Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: yEdPztnbh7sfGZPu46qarDcimAvd4O3IsR4lrUXMHbA=
Subject key identifier: 88:5B:F4:C5:9D:EA:17:A9:CF:9B:4D:51:77:3E:F2:56:F8:86:8C:BD
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 0196545BDDCB7BF92FBE709655E4605C0317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 0EF6
Signing time: Sun 20 Apr 2025 18:00:28 +0000
Manifest this update: Sun 20 Apr 2025 18:00:28 +0000
Manifest next update: Mon 21 Apr 2025 18:00:28 +0000
Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: ENmEqM0BgjaQou5U+dVo21rqoHXRC12+uzzCTvDX0p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:dd:cb:7b:f9:2f:be:70:96:55:e4:60:5c:03:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Apr 20 18:00:28 2025 GMT
Not After : Apr 21 18:00:28 2025 GMT
Subject: CN=885bf4c59dea17a9cf9b4d51773ef256f8868cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:c9:8e:d4:49:30:a2:83:ce:b7:46:fc:b8:
76:cc:b5:7a:41:b9:af:5b:90:31:cb:d6:94:56:eb:
79:ba:6b:9e:06:22:96:54:bc:53:7a:57:b4:32:64:
f0:8d:a3:0e:82:7e:99:95:a7:7b:1a:1f:78:69:1d:
b5:88:42:5c:13:5c:95:20:6e:34:34:ba:2e:5a:ae:
ae:b0:c8:da:0f:e3:ec:7a:0d:fc:ec:ea:c7:43:ab:
be:6f:f8:47:0d:0a:b9:68:3e:12:3b:db:44:a2:39:
e3:12:1e:a7:51:ca:48:9d:83:65:3f:e2:0a:ba:72:
cc:d1:2f:7a:23:15:62:47:9f:84:73:10:09:95:4c:
89:08:05:c5:5f:fa:73:8b:dc:b8:75:c5:bf:d6:fc:
5d:cf:9c:00:e1:5b:6c:b5:39:33:6b:3f:43:ca:7d:
05:69:72:d5:32:10:b1:e3:0f:c7:45:e4:fa:ab:dd:
33:8a:89:47:5f:d8:05:5b:fe:5b:c1:f8:d0:fd:e3:
99:98:46:5f:c1:a9:00:39:67:02:2a:87:99:b5:be:
48:bb:39:f0:f6:53:c8:9f:43:4d:18:b8:ea:c2:9a:
17:bb:a0:da:f3:75:c2:1b:4f:69:2f:f6:74:42:44:
1c:12:4c:9b:a4:e4:e3:5d:76:0a:0d:56:b3:12:b5:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5B:F4:C5:9D:EA:17:A9:CF:9B:4D:51:77:3E:F2:56:F8:86:8C:BD
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f4:73:05:77:db:cc:50:91:b2:49:b3:14:23:55:d6:83:81:
08:2a:8c:4d:a7:45:9f:88:0b:54:49:88:e7:cc:57:ad:06:3c:
f6:5b:42:6b:79:2b:10:d1:0d:47:aa:d3:92:bc:81:01:ff:5b:
2b:40:9d:cf:15:6e:8a:9e:c6:ea:2f:c8:38:7f:38:40:fe:a7:
54:d4:8f:c6:07:e3:fd:8b:e7:b7:54:b6:0e:61:f8:6e:43:a6:
c7:da:82:f6:52:62:70:2d:69:9e:7f:62:5f:5e:61:fc:f2:36:
b8:8f:76:15:81:09:48:2c:5c:98:0c:59:e1:c6:be:43:58:f6:
39:5d:71:5a:37:16:5b:f9:6e:d9:72:d4:f0:a1:72:d0:d0:5a:
61:e0:2a:a5:85:c1:f2:1f:f1:85:3e:7b:da:27:f2:8e:04:81:
91:8f:19:79:0e:3d:e8:53:24:f7:b0:75:74:29:c5:b3:29:c9:
c5:bf:15:5d:7d:a6:6f:27:d2:a7:07:59:64:ae:2d:e0:ec:77:
e5:5f:7e:6f:54:da:73:bf:aa:0f:5b:4c:c3:6d:8b:ef:51:0b:
75:df:2e:69:59:64:ae:07:a6:6a:31:4e:8d:a1:c3:f4:da:b3:
f6:34:67:b5:5d:64:00:6d:ac:a9:bf:ab:bc:ed:33:c5:2c:75:
4e:5d:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:44 2025 by rpki-client