Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: 7VOOZM81PTZw/lvhh/3BLsLIz3WmVlupisY+F0nVRXc=
Subject key identifier: EA:F7:D1:D0:56:5F:6F:ED:13:39:49:01:9F:DF:34:19:81:6D:BD:1B
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 01962904E1C6913DDBD8EA275F65942BB2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 11FF
Signing time: Sat 12 Apr 2025 08:01:47 +0000
Manifest this update: Sat 12 Apr 2025 08:01:47 +0000
Manifest next update: Sun 13 Apr 2025 08:01:47 +0000
Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: 3rXQRSDh1SCuZOlf5Iph2lmYQPY+nwL32P2n+EMtTPw=)
3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:04:e1:c6:91:3d:db:d8:ea:27:5f:65:94:2b:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Apr 12 08:01:47 2025 GMT
Not After : Apr 13 08:01:47 2025 GMT
Subject: CN=eaf7d1d0565f6fed133949019fdf3419816dbd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:a8:22:86:28:c9:de:99:77:b4:13:8f:29:
76:00:f0:30:d5:0a:37:6a:c5:87:c2:75:c1:1f:f3:
59:a5:82:14:fd:9c:5a:75:07:b0:33:c8:f9:6d:3c:
20:6e:86:85:00:f2:35:9e:66:69:b6:68:20:27:0b:
e1:b0:7a:a7:2d:e6:f5:cb:19:3c:a5:1f:e7:85:0e:
a0:83:bb:ac:2d:b4:a7:95:1b:2a:b2:13:4e:11:e6:
10:61:be:0e:79:3d:71:2a:a5:22:c7:5d:f1:85:a8:
08:74:58:ce:b8:0d:c9:b4:ad:fd:78:35:31:e6:49:
2a:33:a1:ad:32:9b:2a:4d:fc:4e:c6:44:51:34:e7:
39:83:50:89:1a:c1:00:25:42:bd:80:6b:b7:1e:93:
d2:fe:30:50:62:43:96:0c:3e:46:fb:bd:0a:46:ed:
77:29:89:e4:01:ff:cd:4f:69:10:e8:63:59:c3:50:
39:cc:e7:0c:47:54:ae:ef:a5:f0:cb:0f:ed:3a:5e:
08:2b:76:44:be:23:a0:14:fe:b0:ee:49:83:ff:89:
fc:94:4d:75:73:57:28:cf:9d:00:b2:59:83:43:3e:
75:84:44:61:9f:b4:21:0d:6c:ee:a3:c1:82:7b:0f:
53:8b:2d:76:93:50:49:04:20:4a:71:71:d1:89:f3:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:D1:D0:56:5F:6F:ED:13:39:49:01:9F:DF:34:19:81:6D:BD:1B
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8a:20:2d:2c:9c:7b:a3:f6:22:27:23:ed:98:a5:a5:24:a6:
e3:86:92:e2:70:3f:6c:89:78:c4:43:ed:dd:39:c5:76:00:ff:
0b:97:18:69:f1:00:3e:a1:29:b8:47:0b:2c:1a:f2:08:ff:bf:
57:c4:a0:a4:5f:b0:13:7f:bc:96:ba:97:1b:cd:fc:dd:aa:69:
61:de:74:e3:55:fb:f7:9c:9b:a4:ad:2e:0b:2a:97:59:aa:d9:
9d:74:51:63:46:36:1f:63:b1:cc:0c:e4:7e:40:d3:fa:9e:12:
2e:87:7e:7a:da:00:b2:fc:9d:4a:d9:6b:7c:8d:dd:9f:6e:9d:
46:cb:4c:59:d8:7e:c0:0f:ed:3e:bd:ac:2e:f1:49:ad:a3:9a:
8b:f6:4d:03:05:9c:c4:96:67:b3:16:8a:ac:d2:11:2d:82:15:
be:18:9f:f8:65:03:c7:47:76:1a:f7:19:74:1f:1e:23:49:1c:
a1:9e:23:b1:37:af:69:6a:b9:69:a3:f6:ac:ea:30:f1:32:e2:
32:bf:cd:84:ed:82:fe:ef:03:f5:1b:2c:33:b4:c7:d3:fa:c8:
d4:9d:38:2a:5a:8f:04:1d:9c:72:3b:0c:c5:e4:e7:52:96:85:
be:79:ee:22:1f:0f:e8:a7:28:04:86:a0:ca:ed:bb:44:4a:bc:
62:e1:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:48:27 2025 by rpki-client