Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: HlKe5kL3gLly/+5kKHkiQZbyrQJlctR2f5w7z7eTtHE=
Subject key identifier: 3F:A8:5F:06:0E:F0:3C:89:FD:13:E3:E9:48:43:EA:E8:34:E5:BF:62
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 01964C6B40B6A73BF19193728C23B9343015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0CAE
Signing time: Sat 19 Apr 2025 05:00:19 +0000
Manifest this update: Sat 19 Apr 2025 05:00:19 +0000
Manifest next update: Sun 20 Apr 2025 05:00:19 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: RFmNTz5LfQ8Fl3Nsw3sKP2EAesXJWwQhPmZa1f+IbBw=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:40:b6:a7:3b:f1:91:93:72:8c:23:b9:34:30:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Apr 19 05:00:19 2025 GMT
Not After : Apr 20 05:00:19 2025 GMT
Subject: CN=3fa85f060ef03c89fd13e3e94843eae834e5bf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fd:62:53:28:34:bb:42:89:b0:b8:ff:c5:09:
83:f0:d2:9b:12:54:f7:c0:5f:25:70:cc:0b:52:f4:
8a:f0:3e:f7:d6:d4:7d:45:e4:a0:02:57:25:38:45:
fa:0b:f7:75:5d:11:1d:32:ca:54:9e:e9:83:18:42:
e8:ba:fb:60:38:c6:d3:22:06:ca:a8:0e:36:48:65:
f9:34:67:e7:ab:e7:8b:41:6a:c1:ab:1a:7b:45:ba:
be:a2:97:3a:a1:ed:f5:5e:43:dd:e7:2f:38:17:01:
1d:92:30:38:00:37:31:1e:af:1a:9a:d8:c9:28:5a:
77:7b:d1:74:92:7d:67:3b:7f:15:d9:c6:b5:82:c0:
c6:67:a5:b4:f3:8c:e2:7c:43:8b:c7:b5:b2:1b:ce:
e7:45:f0:a5:36:f2:ed:79:77:69:4d:88:e4:25:78:
cf:c3:f7:59:00:26:12:b9:02:2c:55:a6:54:63:cc:
34:d9:2b:d9:ba:b7:fd:05:08:d2:38:2f:9f:09:53:
0d:ce:a1:33:77:b9:30:ee:8b:46:16:2a:79:aa:19:
ae:17:aa:9b:02:42:a0:0e:af:d5:a8:a2:c2:29:ee:
13:ba:78:9c:17:7a:03:59:8d:68:56:e7:3c:3d:86:
7b:b3:d1:3f:94:2c:b5:1c:2b:44:55:8e:1c:4b:28:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:5F:06:0E:F0:3C:89:FD:13:E3:E9:48:43:EA:E8:34:E5:BF:62
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:51:5d:03:a6:43:f4:10:f3:72:90:04:90:31:9e:6b:bb:a8:
1d:1d:b8:1e:5f:67:02:25:1e:f5:d5:2c:62:3a:ae:b3:22:30:
43:25:7e:08:e6:f2:d5:89:c2:3f:fd:73:da:fc:00:65:bd:9c:
e7:bd:a9:9a:6d:3f:08:c0:07:17:87:9c:a9:9e:80:92:9b:fa:
0a:87:c5:f1:8f:02:10:cd:9f:96:a7:d4:06:28:f9:36:ba:73:
9a:ab:61:c0:77:f8:d6:cf:98:1e:c0:0e:4b:bd:5f:cc:54:6a:
8f:56:35:30:10:f2:75:48:ee:e4:42:1c:64:00:96:f1:00:4c:
5a:a5:ec:3e:44:cc:63:17:08:6b:84:36:c0:93:7c:9f:b7:70:
8e:62:d6:64:f7:dc:a4:ff:77:b6:f8:4d:8d:d6:a6:17:35:e5:
b7:96:6e:2a:14:b6:17:7b:a7:16:6a:4a:c2:36:30:5e:cf:73:
03:32:5b:14:e0:a1:45:2a:2c:11:2f:26:7c:1d:cd:65:f2:aa:
a1:58:bc:e4:be:58:90:6c:31:56:22:df:82:1d:aa:96:6e:d7:
1f:f2:f6:0b:62:ea:13:32:0d:f8:25:b1:0d:8b:e1:75:26:5f:
ca:67:a3:4e:d8:ec:d5:5a:e2:e0:87:0a:4d:0c:1a:ba:da:58:
0a:8b:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:27:48 2025 by rpki-client