:
60:fe:67:15:a8:1a:99:c1:90:75:f1:19:78:af:bb:
48:9e:2c:57:79:fd:5d:0f:96:a3:eb:93:60:34:59:
c2:cd:dc:40:10:46:d3:b2:b2:ed:a9:8e:95:79:0b:
2b:65:be:75:00:8c:f1:e7:12:09:29:cf:09:89:52:
e9:24:8a:14:ae:6b:fc:5d:c8:bf:a0:a6:3c:a1:f3:
c5:fd:48:e1:97:cb:30:b7:9b:b9:d9:a6:6d:98:e4:
f2:61:47:1a:93:7e:18:14:90:58:3b:fc:c5:48:11:
3b:2b:0d:f1:8e:f2:ae:f5:7e:dd:0e:1d:7e:2a:54:
c1:97:d4:b1:ba:c9:36:6f:19:55:52:95:cf:1e:25:
9c:7b:08:aa:f7:df:01:23:94:a3:ef:ba:9b:f0:22:
30:7d:24:39:45:88:90:4e:a4:bf:a7:14:34:8f:6b:
b0:d7:f5:31:10:df:e4:7a:65:21:6d:3c:bb:59:58:
9c:42:0e:ed:c8:07:58:2c:42:a4:42:a5:8c:b8:5d:
f8:10:c2:c1:64:d8:9e:34:fa:a7:b2:1e:6f:d2:b1:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:E7:2D:D8:58:B3:B3:F8:6D:69:24:AD:A6:AD:02:D1:0C:CC:76
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:11:89:4f:99:c9:79:5c:90:8c:75:cd:22:22:e0:2f:16:b0:
af:32:9e:5d:2e:d0:cc:f4:81:79:0e:10:cd:56:56:92:5f:18:
25:31:d7:9a:79:58:0f:03:01:aa:4b:d1:75:9d:40:1f:ea:d8:
e1:ff:57:d0:a6:6e:0b:76:79:43:ed:d2:3d:6d:62:a6:5a:02:
c6:9f:d6:5d:4e:8d:dd:3f:25:97:c8:70:11:b2:d9:57:44:28:
a1:36:4f:c0:65:c5:be:0d:f2:ff:f4:10:b6:69:2a:6c:45:6d:
ee:32:19:6f:70:de:16:60:9f:f5:df:e3:d6:ca:0a:95:16:a0:
c2:45:b4:da:ac:05:18:83:ba:69:a9:97:93:47:ac:63:95:13:
79:4e:77:4c:ad:c2:29:88:55:e8:36:56:20:31:e8:16:99:7c:
b0:8a:58:10:ca:8f:bf:3d:77:19:b5:e0:39:b7:46:31:21:47:
2e:3c:00:cf:c7:d2:22:e9:92:11:70:c7:77:35:8b:44:f7:f3:
5a:f5:5a:3b:33:8a:58:47:1c:84:72:3d:6a:f4:14:a3:e7:dc:
bf:36:01:c4:1c:22:e2:ac:a7:6c:7a:de:ab:2a:9e:4e:fe:be:
ec:56:eb:16:6a:d1:22:4b:bf:f0:00:5a:5d:62:47:e5:7d:66:
ab:f2:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:49 2025 by rpki-client