Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: kfSF7B6QvRKnLJrT0IwUjk/pAfiXRS9zDxvcyNUpabY=
Subject key identifier: 9E:A1:08:D8:FB:16:DB:B4:79:63:1B:03:77:1C:7F:04:91:97:FE:46
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 019652A47F42733B680DB79F902AA267E840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 1309
Signing time: Sun 20 Apr 2025 10:00:34 +0000
Manifest this update: Sun 20 Apr 2025 10:00:34 +0000
Manifest next update: Mon 21 Apr 2025 10:00:34 +0000
Files and hashes: 1: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=)
2: kkSPJZVB96rAbN17P-YUAJN7aaE.roa (hash: 8dKJzCnviJKMMlZ3r9gbzAQciz/e0KQ17aqwbgXszyU=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: I/+TUr+3sFSrqa/R7IK/+ovBQiy/DfFwoYOAe9+WTzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:7f:42:73:3b:68:0d:b7:9f:90:2a:a2:67:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Apr 20 10:00:34 2025 GMT
Not After : Apr 21 10:00:34 2025 GMT
Subject: CN=9ea108d8fb16dbb479631b03771c7f049197fe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:19:ea:52:ad:1e:c2:bc:e5:77:c5:3b:54:
c7:f1:cb:c2:f6:99:6c:8e:04:dc:80:44:f5:77:9c:
b2:45:a3:25:32:30:92:e3:a6:2c:fa:83:99:89:0a:
75:f3:cc:6b:57:89:72:0b:e5:62:de:c5:12:11:3e:
07:b5:6b:bc:30:91:ef:b8:65:82:be:c4:2b:62:37:
8c:ac:62:9e:23:16:97:0b:fc:61:19:c8:d9:24:0f:
d7:b5:69:c8:8b:97:d2:80:b0:b7:c7:6a:9f:6a:24:
86:1f:96:2b:b7:de:07:3d:4f:f7:aa:a6:7b:29:be:
a1:3a:24:bb:fe:9a:d3:7c:72:99:e3:40:6e:a0:fe:
f7:96:60:9e:1c:91:44:c4:d3:8f:ce:f4:54:7d:f2:
52:49:62:13:62:cd:52:91:b3:ce:18:98:59:d7:cf:
3d:d0:43:a6:2d:ae:be:5c:0e:a8:48:65:d6:2e:fa:
7c:57:a3:57:51:3d:60:19:86:e2:ad:a2:7e:88:05:
c1:3f:7c:86:b6:a6:57:7e:e1:7a:70:e7:7b:b0:c4:
04:83:2d:1c:f1:e9:9c:61:65:cd:8a:c2:f4:2c:ae:
21:b7:27:fa:58:0d:ee:e3:dd:a5:02:11:89:fa:b1:
bd:00:4a:c7:b9:80:ea:ff:6e:59:e5:9a:3f:1f:18:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:08:D8:FB:16:DB:B4:79:63:1B:03:77:1C:7F:04:91:97:FE:46
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a8:d9:d7:87:79:46:54:2d:c5:d0:10:22:29:23:cd:ea:94:
6c:f4:59:2d:cd:df:8f:e6:fc:20:84:14:30:ec:a0:8e:3f:87:
ad:7c:7e:ed:c3:99:6d:a1:a7:39:63:c6:1c:e6:05:e2:bb:cd:
91:56:9c:23:8b:b1:e1:f1:8f:e4:9d:29:fd:7a:a2:d5:26:61:
27:c9:19:85:b9:53:fc:3a:c9:3c:4b:0d:5e:ec:c2:f1:07:cb:
18:08:46:24:d6:1e:0a:57:11:a8:9f:15:fc:ea:63:da:45:51:
87:5b:fd:8f:4b:90:93:7c:30:80:07:9b:6b:a2:73:ae:ca:8b:
68:0a:ed:6c:5c:49:54:f2:a5:5a:38:8a:8c:42:17:f9:f1:fb:
68:71:60:6b:1d:a6:35:fd:04:5f:2b:b5:36:bc:2e:33:4f:04:
08:66:4a:44:96:d2:69:2c:7e:67:6b:2b:83:79:1b:77:60:5d:
b1:06:1f:e2:71:f4:48:3f:98:37:17:aa:71:a0:74:dc:e8:d4:
fc:24:8d:b7:eb:62:20:24:21:f2:1e:4a:05:db:59:93:cf:87:
e9:fe:a4:6b:92:77:41:06:14:05:a0:fe:e1:59:58:15:13:00:
01:7f:04:86:72:56:71:39:38:1f:1b:0e:d0:b2:2f:7b:9e:c2:
e1:19:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:33 2025 by rpki-client