Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: Ir7x7NbWWCUzG8h7zPHmlrtNO+MkPDSMVue/55CwhYA=
Subject key identifier: 7D:4E:CC:54:16:2E:DF:55:31:1C:C0:D8:54:06:C3:1B:72:CF:59:D2
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 0196090B4A6D3837233556E700E73B234171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 14D6
Signing time: Sun 06 Apr 2025 03:00:56 +0000
Manifest this update: Sun 06 Apr 2025 03:00:56 +0000
Manifest next update: Mon 07 Apr 2025 03:00:56 +0000
Files and hashes: 1: b6NjfbPhaNhgb-BW4tqnY3lmaqA.roa (hash: pqBGjfGCyQz5ophzP0TT0DFUBi4mqZdJUqu+xhB6npw=)
2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: cu7GFsXAqpUhf5ZLigc3V86ryPjgb8DAuLmf84zV61Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:0b:4a:6d:38:37:23:35:56:e7:00:e7:3b:23:41:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Apr 6 03:00:56 2025 GMT
Not After : Apr 7 03:00:56 2025 GMT
Subject: CN=7d4ecc54162edf55311cc0d85406c31b72cf59d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:e8:f4:9e:cd:1a:12:76:69:47:13:a8:eb:
8d:f5:d7:b0:81:f7:d8:44:93:eb:34:3a:83:69:86:
25:54:29:7c:49:a4:32:c8:a5:e3:7d:c2:8f:18:30:
f4:d3:fe:51:df:bf:10:10:2d:22:3a:c0:2b:90:c0:
3c:37:eb:22:d5:4a:de:6e:7e:9c:ef:33:7e:32:70:
2e:db:d8:24:97:22:ee:71:c8:c9:36:dd:11:c7:d2:
b1:17:d2:42:b9:c8:91:56:89:f7:6e:c1:fe:91:07:
ba:32:7f:d1:68:47:8a:0d:da:de:7a:e7:d9:4f:d0:
19:1b:2c:9c:84:b7:a0:c2:c7:5d:1c:c5:2c:cc:b6:
4c:8b:35:33:d1:ce:c0:28:ed:a9:09:ab:7a:67:89:
f5:da:1b:ba:bb:75:6f:55:e7:0b:8d:d2:2d:fa:b5:
39:c3:0b:25:a3:43:9b:b9:04:0c:af:b8:cc:7d:48:
8a:e2:dc:24:16:e5:4b:a4:b6:08:3d:6a:6c:34:ce:
b3:91:89:40:53:8c:67:36:7a:a9:34:68:80:5c:87:
43:cd:8e:0f:ea:74:1c:5b:b2:94:8b:4b:38:ba:9d:
a2:e2:fd:fb:9e:25:53:8b:10:3f:d5:39:5d:21:83:
e3:6b:7c:43:71:25:43:6d:12:6d:bf:e6:e0:00:25:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:CC:54:16:2E:DF:55:31:1C:C0:D8:54:06:C3:1B:72:CF:59:D2
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8c:6f:46:3a:50:c3:8c:1d:49:a4:ea:cf:5d:82:ed:8d:5e:
60:b5:bb:c5:86:3d:bb:c9:2e:0a:f2:55:20:25:1f:7f:e9:ca:
d9:4a:96:e5:ba:59:20:40:a7:fa:7f:50:6a:1c:f1:71:9a:fb:
bd:91:ec:a8:34:92:fc:42:fb:00:df:dd:54:0c:c2:8c:3d:a8:
dd:39:76:eb:eb:bd:82:89:74:6e:38:f8:22:a6:d6:51:7a:55:
93:e4:44:9d:3d:f7:99:af:ae:e1:8b:15:fe:56:ef:81:87:14:
02:a3:2e:cf:e2:d0:51:ff:59:13:c8:de:10:26:fe:9b:5c:38:
23:78:d9:51:d8:9a:e4:52:4d:a5:84:25:2b:03:91:d2:5e:bc:
f4:42:cd:df:38:e9:8c:aa:a3:7c:a0:f8:bd:91:1f:a3:3a:69:
32:8f:4d:46:4d:92:a6:94:ea:90:bc:2b:32:dc:e0:e8:1e:57:
e5:b7:7c:c3:d7:69:49:5b:3e:6d:82:d9:7d:f6:97:86:05:29:
33:bd:d0:37:d3:8b:36:36:79:a0:22:cd:8b:27:c2:a4:3d:fc:
ba:f4:ac:c5:06:23:1e:4a:15:e7:01:2b:da:17:2c:55:a7:63:
8f:0d:c8:bf:55:83:68:47:48:55:b0:31:92:56:f4:a3:c2:ee:
e6:57:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:38:52 2025 by rpki-client