Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: rNpRPUJcIJQ2A0eOXB0nIw46BwbYuIbohK1kd1WF7Qg=
Subject key identifier: B4:D8:3D:A2:E0:DF:8B:1D:0B:32:AE:E5:2C:E2:DC:FF:D2:9F:24:68
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 01958B1686876C084AA5F369F6452FC23A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 0E89
Signing time: Wed 12 Mar 2025 16:01:03 +0000
Manifest this update: Wed 12 Mar 2025 16:01:03 +0000
Manifest next update: Thu 13 Mar 2025 16:01:03 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: Trd9BgCcZk/ZNdv5k2vePH+U6q1JCtIiSKV4IUN+ASQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:86:87:6c:08:4a:a5:f3:69:f6:45:2f:c2:3a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Mar 12 16:01:03 2025 GMT
Not After : Mar 13 16:01:03 2025 GMT
Subject: CN=b4d83da2e0df8b1d0b32aee52ce2dcffd29f2468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:3a:86:42:cd:8a:c0:28:c6:3b:1f:3a:f4:
fd:15:3a:0b:45:ef:4b:43:48:b6:84:89:31:85:60:
6e:79:ee:44:c9:ba:bf:08:4c:9a:83:00:8a:43:b3:
32:ca:ee:46:e4:3e:20:06:2c:90:84:a7:41:1a:4e:
09:ed:07:f0:49:f1:ba:b8:28:03:75:a0:ac:6b:7a:
aa:5f:49:e4:11:ea:c3:c2:41:79:c5:1c:41:a1:e1:
9f:84:20:8e:4b:52:96:00:6c:79:06:07:67:df:a3:
8a:8f:8b:94:00:0f:0a:e8:00:ca:92:bd:87:d8:62:
db:db:0d:dc:fc:29:49:19:db:f7:08:9e:d2:ae:5c:
a7:6b:73:00:c3:18:3f:d7:a8:54:81:f4:ce:ae:0a:
bf:57:41:13:f7:5c:15:cb:3b:e0:69:a9:7d:59:9c:
40:8f:24:c4:0d:3b:73:85:d3:3f:b5:ad:42:63:8b:
09:f3:a2:83:02:8b:6f:4a:23:e0:e4:8f:1f:9b:75:
dc:b2:6e:b3:dc:1b:9e:4f:ea:77:3f:8f:31:58:d7:
11:84:23:f6:ee:f0:32:ef:1c:a7:dc:67:d1:d5:99:
1e:06:dc:ab:42:dd:fe:13:08:28:36:c2:bb:31:43:
07:d0:ae:8d:a5:73:b9:0d:3b:c0:ae:a3:87:6f:f8:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:3D:A2:E0:DF:8B:1D:0B:32:AE:E5:2C:E2:DC:FF:D2:9F:24:68
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4d:8a:4e:86:a8:c0:8a:bb:db:94:dc:ec:01:a6:b8:fb:f0:
e0:68:3c:a6:44:e6:6b:37:f4:73:9d:49:c2:e2:64:b5:f0:8f:
23:fe:cf:16:25:8f:6f:87:32:3d:4b:b2:17:34:02:2e:8d:ad:
c5:0d:44:e2:de:4b:43:5a:ac:17:99:2f:09:01:63:4f:58:10:
db:cd:bd:91:0a:87:15:56:3c:93:11:ec:aa:c3:d0:7a:8f:98:
6f:4d:bc:67:b3:f4:2a:6d:4a:98:e7:c6:c0:c2:44:d6:5b:0d:
0c:ca:a1:e4:3c:05:ac:0f:1c:a2:8d:99:1e:f3:1a:aa:53:fc:
7f:82:dc:ba:b9:9a:65:90:8f:61:1c:a1:0e:11:ff:a2:4f:72:
08:bc:3e:d5:86:12:62:fe:7e:04:29:aa:c9:a0:6a:b3:8f:59:
4f:e1:4e:76:59:31:75:71:54:f1:11:56:1a:98:91:80:d2:2b:
e2:3c:09:39:02:41:22:b5:c5:49:33:69:ed:e8:2d:83:9a:29:
df:a1:82:75:d7:fe:c7:ba:f7:6a:2f:b9:00:13:5c:1c:76:82:
2f:14:95:fb:53:03:94:b9:ae:a9:81:e0:39:81:b6:c8:a4:3a:
53:6e:11:68:aa:9c:13:9e:24:3e:eb:be:0f:d9:65:2f:1a:bd:
97:3b:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:18 2025 by rpki-client