Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File: vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier: zYvgbpntxKUNcnpcU3zZzsGYIo//gW/AdDXHlI14VK4=
Subject key identifier: F7:1B:81:56:A2:05:21:B9:14:97:2D:F1:0B:A1:5E:DC:FE:2E:F4:BB
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer: /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial: 01965B70B8105D0D81524B5716468C7D7EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number: 120F
Signing time: Tue 22 Apr 2025 03:00:35 +0000
Manifest this update: Tue 22 Apr 2025 03:00:35 +0000
Manifest next update: Wed 23 Apr 2025 03:00:35 +0000
Files and hashes: 1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=)
2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: WX98NzUHlsSy4xD33RwGLwXhBcWNd6+n4Uivam4Al+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:b8:10:5d:0d:81:52:4b:57:16:46:8c:7d:7e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Validity
Not Before: Apr 22 03:00:35 2025 GMT
Not After : Apr 23 03:00:35 2025 GMT
Subject: CN=f71b8156a20521b914972df10ba15edcfe2ef4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:b4:80:74:13:6e:52:13:fb:55:f8:1e:9b:
39:8e:89:58:ee:bb:74:d5:f9:d6:59:1e:d4:ab:12:
ca:3c:46:9e:18:07:c1:d6:11:db:14:0e:75:39:67:
6f:3e:34:c5:b2:c3:96:80:07:e2:85:79:91:cc:38:
a8:e8:3d:cc:9e:d0:64:ba:aa:d2:91:bb:4c:68:7d:
8b:14:f2:4b:e8:72:c5:2d:34:fe:70:af:db:5c:94:
15:ce:03:f6:5d:04:1c:2b:45:30:96:c0:fe:1d:ba:
bb:cc:cc:98:e4:88:88:82:28:80:8e:1d:63:1e:4e:
52:fe:d4:ce:70:cc:24:33:30:13:b7:74:b4:a8:5f:
3b:ac:f9:7e:c0:75:42:0c:ba:eb:2e:c2:35:ac:21:
3f:b8:dc:32:3a:31:43:4d:1e:c3:fa:f1:bf:4a:5c:
3f:a4:0b:a8:ce:90:19:13:d5:56:7b:10:da:46:db:
c3:72:90:88:ed:d9:cd:79:90:f2:59:11:4b:39:95:
9b:9f:03:cd:31:c8:87:c8:5b:df:1d:9b:04:52:7f:
85:ec:6e:b2:06:32:09:1f:24:91:03:1a:65:dc:18:
eb:f0:40:28:1a:e5:c5:af:b5:c6:61:9f:68:a9:f8:
a3:d5:05:8e:36:bf:c0:2f:02:cb:86:87:a6:ed:07:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:81:56:A2:05:21:B9:14:97:2D:F1:0B:A1:5E:DC:FE:2E:F4:BB
X509v3 Authority Key Identifier:
keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bb:da:12:27:68:3d:85:19:b0:5b:1e:b0:a9:89:46:2a:62:
ff:1b:ec:65:d1:9f:4f:f2:1c:b5:c5:89:4c:09:44:1b:b4:19:
4b:46:36:e1:77:b0:d1:81:fc:b3:3d:93:ee:53:0c:99:0c:ef:
9c:bd:c5:c5:3b:81:e6:c3:30:53:ff:08:2d:ae:89:05:78:5c:
42:3f:31:f0:4b:f9:86:8e:01:37:e9:07:48:6f:da:a5:75:31:
14:e7:2f:9c:57:4f:10:39:97:de:95:ab:41:9d:19:9b:b5:56:
ad:5c:e0:8c:b9:f2:e1:93:b9:2c:1c:03:5e:f2:75:d3:47:3e:
1d:aa:3d:43:ec:69:b4:88:95:9c:47:fd:4c:be:c5:b8:b9:06:
fc:61:6c:81:2f:d7:ae:ef:34:da:44:b8:80:50:35:19:ae:82:
45:b4:42:6d:e7:29:79:97:9c:04:fd:8c:b3:ff:4c:1f:06:d1:
a9:a8:b1:36:86:f7:7e:c8:38:2a:fc:2a:c8:ba:4c:c6:4f:04:
7a:77:81:99:be:9c:0e:8e:e5:e4:80:dd:2c:ab:57:1d:ab:06:
07:cb:0b:dc:62:41:24:89:36:52:b9:41:e7:6a:61:44:40:a6:
f2:b6:5d:08:74:0c:49:8f:c5:32:34:eb:7c:0c:5f:78:42:9c:
72:8f:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:44:23 2025 by rpki-client