Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: 3m7I7GdGnXkyfPxTNblWFaR6VpXI22ucXkW3KZ6VV04=
Subject key identifier: EE:6D:25:D0:C1:B6:8A:75:FD:CA:AA:10:12:00:08:0D:03:B7:0A:8F
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019653EE8FF0348947DE3CF7FD16AC6E0360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 0831
Signing time: Sun 20 Apr 2025 16:01:05 +0000
Manifest this update: Sun 20 Apr 2025 16:01:05 +0000
Manifest next update: Mon 21 Apr 2025 16:01:05 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: Da7/cYwN9YWe6NNWVAZuw49sU51BkABjU30LW5LWmEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:8f:f0:34:89:47:de:3c:f7:fd:16:ac:6e:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Apr 20 16:01:05 2025 GMT
Not After : Apr 21 16:01:05 2025 GMT
Subject: CN=ee6d25d0c1b68a75fdcaaa101200080d03b70a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:e1:48:90:16:74:db:be:9f:9d:5c:99:34:
5e:b3:1e:a0:b3:52:c3:09:a4:a3:fb:58:d6:4b:64:
62:2d:92:4d:f3:c0:b1:2a:00:2e:d3:90:94:06:6d:
fb:d9:2c:f0:6d:53:d4:86:bf:42:77:f9:82:7b:cb:
0a:ec:73:97:1d:8b:78:4f:c6:b6:55:64:dd:64:16:
36:a1:9b:3f:5d:35:89:07:be:37:80:13:45:c1:49:
1f:95:b4:30:a0:f4:13:20:18:a7:80:35:60:0f:c8:
97:c7:89:b4:4f:dc:87:42:8f:d2:72:44:7a:8b:4b:
d5:db:d5:17:d6:d2:fc:e5:32:e6:c5:b5:37:93:53:
59:ab:32:4e:c3:da:7e:fa:88:57:72:50:2e:dc:14:
20:c7:79:24:99:c9:9c:cc:78:b1:5a:42:a0:39:42:
ce:17:6b:77:00:28:4f:a0:dc:d3:38:d4:97:97:45:
1e:a4:e3:c0:c5:3a:b4:43:8d:75:eb:de:71:2e:2a:
30:40:04:69:7e:8a:8e:e2:c9:fa:3f:77:ae:c5:d1:
84:16:66:75:60:68:5d:ad:3d:b9:a2:58:62:f2:c0:
9c:d1:80:6b:a4:0e:60:53:1b:3e:63:47:18:9d:1f:
1a:c2:bb:33:71:fb:98:ca:35:4a:ec:09:2a:21:62:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6D:25:D0:C1:B6:8A:75:FD:CA:AA:10:12:00:08:0D:03:B7:0A:8F
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:15:19:95:16:53:45:45:28:16:50:e8:32:c5:ae:2b:65:2b:
79:eb:2a:59:35:5d:b4:7e:29:9b:49:f8:3d:77:01:25:10:32:
6c:6c:53:da:7a:b4:ec:a5:b7:e9:94:e1:64:7b:21:ae:ac:c7:
ad:70:53:2c:2b:f8:1a:96:66:6c:b7:27:cb:8d:62:47:30:cb:
3e:c1:f3:cf:ac:c7:0c:48:1b:31:91:fd:39:8a:82:02:f8:0d:
b2:40:fd:e0:14:5c:25:24:92:00:df:a1:8d:aa:fa:b9:70:46:
fe:6c:89:de:4a:12:8d:a2:7a:33:2d:09:1a:e5:41:31:99:28:
8a:22:66:3f:13:84:a0:8f:55:f3:de:91:33:0b:0f:2b:5b:c1:
4b:74:a9:3f:e9:67:ee:d0:d3:56:af:5d:5e:6c:25:87:f5:d2:
05:1b:47:2e:2b:5d:a9:ea:57:a1:50:5f:d4:5a:27:de:85:cb:
55:5a:7f:05:bd:37:16:a7:db:34:3b:99:09:52:29:88:71:d1:
1b:45:4c:f3:98:10:be:80:eb:db:d7:cf:96:3b:eb:f3:7c:c9:
ff:af:ac:86:48:c3:06:b4:88:7e:72:b4:a7:7e:f3:4b:b0:82:
68:21:69:59:c2:84:aa:5f:9d:17:b4:56:e3:4b:d9:78:41:d5:
3e:8d:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:36 2025 by rpki-client