Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: J5HilnurSN3GGM+567ojrYNvdgbFAtzpOaLua2tuEJc=
Subject key identifier: 84:8F:D6:D5:4A:76:2D:EF:63:96:70:E3:E3:96:74:FF:41:56:FD:76
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 01964C6B5CFBFFE3BF63953C8656C2A8B0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0963
Signing time: Sat 19 Apr 2025 05:00:26 +0000
Manifest this update: Sat 19 Apr 2025 05:00:26 +0000
Manifest next update: Sun 20 Apr 2025 05:00:26 +0000
Files and hashes: 1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: Txjr9FeL82l578EeGC+Cft2UjTnLl9ql2FW4UnGeJaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:5c:fb:ff:e3:bf:63:95:3c:86:56:c2:a8:b0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Apr 19 05:00:26 2025 GMT
Not After : Apr 20 05:00:26 2025 GMT
Subject: CN=848fd6d54a762def639670e3e39674ff4156fd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:65:11:91:56:a1:f9:6e:0b:16:8f:7c:45:
ca:a4:04:55:22:60:48:b3:14:6a:0e:79:ad:f5:da:
c8:85:f6:af:f8:9b:77:ef:2b:5d:15:b7:ec:a4:02:
af:25:6c:a8:b6:69:61:ce:5c:85:b9:6f:78:39:1b:
7d:8f:f4:37:ef:0d:68:90:9b:eb:79:e0:e3:6b:ff:
8d:21:e7:46:8e:88:41:82:77:b8:d8:c9:35:d0:24:
74:0b:cf:91:b3:52:ab:ef:97:fa:ac:cc:fe:dd:f9:
99:63:d6:4d:4e:75:99:d8:cf:8f:e7:28:2c:f8:56:
a6:6a:7c:cb:cb:b2:df:f6:f4:e3:6a:21:21:79:3c:
65:26:34:12:a5:0a:72:93:5e:24:62:8b:26:47:81:
c4:eb:3b:73:ad:94:7d:74:7d:c5:91:0d:95:17:4b:
c0:1d:bd:1e:b9:00:b2:83:a4:bc:cb:64:76:4d:76:
8d:47:2d:49:f2:26:fe:e0:8d:c3:3c:7a:40:33:4a:
7b:5c:bb:82:b9:38:bb:ab:0e:f0:56:71:47:b9:f3:
86:8e:e7:8f:49:dd:cb:f4:56:78:09:bc:a9:80:b5:
57:20:91:cb:15:5a:27:e4:59:46:80:06:4c:70:d6:
2e:41:7c:df:23:f1:17:fb:41:53:a2:a2:80:4f:fe:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:D6:D5:4A:76:2D:EF:63:96:70:E3:E3:96:74:FF:41:56:FD:76
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:12:bb:a8:ec:ac:84:aa:b6:c9:05:c6:03:81:de:4c:89:ab:
28:e4:4f:56:34:95:17:30:56:fc:34:a1:3f:10:ad:79:23:43:
0a:5a:5d:67:e0:f5:fd:a5:56:2f:fe:10:0a:1b:35:0a:51:eb:
41:52:72:f1:4f:e9:0c:d6:74:b8:c2:c9:35:c8:b0:cb:de:da:
01:c8:94:a0:43:c6:89:ef:51:ec:18:44:95:af:6c:bd:ca:e7:
7f:47:72:90:36:77:ff:cc:4e:82:7a:54:b8:4b:65:74:ad:24:
a3:85:a2:aa:09:2c:d7:b2:f2:d0:59:2c:49:8d:9e:58:01:41:
15:41:71:56:03:bf:6e:c4:b9:0e:69:77:58:03:f2:15:69:c0:
85:20:91:ee:c9:2f:61:83:bf:c8:62:5a:56:ba:b6:81:44:eb:
dc:94:e9:23:9e:38:24:6a:a2:70:b8:18:98:78:42:99:bd:c2:
a0:6f:ee:71:86:52:34:ee:e3:b7:9f:2e:94:14:f1:d1:f5:56:
32:d1:16:92:51:94:ac:55:b5:aa:b9:04:03:70:4f:0a:e2:4b:
ee:43:a6:37:79:b3:38:23:d3:c2:46:98:20:9f:b2:eb:3d:81:
3b:26:7e:2e:cf:6d:5f:cd:6b:82:ed:ad:b2:bd:ef:75:f6:3e:
15:37:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:56 2025 by rpki-client