Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json)
Hash identifier: 3wJd/W72errOWS75UwrC6lH1p6cFFwlfcKeIxwt1TGI=
Subject key identifier: A3:89:FA:F2:ED:D7:18:A8:8F:9C:E3:CD:94:82:7A:4F:07:A3:1A:A7
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 0196120EFE0F8A27DF3AD4545A66C7F38A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 21:01:34 +0000
Manifest this update: Mon 07 Apr 2025 21:01:34 +0000
Manifest next update: Tue 08 Apr 2025 21:01:34 +0000
Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=)
2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: tquvpq2v1lOGMBtDRrSZbLBzNqOrg1wK7sz2nwYLV1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:fe:0f:8a:27:df:3a:d4:54:5a:66:c7:f3:8a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: Apr 7 21:01:34 2025 GMT
Not After : Apr 8 21:01:34 2025 GMT
Subject: CN=a389faf2edd718a88f9ce3cd94827a4f07a31aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:83:3b:32:eb:36:0d:53:a2:77:c0:f3:26:
52:37:e9:1d:76:1a:1f:78:41:9e:6d:f3:4a:22:82:
dd:51:d0:b1:8b:06:82:70:f6:6a:62:60:5e:1e:80:
b4:65:68:28:07:c6:aa:4e:da:69:ea:21:cb:ba:5d:
fe:f0:ac:b3:44:8c:17:9c:a6:50:8f:15:cf:d7:ba:
3a:0c:3f:ce:2b:3d:c7:47:0b:7d:cc:9b:5c:68:c7:
78:cb:aa:01:1a:af:18:66:3b:4d:e5:2c:11:49:a8:
78:f1:cb:e3:aa:8a:8d:e6:41:c1:f8:89:15:dc:00:
fa:3c:6c:07:20:34:4c:64:37:05:e2:8f:ef:0e:d7:
e8:84:fc:16:ce:76:9f:a7:0a:a2:2c:df:10:85:99:
30:f6:7e:03:9b:90:4d:1f:38:fb:d8:ce:fc:11:39:
46:7b:f1:52:f2:7c:20:39:69:34:af:8a:ae:8a:96:
17:c9:c7:62:2b:00:c2:8b:88:02:9f:58:9f:36:40:
0b:28:79:ce:fd:4f:15:10:73:de:e2:5b:c5:1e:c7:
d9:05:22:2a:68:b3:9f:fa:c6:f2:6f:da:34:75:84:
ab:25:06:e7:8d:1b:db:2e:30:28:f6:d1:cc:3e:2b:
a1:48:46:a5:1b:3d:bb:eb:df:a4:a0:93:04:60:e4:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:FA:F2:ED:D7:18:A8:8F:9C:E3:CD:94:82:7A:4F:07:A3:1A:A7
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:9d:86:4a:76:d6:fa:ac:f6:5e:35:df:a9:9f:7e:a2:84:
35:15:f5:14:ae:a0:95:e6:4a:d8:81:6a:af:d1:15:db:88:ea:
a2:db:b2:ad:d0:61:f4:92:16:20:14:97:e7:7a:27:a3:e3:35:
e5:2d:0e:8f:c6:5c:eb:29:14:39:52:a7:0a:71:9e:e4:9e:91:
a3:34:e3:81:d0:a4:26:86:28:ec:a7:77:c5:e0:6d:41:3b:81:
e5:78:8a:00:b0:5e:d4:f1:c4:87:9d:be:73:81:55:a8:45:2d:
5c:53:47:bd:8c:4e:3b:90:00:fb:62:87:b9:2a:18:90:5f:a4:
83:bf:5c:8d:bb:39:80:d4:de:36:25:79:3c:cb:0a:db:92:1b:
69:51:c9:15:35:a3:85:c3:1b:6e:9a:c2:dd:b7:67:14:86:d8:
7a:5d:8d:aa:8d:0d:f6:70:85:d0:8b:fd:fd:b5:61:c2:f8:0e:
23:19:f4:cd:d9:a6:51:09:2d:b3:d4:a4:41:7a:11:58:d2:6b:
49:fb:b5:ac:0e:64:f5:18:34:13:9e:a3:67:a6:6e:3c:b8:1e:
68:c4:85:48:50:81:5f:fe:d9:9c:59:22:31:04:c0:e0:2d:73:
8e:bf:c5:99:f4:9e:10:9c:9b:23:9b:c0:b7:b6:39:90:48:92:
1f:da:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:44 2025 by rpki-client