Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier: U9IlsN4Omyr0fG96u+8/5uA3mpjaMHTzGbJMcJe10QI=
Subject key identifier: D7:F8:75:6C:A3:24:EB:D8:6B:DA:AB:44:DE:02:F3:EB:F4:90:69:C4
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer: /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial: 0196391BD8DC75E0973CEE75095B909FCC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 11:00:48 +0000
Manifest this update: Tue 15 Apr 2025 11:00:48 +0000
Manifest next update: Wed 16 Apr 2025 11:00:48 +0000
Files and hashes: 1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=)
2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: z5jSqr9GOHqQCyi4eIaaViBJg0hmh+h3qXmJiRswZN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:1b:d8:dc:75:e0:97:3c:ee:75:09:5b:90:9f:cc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Validity
Not Before: Apr 15 11:00:48 2025 GMT
Not After : Apr 16 11:00:48 2025 GMT
Subject: CN=d7f8756ca324ebd86bdaab44de02f3ebf49069c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:20:b8:20:0f:71:77:c5:7b:34:a6:a2:73:
1e:1d:e4:b9:d4:01:81:e6:16:51:2b:63:3f:a1:d9:
ff:12:60:a2:76:e9:0f:54:4c:d7:02:b7:77:72:f9:
82:cd:a1:5d:ef:50:10:ca:f0:39:2d:69:b9:cb:36:
af:62:c7:dc:dd:f1:60:19:dd:51:5f:98:7f:da:47:
49:e8:ce:b5:d9:1b:1a:9f:dc:04:1f:06:7f:5d:31:
51:56:ac:05:10:88:b5:01:50:7e:7b:f2:ef:ad:85:
dd:0d:f9:4a:0f:17:ed:6d:01:e3:56:35:3e:68:13:
d9:05:07:72:80:d8:5c:76:94:69:7b:2f:77:fa:52:
c5:58:68:ff:16:81:bd:e1:21:17:36:04:b0:aa:aa:
6f:11:61:f3:27:4d:73:6d:6b:1b:36:51:54:ac:82:
7e:98:a8:2b:01:d0:d2:0c:dc:c4:4f:c0:86:33:6b:
f7:21:77:da:78:a9:10:f6:e7:57:c6:a0:1c:33:84:
0d:1c:d9:a3:57:89:ba:0d:85:65:33:17:d2:89:28:
19:6f:e5:1b:87:ef:31:94:c7:7d:62:4d:47:91:88:
b4:ab:e0:50:8e:6b:58:63:6f:ca:52:2b:4a:47:f1:
89:8f:85:2a:75:19:cb:e5:7d:51:6d:70:37:7a:f2:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F8:75:6C:A3:24:EB:D8:6B:DA:AB:44:DE:02:F3:EB:F4:90:69:C4
X509v3 Authority Key Identifier:
keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:74:c2:a3:c7:52:88:e2:38:9c:43:bb:3f:33:bc:fd:29:
f6:2f:14:ed:63:1c:94:3c:a4:a3:30:d4:54:03:38:f6:04:69:
75:bd:a4:0f:87:9d:27:78:d6:ce:c0:80:77:19:14:37:a1:c3:
02:e7:bf:71:e8:5c:d4:64:01:5c:4e:d0:45:f3:38:5b:33:ba:
a3:fa:74:67:29:2c:07:73:d8:4e:42:8d:bc:16:3d:ee:76:46:
05:64:5c:f6:59:bf:f0:bf:ad:ce:37:19:7a:bf:0f:83:75:52:
c1:e9:97:1d:2a:75:3f:09:63:0d:b7:3b:fe:a2:39:6e:fe:36:
91:5c:6a:a5:3b:97:d7:d8:5f:b9:06:7e:23:15:bc:77:9a:81:
00:d6:f9:11:19:5b:15:96:5d:89:86:9c:e8:49:6b:05:ed:d2:
db:e6:7b:8b:9b:bd:62:7b:42:bf:62:c7:fa:9e:12:6a:48:e5:
84:60:2c:ab:3c:0a:6f:82:64:fe:22:48:44:e5:a5:6f:dc:1a:
37:e3:f8:44:81:ac:a3:6e:ed:4c:5f:56:8c:91:40:24:e9:bd:
33:9b:61:d5:2c:ae:8d:47:53:65:f4:4b:b8:78:56:e8:a8:64:
22:e3:db:9f:d1:be:d2:e9:5b:f0:c8:b1:e6:71:9d:4c:a0:33:
0a:2e:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:21:50 2025 by rpki-client