Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File: Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier: YCntNuvfMq207TDFeY0cwYy74fZL8BP9L6v7fsRa9X8=
Subject key identifier: 8B:53:38:B7:EA:D6:72:8C:53:B4:CE:4A:E5:1D:21:14:B4:EE:E3:7F
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer: /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial: 01964DB4E1477AD5F31072F21AF990CB7E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number: 02EA
Signing time: Sat 19 Apr 2025 11:00:21 +0000
Manifest this update: Sat 19 Apr 2025 11:00:21 +0000
Manifest next update: Sun 20 Apr 2025 11:00:21 +0000
Files and hashes: 1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: eYs5IIl+GOLOd1ItHHirUd4vFOLsIyFkoQo4zBWf2qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:e1:47:7a:d5:f3:10:72:f2:1a:f9:90:cb:7e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Validity
Not Before: Apr 19 11:00:21 2025 GMT
Not After : Apr 20 11:00:21 2025 GMT
Subject: CN=8b5338b7ead6728c53b4ce4ae51d2114b4eee37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:c2:df:75:96:fe:4f:57:4e:8a:9d:d3:60:
46:57:9c:6a:0c:e3:98:18:04:c1:ec:39:2b:d4:67:
95:f4:6e:51:81:67:43:8d:c6:52:cb:4c:30:30:85:
a7:52:15:bb:70:3b:f1:e7:6e:e0:7f:85:7b:1a:8f:
65:44:2f:cd:ef:b7:05:56:77:bb:93:1b:f3:11:7f:
ab:1a:9c:9a:20:eb:b5:21:67:b3:13:bd:c2:38:66:
82:79:e8:85:66:a7:a2:7e:94:19:19:94:81:29:c1:
e1:80:19:82:99:fa:c5:03:22:aa:1e:ee:9e:18:88:
57:9c:a5:ee:0a:6c:03:83:e4:66:e4:e3:82:fb:9f:
6b:4c:a2:78:54:e2:f1:05:30:eb:6c:c5:ff:ca:8f:
72:3c:4e:e7:39:21:56:c8:a9:f7:6c:52:9a:72:87:
f1:43:02:ca:0a:91:e3:7b:c2:81:fb:f7:60:8e:f8:
6f:84:23:e8:d8:25:d7:aa:0b:1c:49:77:14:92:41:
14:5e:8c:75:1e:47:6f:01:fd:1d:e9:e8:3a:a8:f7:
a2:02:72:bc:84:04:83:29:68:08:19:08:08:60:02:
86:97:de:fd:42:2c:ab:7b:7a:b0:dd:53:37:9e:b8:
a0:07:cf:11:d8:35:c2:09:13:2a:80:4a:e5:8e:c5:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:38:B7:EA:D6:72:8C:53:B4:CE:4A:E5:1D:21:14:B4:EE:E3:7F
X509v3 Authority Key Identifier:
keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d2:5a:6b:42:28:b4:71:89:5d:77:06:73:be:ce:6d:6f:1e:
1b:f7:db:d0:13:3a:94:2e:94:e5:ec:ed:ea:ae:4b:61:5a:16:
ab:9b:74:5b:12:b1:cb:c7:e1:cc:50:9c:6f:29:97:ff:23:87:
dc:4d:d2:09:0b:90:d7:db:88:4a:c2:de:d1:dd:dc:f6:7e:6c:
f4:75:eb:5d:86:ca:83:01:d8:03:93:86:18:6b:36:4a:5a:b7:
4b:d7:d9:56:e2:13:f6:55:d6:d7:75:95:78:e7:bb:03:2b:0c:
58:4e:6e:28:7a:f1:09:e6:6e:78:16:e1:69:26:90:cf:87:ba:
76:16:6a:bd:1e:d2:f7:7a:41:3f:0e:ec:90:2e:f5:e3:3e:22:
51:b4:92:ec:9d:90:e9:2b:11:c1:e9:39:9a:26:4b:3f:13:ec:
49:c1:ce:28:19:6d:3b:03:70:7a:0d:0f:1f:90:cf:96:cc:b6:
27:a0:50:87:2e:6a:c0:7f:35:6a:aa:b8:6d:8d:9a:fb:64:32:
4b:f0:92:a9:d8:9d:f6:39:19:68:64:d4:22:bf:59:2b:08:84:
2f:f9:32:14:72:f0:81:66:de:53:bc:97:c0:d0:90:a8:ae:a4:
0a:7f:68:8a:4f:9e:bb:41:6c:91:01:b6:f4:a5:6a:02:54:44:
90:94:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:28 2025 by rpki-client