Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier: PoAKeji8ocinN6cYcdXfMMNokjeElRsVPAjx5mWIkT0=
Subject key identifier: 87:5A:3E:53:C5:14:05:0F:B3:36:01:19:76:D8:D2:14:4C:8E:0F:35
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial: 0196556ECEE4AED696F8B3723475C9BE099E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number: 02F3
Signing time: Sun 20 Apr 2025 23:00:47 +0000
Manifest this update: Sun 20 Apr 2025 23:00:47 +0000
Manifest next update: Mon 21 Apr 2025 23:00:47 +0000
Files and hashes: 1: O7wVhYp5aN-EHbBcAt5o4QIzfyg.roa (hash: 1pH3pLqu6QshZ8HwYPfHNSe335AW5zx9SMrVG3Y2btc=)
2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: wV8GAQA3fxSgcmiRMfZg+tzfsDWqXAZLR5fKrKqCPvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:ce:e4:ae:d6:96:f8:b3:72:34:75:c9:be:09:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c7018034725963a971c96a8caab598cae638a
Validity
Not Before: Apr 20 23:00:47 2025 GMT
Not After : Apr 21 23:00:47 2025 GMT
Subject: CN=875a3e53c514050fb336011976d8d2144c8e0f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:7c:6f:5a:34:d2:8a:86:64:8e:d9:80:6d:
9d:b6:b1:37:e9:b6:35:1b:03:5d:7a:ff:e4:7e:8a:
f6:82:e3:34:c3:35:f3:5d:a4:90:06:25:72:04:03:
15:6e:b5:33:ce:20:ad:70:ea:b6:cc:d7:9d:0d:86:
68:37:37:91:cb:fe:99:b5:6e:0b:53:08:26:fd:f5:
0b:51:92:c4:78:e7:6b:f3:44:f3:39:0d:39:4e:ac:
57:35:00:7c:59:67:f1:a1:f5:91:a1:86:46:3f:62:
64:cc:ea:64:78:ec:db:5b:1c:f3:b6:13:87:ed:8b:
2a:0d:31:ea:d8:f5:02:09:88:bb:87:7a:73:3c:82:
c4:ac:54:3e:3b:57:95:c4:59:ff:49:fd:ca:d1:5f:
50:36:04:2f:01:44:1d:e3:e8:3f:da:59:a2:0d:85:
7f:19:81:86:62:13:ce:1e:88:f1:7b:62:03:48:67:
a8:9c:1e:04:39:dd:48:83:35:08:5c:30:20:7e:85:
62:b5:cd:54:02:41:a5:a0:0b:c6:2e:76:84:c3:5b:
b4:34:fb:ca:0d:3f:9d:56:73:78:fa:51:5f:65:6c:
a3:7d:c0:d4:c5:86:4a:23:75:f9:30:7e:b3:65:4c:
38:63:65:a0:05:cc:66:17:d6:e2:03:bf:27:a7:ff:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:3E:53:C5:14:05:0F:B3:36:01:19:76:D8:D2:14:4C:8E:0F:35
X509v3 Authority Key Identifier:
keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d1:04:8d:71:a7:8a:e3:f4:e4:e7:0e:97:06:b2:56:c6:6d:
fe:84:a2:49:3d:f1:b9:6f:2c:0c:2e:ff:09:65:05:65:28:df:
ec:2c:ea:14:c0:a4:98:25:5c:f6:25:81:85:5b:b8:1a:46:06:
7d:5c:01:8d:fa:28:a3:2f:69:1c:29:f7:6c:99:f9:33:f3:cc:
42:f7:c5:8b:fa:bf:15:ca:79:70:85:fd:01:2c:7c:7b:9b:f1:
4a:b6:24:c5:5f:60:e5:e1:90:82:4f:69:d1:01:41:25:1b:c0:
a0:54:ea:ce:3a:9f:a3:bd:db:4f:c6:54:8b:41:bd:32:51:95:
4a:36:86:00:d1:7b:5f:67:18:9f:81:fa:b2:c9:9d:e1:1d:8b:
0a:7f:a3:08:94:36:5e:7c:1d:cd:31:48:f6:32:bb:8f:04:b8:
f1:a0:b7:b5:bf:10:b9:8c:1f:20:a7:b7:f4:df:34:19:3b:48:
21:8c:08:1d:e6:f4:de:db:4f:1b:dd:1c:c1:23:07:1e:64:68:
6e:0f:0c:d5:2c:46:19:91:7f:93:2b:2b:4c:e4:ef:eb:43:67:
cc:d8:09:ff:1a:2c:46:12:e0:98:26:89:7f:55:b8:87:11:45:
0f:f9:d3:19:2b:9b:cc:3c:67:eb:a0:83:36:9e:ca:bd:97:c7:
58:87:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:17:20 2025 by rpki-client