Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: UBE8b7J4GfCXBXu7XwZAhnB3KoMd6mE+5Xnn3KtPtMY=
Subject key identifier: 84:76:82:3E:17:7A:57:A2:29:E5:93:75:17:F0:3A:24:8F:6E:00:7C
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 01963876C9196389E675E62E1AE7F305380C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 14F4
Signing time: Tue 15 Apr 2025 08:00:30 +0000
Manifest this update: Tue 15 Apr 2025 08:00:30 +0000
Manifest next update: Wed 16 Apr 2025 08:00:30 +0000
Files and hashes: 1: fj83OICA2dXkb7sofXdOoGdjzq4.roa (hash: pOA5XIvHm6EKh1V95/EfmbQrXTJ90+bGbqMr2BZtsSk=)
2: pDkCQjQVPegQOP278WmolhHSrkw.roa (hash: VPjogK0/dxD5LybI2fhbuslUMxpJB7AerXcZh/G3cj4=)
3: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: FnHkcEw46B7kKVw05AbDdrXYqRSKJUWvIeXdC55bF1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:76:c9:19:63:89:e6:75:e6:2e:1a:e7:f3:05:38:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Apr 15 08:00:30 2025 GMT
Not After : Apr 16 08:00:30 2025 GMT
Subject: CN=8476823e177a57a229e5937517f03a248f6e007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:4e:49:ac:75:f7:95:08:8b:b7:7c:b5:df:
f0:f2:41:6f:62:54:62:ee:9c:db:b0:47:23:de:0b:
52:ba:31:5f:1c:54:4e:bf:a2:e3:6e:75:e3:75:bd:
af:b5:7d:c2:85:57:3f:06:b6:1e:18:49:e5:15:40:
df:c6:3e:9c:65:81:a9:c3:63:eb:08:e2:95:8b:9a:
77:5d:e4:89:92:ec:50:c9:64:4b:db:95:c9:41:89:
92:ab:11:aa:4a:44:84:78:73:43:ef:48:25:c9:03:
74:a8:11:70:25:56:4c:3c:b6:57:76:75:ca:a7:0f:
32:7c:6a:9a:43:8c:0a:7a:3d:70:92:83:84:ba:f1:
62:de:a8:3e:c7:e8:40:c6:95:36:5d:f2:dc:dc:8d:
e8:f4:e5:69:fe:3c:3c:1e:2f:6c:2a:dc:07:a3:a1:
77:e9:07:72:8b:8d:c3:aa:6b:bb:bf:f9:7e:99:0e:
e1:d4:d6:2b:4f:0e:7d:a7:84:91:b4:2c:8a:8b:53:
cb:cd:63:06:af:40:3e:f9:d6:1e:f5:e9:8e:68:90:
c0:93:30:cd:7b:b5:d3:32:64:d7:ac:82:02:fb:5f:
72:64:51:5c:3a:0b:c4:83:8e:5e:52:9c:3a:e0:93:
b8:eb:46:3a:32:1a:92:22:82:77:1a:aa:0a:08:6c:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:76:82:3E:17:7A:57:A2:29:E5:93:75:17:F0:3A:24:8F:6E:00:7C
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:d6:33:be:73:0a:66:9c:91:3e:ae:10:04:50:42:bb:8a:
45:f8:7a:94:6e:72:aa:f1:1d:e6:60:ec:dc:49:9c:c0:20:97:
05:58:49:a2:e1:c5:5c:72:15:30:72:8a:07:32:59:f7:64:a2:
8d:ba:2c:80:01:9f:3b:d6:38:ea:fb:5e:4a:b1:e2:72:0e:fc:
be:38:83:4f:2e:94:60:77:1b:1d:5e:b3:d8:6f:b1:1c:e2:4c:
6b:d1:63:5c:0c:71:0b:3a:dc:6f:ef:86:fc:ac:33:2d:71:7a:
d3:20:cf:a0:44:71:8a:14:01:06:93:27:c5:6a:d1:3c:01:b0:
95:b0:71:0a:28:c7:73:a2:1d:d7:5b:77:65:1c:5b:6b:3f:ad:
8b:ed:5b:6e:06:3f:f5:f0:d8:bb:cd:3c:1d:db:0a:b1:00:0d:
66:9b:dd:fb:43:5c:39:84:82:14:c6:9f:39:2e:c9:39:36:f4:
20:7a:bc:ba:93:cf:78:53:f0:fb:67:82:fe:62:94:d0:7f:b3:
4c:8e:e1:e9:96:ec:f8:fc:fe:9a:6a:b2:dc:27:b8:f1:8a:da:
f6:b3:97:d7:48:0f:ce:71:4e:94:8a:e1:1b:d5:4c:df:51:9b:
cd:75:4b:a4:08:c4:c5:9c:a5:f6:eb:87:b9:5c:c2:ef:b3:94:
6a:cd:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:27:30 2025 by rpki-client