Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: zTF24U8uR+dJmlSpHqkbE0BLMz4zK8qEvKeHdoFpCUQ=
Subject key identifier: 8C:7A:26:79:A7:F3:11:51:0D:FC:EC:9B:27:C0:A9:2A:0A:0D:B8:A9
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0196545C2BD36BE34EE85917FBA75FCB67AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 12B9
Signing time: Sun 20 Apr 2025 18:00:48 +0000
Manifest this update: Sun 20 Apr 2025 18:00:48 +0000
Manifest next update: Mon 21 Apr 2025 18:00:48 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: BQl05hmYOHhLoCc1pf8CEMbezgzB3eyYYdZFc0NFP/E=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:2b:d3:6b:e3:4e:e8:59:17:fb:a7:5f:cb:67:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Apr 20 18:00:48 2025 GMT
Not After : Apr 21 18:00:48 2025 GMT
Subject: CN=8c7a2679a7f311510dfcec9b27c0a92a0a0db8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:e5:0c:4d:14:63:23:36:15:3e:10:f9:70:
47:03:45:96:2b:96:f8:ae:ad:d8:7b:d5:20:a7:fb:
f6:5d:89:d2:e4:4b:41:ab:87:7d:9d:67:1b:cf:21:
e5:08:93:49:e1:33:bf:59:e9:56:63:45:74:b5:ae:
7f:07:4c:0b:43:34:a1:f8:96:3c:10:72:cf:78:f3:
07:3d:85:c0:60:58:09:16:1a:20:a5:f9:70:57:7e:
16:b3:56:3a:d8:e2:3d:a7:93:59:b9:4f:f0:86:19:
c7:9c:e7:33:a9:ad:95:74:b6:23:0c:a2:b9:fc:22:
eb:c8:7a:66:06:42:9e:59:51:22:ed:ff:1e:6c:bb:
03:ef:ed:a8:f7:db:f3:99:36:3f:ad:60:10:2c:15:
0f:7b:82:68:90:06:c8:8d:61:f3:09:71:dd:4f:79:
3c:a1:a0:b0:da:5f:fd:b8:a5:7b:f1:7d:00:d3:b8:
2b:d9:cf:01:c1:3b:00:6f:5b:a2:3f:15:4c:af:fb:
60:ba:c2:85:46:64:69:db:9b:0d:bc:ac:4f:9c:93:
3c:f9:99:26:64:a6:48:fe:b0:12:c5:e8:e3:54:31:
a5:7d:b2:76:d9:95:04:c1:4e:4f:7b:55:93:ac:24:
43:a9:12:ee:9a:2f:f9:1a:5d:7a:23:e7:ae:54:00:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:26:79:A7:F3:11:51:0D:FC:EC:9B:27:C0:A9:2A:0A:0D:B8:A9
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e0:1c:02:ae:9f:e0:1d:f0:a3:85:11:e6:1b:27:6f:4c:a1:
3f:87:f8:89:99:ac:32:ec:93:76:1f:cf:4b:7b:4a:97:76:0d:
f6:47:bd:7b:5a:d5:24:fc:dd:0a:6e:4a:60:d2:8d:ef:e5:9f:
21:6d:59:24:2f:50:9b:8a:f0:7c:f1:98:e4:ba:dd:99:d7:18:
5c:17:d7:86:c6:15:73:32:6b:51:91:89:ba:e3:49:55:fc:8b:
3a:f7:4b:f8:c2:80:09:02:e0:05:58:eb:46:41:5c:fd:fe:97:
d6:69:49:2e:81:a7:f3:8c:8e:f0:1a:3a:ba:08:d8:56:02:3c:
9c:c7:89:fd:3a:44:a7:be:d1:37:de:12:fa:f6:d6:05:58:d3:
ef:f4:37:01:b6:98:02:5e:9b:3f:c8:4a:33:7b:85:e3:9c:f6:
b1:91:bc:1d:dd:46:ee:cf:0c:a3:37:7a:5f:b1:89:8c:32:09:
4d:0a:bc:aa:de:16:4c:50:4b:5d:72:83:d9:57:96:2e:41:95:
06:e4:84:f2:64:30:76:6d:03:64:7a:89:45:f1:ea:7e:52:9f:
ee:39:67:51:e5:39:d0:6b:f9:c5:c6:e9:35:80:c0:66:a8:fd:
56:f1:ec:13:c1:ba:3b:40:2d:98:80:d1:31:ad:cf:fd:f8:0e:
d2:d2:97:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:49 2025 by rpki-client