Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: iLk8pHx3Vh4QWmHBfsTIAs8UobptFwsGkQzgOKPU750=
Subject key identifier: D9:21:31:AA:53:76:F3:CF:C5:36:65:BA:F7:03:9B:BF:49:C6:45:C8
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019612EA25654FB2589E42322D72417A39A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 14DC
Signing time: Tue 08 Apr 2025 01:00:56 +0000
Manifest this update: Tue 08 Apr 2025 01:00:56 +0000
Manifest next update: Wed 09 Apr 2025 01:00:56 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: Na5jHIcZOe/56WTmH9cxUYpKwPurpq63NRPKkFwFzrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:25:65:4f:b2:58:9e:42:32:2d:72:41:7a:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Apr 8 01:00:56 2025 GMT
Not After : Apr 9 01:00:56 2025 GMT
Subject: CN=d92131aa5376f3cfc53665baf7039bbf49c645c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:ad:7a:f6:3b:c5:de:29:68:69:82:06:ba:
2e:e5:46:2f:8c:ca:d1:ee:91:dd:58:ad:94:1b:b7:
94:72:49:91:f1:fc:57:89:db:f0:f8:76:ee:04:ba:
01:a6:78:08:f8:a4:9d:0a:36:d1:48:22:06:49:20:
62:76:cb:c5:51:d0:ad:5b:a0:80:e0:53:05:28:3b:
e7:be:97:34:9d:5b:5d:08:94:02:dc:5b:4d:20:5f:
9d:9e:c6:67:fc:7a:4a:c8:64:2d:38:63:f2:42:bf:
5f:37:a6:36:7d:74:8a:62:31:3a:cf:63:c5:bf:4b:
56:4b:5b:3a:60:ca:ab:a4:55:46:ce:58:d6:3a:33:
8f:75:4b:43:53:6a:01:7e:d8:70:ab:f7:cb:6b:9c:
72:88:13:65:ef:51:d0:83:d9:64:b2:1c:45:a9:4c:
1f:f8:7f:1c:2d:27:80:6f:ea:05:d8:ef:4c:ea:c7:
6e:e1:ee:68:b6:28:d3:13:9a:6f:24:d2:0b:1f:ac:
bb:96:c5:22:87:5e:e5:ac:a3:86:6f:e5:7f:bb:de:
34:be:6d:38:8f:ce:9f:81:ad:43:06:39:1d:42:45:
bc:bb:ce:55:f1:b8:c5:49:c3:2f:41:d4:86:f5:66:
82:a7:00:0a:d7:e6:d3:43:20:ff:c8:29:d0:96:1a:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:31:AA:53:76:F3:CF:C5:36:65:BA:F7:03:9B:BF:49:C6:45:C8
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:a8:51:ba:d8:bd:a0:b2:0d:93:f2:9b:f5:4f:d8:a1:3f:
ac:18:68:2f:c3:48:46:8a:1f:79:dd:48:59:16:ab:77:ae:c4:
16:5d:2e:ef:31:19:8c:be:e8:07:b6:2e:a5:1e:d3:1c:5e:41:
fd:ab:e0:b9:82:b3:1c:80:89:fd:bc:32:35:f1:3a:e1:e5:04:
c0:00:1b:48:ab:f2:9b:75:f3:0a:fe:3b:94:dd:15:16:ad:bb:
85:28:f1:9b:ee:61:ba:9b:59:9a:9e:b6:c0:ea:45:5f:ac:3a:
55:58:7d:29:89:5d:fc:fb:43:08:15:25:81:d4:79:a8:db:0e:
2b:47:a3:17:3c:4d:c8:23:5a:1b:36:58:ef:dc:ce:d0:57:7e:
69:da:69:a6:b6:80:31:f0:40:02:40:a6:80:ce:cd:af:34:3a:
e1:14:b7:11:cd:52:12:ed:b4:b9:6f:fa:f0:8e:0e:0e:7c:a2:
23:db:2b:7a:ac:36:b6:22:4b:7f:93:d2:7e:a1:65:ec:96:84:
59:61:98:02:c7:b1:b0:a8:58:d6:54:e3:be:9a:52:30:d0:81:
53:28:46:fe:3a:d8:ee:f3:d5:da:25:22:f1:93:ab:dc:75:92:
b6:ac:28:9b:5c:34:b1:51:72:ab:10:16:42:dd:ca:4b:15:c8:
e1:d9:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:18 2025 by rpki-client