Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File: 92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier: blOCPNzQClPSJ3ySkQqaEngLL/O/gBRaT+QSUbfmGDY=
Subject key identifier: F8:06:FF:92:C3:98:F1:D2:B2:F3:C3:E6:8B:47:94:66:2A:34:61:AC
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial: 01964F6D42C6438A27DEA18927B6886E9252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number: 0D12
Signing time: Sat 19 Apr 2025 19:01:22 +0000
Manifest this update: Sat 19 Apr 2025 19:01:22 +0000
Manifest next update: Sun 20 Apr 2025 19:01:22 +0000
Files and hashes: 1: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: AUJ92TS4NmFKSgWRcI1enetOj/zc+TQCIUsMLPEy/cQ=)
2: Bgx4v1LhphfEVxiPgOOZhtKcYxk.roa (hash: PMSZWU3KeqqHp7dEdYFCinejkuywjWErsotBlVqvg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:42:c6:43:8a:27:de:a1:89:27:b6:88:6e:92:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Validity
Not Before: Apr 19 19:01:22 2025 GMT
Not After : Apr 20 19:01:22 2025 GMT
Subject: CN=f806ff92c398f1d2b2f3c3e68b4794662a3461ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:b8:a5:e5:45:84:d8:a4:9d:2a:1b:2a:4a:
c6:81:82:1a:fe:15:4f:fb:8e:16:5d:70:b3:55:4b:
25:56:b1:7f:54:d2:b3:1e:6d:25:de:e2:bc:af:e5:
d6:51:02:fd:95:15:2d:d7:8a:04:f8:21:00:50:34:
56:01:82:e3:4f:21:9a:18:1d:c3:33:55:f3:b2:b6:
58:0f:a8:3b:7f:7f:70:7c:a4:04:0b:3d:2f:62:fc:
e0:89:f1:26:43:6a:e9:29:79:18:eb:58:40:ad:83:
b8:b5:d6:90:21:c5:76:6d:05:fb:0f:4c:e3:2b:c8:
58:39:af:bc:4b:1a:2b:eb:61:2f:a4:3c:2f:41:1c:
d5:52:33:20:e1:0b:3d:31:92:cd:c7:cd:06:83:9f:
3f:34:9c:88:6a:53:4d:48:33:ba:46:76:4e:c5:45:
78:cc:97:2d:c1:63:51:18:b7:79:45:e4:2f:6d:db:
ee:26:ba:29:0a:2f:71:2f:70:fc:87:85:99:ec:7e:
f3:61:67:ed:cc:da:93:d8:45:04:16:d9:3b:9d:50:
28:1e:1b:97:c4:24:9e:94:7b:e0:ab:14:13:d6:1c:
b9:48:27:b3:6e:f9:29:b8:ad:cb:de:d2:e5:e3:20:
08:67:c3:38:15:59:3d:b6:2c:ab:41:13:57:77:0d:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:06:FF:92:C3:98:F1:D2:B2:F3:C3:E6:8B:47:94:66:2A:34:61:AC
X509v3 Authority Key Identifier:
keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8b:ec:62:79:6e:9c:6c:b7:7c:50:51:eb:c5:ae:be:50:94:
35:5d:18:53:1c:06:8d:fb:c2:8e:21:cd:3d:03:bb:89:d0:79:
ba:63:fe:81:1b:b0:9b:6f:11:96:1e:a4:40:a1:49:22:6c:9c:
4d:42:a0:55:2f:b9:60:63:d3:b8:c8:5b:15:ee:4f:79:a4:d5:
60:d8:dd:32:a7:6c:be:06:37:9a:56:ff:10:65:93:22:cc:57:
3c:fc:c2:68:87:d7:38:85:89:b0:18:74:35:9f:4b:ed:b0:6e:
bc:52:7b:be:7d:a7:a7:c8:1f:ed:43:1e:7c:a0:c6:29:94:a3:
25:1c:9e:1f:8f:31:dd:53:34:81:3e:b4:75:a6:d7:4f:50:6b:
7e:4b:d8:11:92:f3:e7:0c:50:89:6f:33:15:3d:7c:e3:a2:d8:
82:b3:35:b4:3e:13:fb:30:d5:02:d1:7e:d8:42:d3:d6:f4:5e:
b0:4b:ba:13:02:c5:3f:22:cc:a4:17:9b:92:68:ce:2a:db:20:
b1:2d:ea:ee:95:01:70:c4:ad:92:d8:e6:cf:2a:69:14:9b:91:
1a:9a:89:c6:9f:41:9a:2a:2b:07:b4:e6:20:e5:fd:49:c8:fb:
e5:69:f7:0c:33:c2:14:d8:d8:5a:9e:8e:fd:dd:d5:b4:51:a4:
5b:35:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:37:30 2025 by rpki-client