Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: aaZe+wJEfZxt4SwqwfH+W2XbYGx6TjgediePCfOcpxk=
Subject key identifier: C1:66:7D:F7:FC:49:22:C7:29:8B:CB:8B:69:DA:90:31:DA:40:6E:DA
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 019651C8DC93557C0C1AE472B83531AF1174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 01CA
Signing time: Sun 20 Apr 2025 06:00:40 +0000
Manifest this update: Sun 20 Apr 2025 06:00:40 +0000
Manifest next update: Mon 21 Apr 2025 06:00:40 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: BZvwSgANFDulvdP+zg7SIXgAxt7ppCDM18n8jeBEk6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:dc:93:55:7c:0c:1a:e4:72:b8:35:31:af:11:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Apr 20 06:00:40 2025 GMT
Not After : Apr 21 06:00:40 2025 GMT
Subject: CN=c1667df7fc4922c7298bcb8b69da9031da406eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0b:91:d6:5a:1b:02:44:b7:84:95:c2:6c:07:
9b:aa:35:81:3d:62:f7:f3:30:c1:be:0d:fc:9b:fb:
fc:f2:4b:cf:bf:60:35:d8:22:a7:9c:2f:0f:f6:ab:
7d:27:44:85:11:3c:17:d4:a3:c7:29:0f:36:a9:71:
37:44:91:cf:85:a5:37:3a:6f:56:50:01:33:c1:2a:
d3:bc:93:b1:01:20:3b:da:42:0f:87:08:81:ff:ae:
75:c5:18:eb:d4:9f:fe:b4:74:5e:1d:54:ed:f8:ef:
9d:ff:07:aa:2f:49:e0:19:c2:dc:2d:2a:8a:f5:26:
47:4f:b7:5c:ee:dc:29:19:e8:76:da:99:d1:c5:ba:
6e:54:da:ca:92:89:18:5f:cb:4b:cd:6d:ed:71:a1:
d9:4a:83:9a:60:38:65:aa:b0:e0:cf:ed:4d:b9:22:
ee:bd:eb:7b:e6:df:3f:ca:48:aa:69:d8:84:f7:12:
19:fd:d1:0e:1e:ca:ad:d4:0a:2b:8e:1e:ee:d2:07:
f2:b7:80:88:77:2a:2f:a9:cc:c1:78:8b:c0:fb:6a:
37:6f:11:3a:a5:41:f0:c5:a8:9d:48:a4:b4:4f:40:
81:27:96:bf:f9:d3:c3:f2:6e:0d:69:72:07:ea:97:
df:d1:03:07:8b:73:d9:f7:5c:ad:7e:e8:fe:af:19:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:7D:F7:FC:49:22:C7:29:8B:CB:8B:69:DA:90:31:DA:40:6E:DA
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:20:0a:06:c6:3a:5d:80:07:0d:f9:b1:51:30:48:8a:c7:64:
0e:b4:54:09:86:93:90:5e:1e:8d:c7:f0:59:16:2f:c5:4e:55:
94:1a:cd:fa:15:50:51:1b:ae:df:57:8b:f7:05:8d:6b:75:dd:
7d:60:ee:e5:22:b4:4f:03:4b:41:79:18:6e:0f:44:f5:91:33:
33:6b:d9:b3:fa:31:6c:d4:11:6b:50:e1:18:61:2a:50:c1:6c:
d6:ad:92:79:ba:10:2d:ec:3e:14:c1:7d:90:f4:a3:10:04:1f:
85:ee:03:22:a7:a2:61:f6:ad:aa:8f:99:23:bf:16:9f:59:0c:
97:9e:65:05:51:a1:7d:c9:bf:3a:55:15:98:21:1e:aa:d2:38:
e0:c9:bc:9c:85:0c:95:a1:3e:1d:71:0b:33:43:e8:aa:8e:9e:
17:e0:cf:d1:a4:a3:74:90:8a:80:d3:ef:a8:0f:a1:63:d2:dd:
18:b2:99:c5:35:30:e3:af:79:26:7b:af:62:46:ec:7b:c6:ad:
91:07:0c:9e:dd:19:7f:e4:d1:a7:aa:7c:fd:34:35:f0:0c:45:
a5:1e:99:77:ca:7d:e9:11:bf:4b:04:3a:04:17:a8:74:e6:99:
2c:d4:0a:1c:4a:8f:3e:5b:46:3a:ff:90:90:7e:eb:4d:e8:03:
81:3a:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:33 2025 by rpki-client