
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier: fhENxXglD7Nu2w1NOET6ZexspQcsnHsYaHBHKekSdUk=
Subject key identifier: 8B:4E:96:72:99:84:11:D7:FD:56:51:DE:65:92:35:63:F4:36:E7:B3
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 0196602923756A672AD9433C8F68007182B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number: 1496
Signing time: Wed 23 Apr 2025 01:00:30 +0000
Manifest this update: Wed 23 Apr 2025 01:00:30 +0000
Manifest next update: Thu 24 Apr 2025 01:00:30 +0000
Files and hashes: 1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=)
2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: W/ZkqwZm/DWOf9H+oJZJlmhi2Z+akvadAoHOBl1Cclc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:29:23:75:6a:67:2a:d9:43:3c:8f:68:00:71:82:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Apr 23 01:00:30 2025 GMT
Not After : Apr 24 01:00:30 2025 GMT
Subject: CN=8b4e9672998411d7fd5651de65923563f436e7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:ec:82:ab:7b:f5:f1:bc:e9:8e:13:53:32:
33:54:85:b4:fc:f4:46:ca:79:a4:20:8f:13:25:83:
91:a9:5f:fe:be:05:a9:e1:f2:48:f4:68:2f:2e:7e:
c1:5e:63:b3:0d:aa:f6:c3:71:5e:62:af:8c:e5:43:
85:3a:e6:87:44:d6:6d:94:61:dc:0b:81:9c:64:b5:
05:61:52:03:a9:93:5e:51:43:a3:e4:57:30:8c:26:
0d:fc:ed:f8:db:b1:90:54:e7:70:29:ab:60:6c:4f:
8c:1f:ce:d9:f4:ca:b3:54:63:fa:5f:fb:a9:df:eb:
7c:9a:c6:c3:f6:3d:20:47:9b:8b:ff:86:83:1e:ab:
84:3c:a2:9c:37:a6:85:89:5f:29:40:4f:0d:6c:de:
05:92:d5:c9:fb:a8:e7:05:0a:11:72:34:a5:37:84:
a0:7f:4b:17:96:3d:c7:0d:e7:da:e0:45:9f:2b:95:
43:d3:e8:8e:5e:7a:1b:8f:95:91:58:69:bd:26:4a:
2e:61:9a:3e:53:6d:d2:ce:aa:18:bc:61:2c:ec:61:
33:61:71:d3:c2:fd:1c:4d:c9:9d:00:43:ae:4c:f8:
3d:f5:de:d8:9a:13:39:cf:e5:5e:a1:a3:27:9c:d9:
ee:fb:47:ae:f4:f3:a8:57:2e:05:da:d7:86:b5:69:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:96:72:99:84:11:D7:FD:56:51:DE:65:92:35:63:F4:36:E7:B3
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d2:39:fc:c0:77:5d:ea:92:fb:46:f3:f9:71:6d:6f:19:39:
db:d8:25:8d:3b:65:ea:55:f9:f3:3c:67:d6:03:ce:62:ca:58:
73:60:fc:14:8b:53:ca:2d:b8:9c:4e:45:f8:c3:4d:66:8a:0e:
43:41:40:bf:22:6b:db:be:3a:3f:48:4e:89:11:bd:5c:8f:2b:
15:7e:b4:2f:cd:80:0d:f4:1f:7a:73:56:71:cb:9a:db:25:00:
c6:1e:48:85:97:87:74:0b:9b:4e:0d:e6:2b:32:65:02:d9:4f:
a0:a6:23:d1:e2:69:a0:1e:a5:fa:08:be:77:fc:c7:05:f5:ff:
79:7f:da:27:64:2f:4c:e9:ea:e6:49:fc:16:a4:e2:21:e7:3d:
ed:57:26:f5:1e:d8:78:a6:40:27:c2:a6:bd:f9:fd:c3:86:fa:
93:81:d0:37:9f:d2:8c:94:d6:9d:3e:2a:68:36:f2:d2:e4:ef:
dd:9e:5a:a4:7f:42:be:55:a9:81:6a:56:dd:83:a2:ce:4f:9b:
00:63:76:80:e9:1b:b8:9c:e5:bd:fc:05:91:1a:2a:e1:05:00:
62:4a:73:2a:ab:82:6d:7d:20:67:31:56:c0:7b:03:2a:e0:aa:
73:d4:4f:22:11:9a:0f:99:f6:9a:5d:d9:e1:98:12:0c:32:ae:
6f:1e:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:50:10 2025 by rpki-client