Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File: VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier: fGszHU67OcaeMxWEsrj77vYDCyRL2623zeXAeAWkt8g=
Subject key identifier: 8D:78:6A:BE:59:29:DC:5B:AF:4A:D9:BB:D8:02:2B:26:77:6B:06:BD
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 0196523704CE8D7C458A9D00B0AF0AE33AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number: 02C2
Signing time: Sun 20 Apr 2025 08:00:59 +0000
Manifest this update: Sun 20 Apr 2025 08:00:59 +0000
Manifest next update: Mon 21 Apr 2025 08:00:59 +0000
Files and hashes: 1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: N23aixvz3SVqm6OaK2fx3CPf7J/1YaME7PDzNJsNxcw=)
2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:04:ce:8d:7c:45:8a:9d:00:b0:af:0a:e3:3a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Apr 20 08:00:59 2025 GMT
Not After : Apr 21 08:00:59 2025 GMT
Subject: CN=8d786abe5929dc5baf4ad9bbd8022b26776b06bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:a7:7c:71:86:77:0b:0e:e0:09:a8:55:a5:
b5:dd:23:a0:33:ef:0f:ff:8c:ab:02:ca:5e:87:a7:
52:f7:b2:93:b6:ee:a3:a0:4a:4f:89:46:b9:36:61:
ea:fb:07:76:f8:57:61:e6:4a:56:0e:10:c2:a2:72:
47:29:cc:6e:32:39:4d:e2:08:ae:45:9a:9a:52:c2:
df:e7:67:d0:2d:9e:d7:86:a4:8f:eb:2d:90:79:0a:
fc:e4:56:54:49:9d:1e:f4:5c:bd:24:5d:61:70:76:
e8:31:0d:12:d9:26:07:b1:31:b6:92:03:6c:97:ba:
6a:ed:e5:ad:27:96:d7:54:29:4f:d2:94:29:19:a9:
04:ef:73:50:ab:2b:2a:ac:52:fd:b1:1c:54:cb:56:
92:6b:7c:67:52:50:d4:81:cf:3f:dc:41:7a:37:a6:
b3:e6:ae:b2:07:88:f0:b7:3f:04:06:99:2c:2f:9f:
17:73:bc:df:c3:f4:9f:c8:96:8a:a5:fd:96:b3:24:
aa:ab:a3:2a:7d:af:df:54:89:3d:da:bd:44:4d:f3:
c5:62:00:1f:07:b4:da:cd:4d:1e:1b:b2:23:2d:95:
50:14:bc:d4:a3:53:30:97:4b:fe:05:19:7a:af:9f:
60:fe:94:e8:15:1f:93:4d:cf:c6:6d:50:66:b7:4f:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:78:6A:BE:59:29:DC:5B:AF:4A:D9:BB:D8:02:2B:26:77:6B:06:BD
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:12:fc:5a:f7:73:4d:ef:2a:1e:93:db:df:0c:da:b7:bd:82:
93:da:58:6d:18:bf:6b:91:d9:23:4b:e8:0c:95:d3:86:00:58:
be:ac:7f:92:ff:b6:53:72:5d:d6:39:9a:34:2d:bf:0e:c7:bf:
da:81:a6:15:ca:84:01:57:66:7a:fe:44:fe:73:7f:ce:12:1d:
db:bd:11:e1:f7:1a:4a:90:0c:56:a5:a6:47:67:ad:2f:16:92:
42:5c:d8:a3:a5:90:50:64:5f:bd:76:09:be:5c:eb:d5:37:89:
0a:1e:cd:b4:f6:2b:12:52:60:19:06:df:53:68:f3:80:7a:6b:
5c:0e:ad:0f:47:ef:92:f4:ce:eb:b7:c4:2c:15:5f:c3:93:df:
09:6b:d1:8d:c4:fe:35:61:1f:22:f6:ed:26:5d:b9:86:10:2b:
ec:7a:0f:c0:36:e1:c7:0c:31:bb:49:ec:fc:cf:98:e0:62:65:
30:aa:f8:86:5e:6d:7a:f4:8d:0d:87:a8:74:55:66:b4:f5:ef:
62:6c:11:a5:05:0c:e3:d3:0e:1d:3d:6c:db:89:8c:d2:15:a3:
a8:dd:7d:5a:95:68:50:cc:04:65:f2:35:30:87:b7:3d:bb:96:
a5:f5:f5:f3:3a:f7:9c:a4:60:8c:e2:0e:62:9f:94:1a:ea:00:
4e:34:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:07 2025 by rpki-client