Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: mJ9OhVrbMf1bBn0PlYkCiStxuS9FuRc2J32GQqW/qUc=
Subject key identifier: 23:B1:3E:A4:56:71:22:4E:4B:9D:0B:49:05:35:31:64:BA:68:BB:85
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 0196409E3FD17249DD31C42E55408833EC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 1449
Signing time: Wed 16 Apr 2025 22:00:34 +0000
Manifest this update: Wed 16 Apr 2025 22:00:34 +0000
Manifest next update: Thu 17 Apr 2025 22:00:34 +0000
Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: 5ndEz14nOuYMeta/rhrM+8L1XLjg37oxVW5D/1G5r4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:3f:d1:72:49:dd:31:c4:2e:55:40:88:33:ec:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Apr 16 22:00:34 2025 GMT
Not After : Apr 17 22:00:34 2025 GMT
Subject: CN=23b13ea45671224e4b9d0b4905353164ba68bb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:be:64:0d:52:c8:b3:dd:89:c5:90:84:e8:
99:66:26:7b:e4:e6:b9:91:8d:68:c7:3e:c2:2b:ba:
3a:65:4e:38:09:b7:52:0d:37:70:27:ca:01:db:24:
5a:a8:1f:03:b4:9e:70:4f:d4:59:42:dc:2b:f0:7d:
b5:e8:fe:df:f9:e8:a1:f7:9b:bd:e4:a0:b2:03:76:
87:e5:c0:10:08:84:a0:2d:ba:69:94:fb:66:48:83:
0d:a9:d3:7d:13:c7:f6:79:e5:ac:9d:53:5f:70:9c:
46:36:ec:99:f7:fa:75:c9:b2:a4:11:ae:25:96:5c:
09:03:d9:25:9d:51:d9:ac:62:b7:23:85:f7:ed:3f:
14:9b:3f:74:86:e2:15:9c:ca:e0:67:f2:e7:2a:43:
de:3c:c7:0b:75:a4:03:fb:23:4d:ce:67:e3:af:70:
ef:08:16:77:11:5a:14:ae:b7:05:ee:42:e1:72:c0:
3b:98:2a:7d:f7:cc:73:45:ec:5e:0c:7f:33:b2:88:
35:d4:c5:fe:9c:98:e1:42:06:14:a2:61:f3:c9:8e:
f9:a1:f3:5d:b4:c6:5b:70:61:5c:fd:64:ed:a2:2c:
49:87:c9:21:78:26:47:40:1a:c0:fc:0c:b3:80:d2:
8c:ea:9a:b3:0a:2f:d8:95:2f:14:4e:6e:68:18:76:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:3E:A4:56:71:22:4E:4B:9D:0B:49:05:35:31:64:BA:68:BB:85
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:72:e0:94:2c:00:ee:96:68:47:21:d4:2d:d9:ed:2a:4a:
5c:a3:80:42:e1:00:c0:42:07:7d:7d:35:62:70:1a:6c:b6:c5:
83:0a:55:0c:39:02:7d:3b:c2:f9:74:90:5e:a3:3b:83:24:76:
33:9b:46:3b:18:0d:66:6d:93:50:03:a2:b2:9f:5f:dc:44:e7:
15:6e:59:57:91:6c:8b:ad:a5:56:ff:00:ed:22:25:c1:2e:60:
9f:0f:29:53:f2:8e:a2:a4:ab:17:b3:cd:b7:05:d9:be:af:2a:
4a:39:67:56:cf:32:c1:25:ca:53:de:18:0d:21:07:fd:65:8d:
b4:bc:6e:d2:ca:99:28:bc:c7:43:1e:a1:25:af:4a:92:77:50:
91:6f:a7:2d:d6:e7:4d:82:75:7f:91:fd:4b:1c:09:b8:56:8f:
52:33:e3:35:c3:b2:64:43:ca:2b:b5:7a:27:11:49:43:49:6e:
7e:9e:c5:36:10:cb:78:3d:f1:2c:8a:b3:59:26:03:87:96:5f:
4a:e7:ff:f6:54:57:a2:50:88:2b:49:4a:7d:bd:1d:7f:50:d7:
63:54:16:fb:e0:a2:bb:33:52:fa:0e:a0:d4:27:68:2a:a2:85:
56:ab:68:ff:ba:bc:53:75:e8:ba:c5:ad:4a:51:39:7b:c7:6e:
79:1d:fe:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:52 2025 by rpki-client