Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File: _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier: U4RPAfMV6WqmcCdOTrOa4K8mV0u8NFdrFBL/BlSnVAI=
Subject key identifier: 8A:DD:81:BE:A0:E1:01:B0:8A:14:EA:32:94:06:EB:5F:B2:13:F2:1B
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 019656138D459F459B6F1246BCD949DA9897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number: 0937
Signing time: Mon 21 Apr 2025 02:00:44 +0000
Manifest this update: Mon 21 Apr 2025 02:00:44 +0000
Manifest next update: Tue 22 Apr 2025 02:00:44 +0000
Files and hashes: 1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: oVGSjGcNgdk5he8q7DWe5lqSu1eM+lIJ91zKd8C2o3k=)
2: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (hash: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:8d:45:9f:45:9b:6f:12:46:bc:d9:49:da:98:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: Apr 21 02:00:44 2025 GMT
Not After : Apr 22 02:00:44 2025 GMT
Subject: CN=8add81bea0e101b08a14ea329406eb5fb213f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:41:1f:10:b4:c3:92:4b:69:26:a4:f1:dc:
a7:63:46:16:6f:a4:55:6c:b1:7a:92:34:2e:2c:75:
11:e4:a4:17:79:c1:71:79:bc:05:54:47:98:85:9c:
55:5e:22:4c:fb:85:07:c7:a6:3a:ad:9b:8c:6b:5b:
c7:e6:ee:50:fd:70:9d:42:2e:35:3b:db:3d:69:af:
20:f5:c0:1b:b0:d3:9a:c5:b0:14:ad:ce:ac:8e:65:
19:49:18:7a:16:ea:2f:cf:8a:ee:b7:61:d7:d7:e2:
55:ee:4c:1e:e1:60:2f:7d:07:7c:9f:33:f8:e7:51:
56:73:d4:5c:f8:b9:dd:4b:df:4a:2f:6a:72:46:51:
91:a9:cd:58:75:bb:30:e8:91:d5:a2:fc:4d:a2:c5:
80:f7:a9:d5:e1:2e:d8:a0:63:1b:44:a3:a0:9b:b4:
79:e9:ee:ad:47:4d:16:fe:8c:83:45:20:34:ac:df:
0a:81:8e:3d:a6:00:7e:8c:82:4c:2a:90:a4:20:a1:
fb:e4:0b:14:e0:e9:64:ad:c6:34:d7:d1:4f:a7:91:
fd:8b:39:30:72:43:6d:51:65:66:0c:ae:1e:7d:82:
71:24:99:be:34:32:b9:07:b0:99:04:78:cf:a5:2c:
3b:d2:e0:c1:5d:1b:96:1b:c5:c0:9d:e2:69:ee:7e:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:81:BE:A0:E1:01:B0:8A:14:EA:32:94:06:EB:5F:B2:13:F2:1B
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7b:51:39:d0:9d:fb:f8:8f:37:95:44:95:93:f2:76:be:b1:
be:80:80:be:ae:a1:62:8e:41:b9:7a:24:54:88:fe:c6:a4:e8:
c5:b1:36:c5:e5:c5:0f:35:4b:1e:bc:11:66:77:2e:bc:0d:eb:
01:8b:d0:fe:22:d6:f7:9f:5c:bc:5e:31:2d:92:6c:bc:f8:d7:
6f:4d:a1:82:0d:7f:fb:c1:36:10:42:6c:eb:b4:53:4f:4c:aa:
d8:5c:db:52:29:bd:09:9e:62:41:a1:be:c6:72:d0:73:d6:03:
fa:24:45:dd:83:41:9d:b7:19:ad:5c:a0:57:b9:04:47:4e:0b:
ae:a1:c4:cc:0a:7c:e7:be:7d:0e:89:37:a5:69:6e:5b:8e:93:
6e:8d:dd:45:09:ba:45:92:d8:e6:15:f5:e1:60:3e:ca:88:51:
e3:98:9c:60:64:49:23:fd:87:13:d3:12:82:89:4f:cd:4a:c6:
38:55:e2:df:f3:3f:a9:f2:09:94:ab:3c:e9:f0:27:b2:57:27:
ff:2c:0e:d8:f0:19:52:ed:68:e9:ef:2d:3a:30:48:5e:38:f3:
c3:99:1d:98:85:f0:c0:c2:e7:ce:75:0f:40:bc:87:a1:3b:34:
87:d9:5e:76:8c:26:7c:f1:9d:a1:30:91:d0:92:aa:46:f9:ff:
ae:95:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:33:15 2025 by rpki-client