Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: Rtxgrbz9wptDgUvlNe4EQhawK1F1B8qhg2WrTHM8GqI=
Subject key identifier: 90:3D:2B:75:20:4B:8A:A6:FE:AC:FC:67:39:F3:9B:C1:35:60:BD:4F
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 019643D5FCAF122C1D60195756AE9ED61223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 13:00:19 +0000
Manifest this update: Thu 17 Apr 2025 13:00:19 +0000
Manifest next update: Fri 18 Apr 2025 13:00:19 +0000
Files and hashes: 1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: ljqIfKgmxSYZAKrhkq4+nSh8gpywQFRsmglr2M848Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d5:fc:af:12:2c:1d:60:19:57:56:ae:9e:d6:12:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Apr 17 13:00:19 2025 GMT
Not After : Apr 18 13:00:19 2025 GMT
Subject: CN=903d2b75204b8aa6feacfc6739f39bc13560bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:04:0b:de:40:7e:80:3a:3d:fd:39:91:b8:
f7:c1:9e:54:09:8c:51:bf:28:8a:fe:dd:cd:1c:7c:
4e:70:75:d5:40:07:28:a3:77:9e:6e:ca:97:fd:10:
7f:a4:bb:75:81:1a:de:68:a6:65:85:5c:bd:a2:d3:
5b:fa:3d:d0:90:96:63:ba:28:79:5c:5b:82:1c:e9:
c8:5f:f9:79:60:06:bd:b8:de:01:5b:88:be:de:15:
c0:65:ff:8a:4d:7b:a3:04:72:f4:37:c1:41:2b:2c:
73:33:84:d2:40:79:1b:aa:18:6c:1b:65:25:79:4b:
30:2d:80:64:97:80:bc:6a:89:ee:02:b6:32:04:16:
eb:3e:dc:98:51:d7:e0:ac:21:77:0d:78:0b:c3:2f:
05:fd:e3:3b:81:41:90:cf:86:f5:91:14:74:45:46:
40:72:b7:14:0c:2a:b3:51:b0:96:07:2e:af:00:e1:
21:2a:11:53:59:7e:2b:58:d3:43:60:04:14:60:8e:
02:31:56:96:09:88:a3:4a:b3:9f:ec:f5:13:e2:6e:
df:0c:7d:be:94:3e:71:78:10:25:a7:8d:b5:be:25:
f0:c4:75:17:63:75:db:4c:5b:af:16:87:59:e5:78:
b6:0b:9d:b1:50:22:7f:f7:29:b4:b4:9a:4f:2f:8c:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3D:2B:75:20:4B:8A:A6:FE:AC:FC:67:39:F3:9B:C1:35:60:BD:4F
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:10:d9:77:92:f4:8f:0d:5d:df:a0:b4:65:ba:bd:ec:d8:f7:
aa:09:6f:b3:96:a3:1e:f2:de:a7:e7:e7:45:89:1c:54:62:be:
0d:ac:f9:d2:78:c5:84:33:64:76:17:9f:2a:fd:5e:c7:ff:53:
cf:82:c2:8d:d6:d4:d2:0c:4a:fb:fc:22:e3:2f:7a:d4:cc:9f:
9c:2c:14:da:d5:c4:f2:eb:48:a4:da:23:dd:30:6d:b1:e1:87:
4a:50:41:90:23:ec:8c:49:c6:d8:85:d4:0c:b6:40:00:63:cb:
29:e7:5f:50:9e:33:c9:a0:b2:13:99:cd:a4:48:ac:da:5b:43:
a7:9c:12:18:64:2a:6d:e1:80:eb:8b:de:15:20:c5:4a:bd:9e:
44:34:df:c9:d7:f9:94:e5:f1:67:03:99:59:a3:77:87:04:74:
82:8d:c9:fb:ec:4d:3e:87:c9:83:9c:0c:a1:7c:25:38:fc:2b:
a0:b2:d2:7c:56:27:8a:0e:f4:36:21:60:ce:ad:38:4b:3c:1c:
0d:3a:6b:81:40:97:49:5a:14:37:cd:b3:30:c3:80:44:06:83:
ff:2b:20:70:52:0d:f7:be:50:2d:13:02:98:a5:bc:db:ef:6f:
68:2e:53:d1:40:d3:88:28:53:43:2a:36:45:0d:70:c3:5a:1a:
3b:64:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:13 2025 by rpki-client