Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: TgwcpHxzn6oKY6Ira1S5ag0LLHg8vBFN5RJhxZRufAk=
Subject key identifier: 48:52:65:9A:21:63:5B:56:4C:82:10:85:55:38:BF:FC:3B:E0:D9:DD
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 01960AC2C39C69E2EA54B6FF0ED576995106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 12F8
Signing time: Sun 06 Apr 2025 11:00:58 +0000
Manifest this update: Sun 06 Apr 2025 11:00:58 +0000
Manifest next update: Mon 07 Apr 2025 11:00:58 +0000
Files and hashes: 1: 6aNeTA5AWlbR4K0Be9a6lB7llkg.roa (hash: pgW6et/1IzAuhXH8bkhY/6wmV9q7QWSHFhTD0FkFq1M=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: 6C/y61Fv38XifRbSGTHA7jkGQxLCF+oKwD37wJqbgow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:c2:c3:9c:69:e2:ea:54:b6:ff:0e:d5:76:99:51:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Apr 6 11:00:58 2025 GMT
Not After : Apr 7 11:00:58 2025 GMT
Subject: CN=4852659a21635b564c8210855538bffc3be0d9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:24:56:04:d2:1e:88:db:3f:4d:f0:75:d6:
6e:c7:1b:17:c9:18:93:1c:dd:1f:f7:45:f3:57:19:
e6:09:fb:01:99:d2:d5:96:b7:de:7a:ed:e6:dd:27:
15:0b:62:2c:13:da:09:6b:af:a8:ab:76:ce:9b:f6:
e5:88:83:8c:8e:d5:9b:d1:4d:55:b3:ba:89:2b:5c:
b3:f6:46:45:44:c8:94:0b:20:30:64:0c:dd:db:fb:
60:e0:20:20:82:3e:cb:62:c3:a1:cb:c0:fa:42:a5:
7b:cd:a4:6e:c8:3e:1d:ed:6e:2b:8b:6a:dc:6e:ac:
c0:50:74:1a:c0:da:71:b1:c3:ab:ba:fd:09:73:34:
ae:ba:b7:42:2d:e5:3b:7d:01:8b:ce:0e:e6:35:08:
a2:b9:94:56:dc:75:ca:02:97:dc:8d:f2:be:02:4b:
2f:19:8f:38:40:dd:1a:9d:2b:3d:9f:e7:c3:88:77:
3d:55:66:33:3e:d0:47:0e:ca:0d:50:b4:17:39:df:
46:ff:40:e4:ee:c9:52:a0:a0:c6:f5:3d:bc:d9:73:
a6:16:50:4a:0e:4d:7f:7d:90:c2:04:90:63:a1:69:
6b:3a:96:4e:37:db:f2:bb:f5:e9:0d:24:cf:f0:00:
2b:05:1a:96:fa:01:49:55:21:f3:2a:bc:1e:e7:18:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:52:65:9A:21:63:5B:56:4C:82:10:85:55:38:BF:FC:3B:E0:D9:DD
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bc:ae:0d:fa:48:87:08:a2:a3:66:2c:5b:d0:10:bc:1c:ee:
65:3f:ef:a2:c0:b8:f9:4c:d6:e2:42:fc:99:9c:83:14:54:42:
38:bb:c9:26:d4:0e:4b:65:9d:f4:39:ae:b5:50:81:df:55:1a:
f7:cf:9f:3c:b1:3e:13:66:50:f5:0f:f1:2d:5e:d6:00:79:b1:
4b:c8:09:87:46:34:85:51:d1:f2:31:f8:5a:d2:63:bd:78:51:
e6:0e:1d:fd:8f:a2:39:42:67:d3:0d:a6:a0:04:81:d3:3a:17:
8a:59:2e:fb:ec:6c:20:d5:98:43:c6:b9:12:ed:7e:a1:a1:75:
9e:05:3f:26:18:e9:1c:36:d7:ff:e7:75:77:62:f0:da:97:8b:
1b:4c:46:86:ab:4c:a7:e0:32:b8:2b:e7:91:39:2e:17:14:ea:
21:fc:74:fc:7e:04:5b:71:e6:31:9d:24:43:47:8a:e1:ea:8b:
3c:3f:10:ef:2e:e4:4d:92:57:ac:8d:3f:be:1b:96:42:60:2e:
86:7d:e7:89:0d:e4:08:a6:16:2f:db:c3:c6:5a:88:95:63:db:
27:ef:b7:07:17:a6:ac:35:a9:04:a7:6b:fc:d5:92:58:a2:c4:
94:78:b0:c8:bb:be:63:18:94:60:2b:4b:fe:fc:6e:cd:6a:8b:
2a:0e:48:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:02:38 2025 by rpki-client