Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
File: VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft (raw, json)
Hash identifier: AWMuJEFbAXYzFOdvfZIuexMhAsgHelHSacODDMrWsrk=
Subject key identifier: 4D:4E:3F:BE:48:EE:F6:5A:E4:1A:CC:14:05:61:05:F6:BA:4D:6C:E1
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 019657943FD22A6624D89C258A6D55F17D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 09:00:55 +0000
Manifest this update: Mon 21 Apr 2025 09:00:55 +0000
Manifest next update: Tue 22 Apr 2025 09:00:55 +0000
Files and hashes: 1: 46uMqFoZIbx_W9-E8n9u53LtPPw.roa (hash: 2dilAY9A0HBjLWWldEcSomY7yF95pmwR+zYOHTlJZo4=)
2: IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa (hash: snBSRgtB4DOLpSGdb4h6kFLqnhtBFWYeDh0vluESnyk=)
3: VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl (hash: RCz/Bd639nN8Jtqelkxh4itzkNQ0SeQSfiY1JgaPeDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:3f:d2:2a:66:24:d8:9c:25:8a:6d:55:f1:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Apr 21 09:00:55 2025 GMT
Not After : Apr 22 09:00:55 2025 GMT
Subject: CN=4d4e3fbe48eef65ae41acc14056105f6ba4d6ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:36:5c:88:ab:49:66:83:15:63:2c:23:24:
db:53:e9:67:90:58:81:eb:55:5d:e3:3a:12:5b:8c:
e3:64:f8:d2:4f:af:07:b4:64:b5:19:53:fd:86:8b:
ed:70:8d:61:79:6e:e6:36:40:32:bd:50:99:4c:28:
6f:d9:95:f3:72:d5:8b:5f:5d:99:8e:cb:dd:d7:1a:
91:57:9f:20:3b:91:d5:9e:fa:35:43:44:6a:cf:67:
85:53:04:11:34:b4:1d:3d:eb:8d:33:1f:0b:6b:1f:
5a:dc:7e:0b:92:44:84:ab:51:53:9c:f3:06:fe:17:
90:0a:49:55:fa:86:fe:8c:53:f4:28:89:70:d7:77:
41:09:44:02:b4:eb:a2:c4:8a:9c:4a:a5:de:c5:a0:
2b:3b:29:87:4b:2e:b7:12:8c:0a:f2:75:71:63:af:
f0:ad:04:ee:7d:68:ae:39:83:ea:e2:ba:30:84:54:
0f:f4:e6:12:11:7b:95:90:cd:5f:0a:ad:6c:b0:29:
32:c0:4d:cf:e8:36:4c:7a:a4:ee:43:3a:66:a0:5d:
7a:b6:8d:86:81:76:97:09:b2:c7:ce:27:0d:07:8b:
85:ab:63:77:e2:d1:17:3e:85:5c:40:4c:ff:ec:11:
92:ca:40:f1:a1:7e:38:4c:24:23:77:9d:0e:9a:0e:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:3F:BE:48:EE:F6:5A:E4:1A:CC:14:05:61:05:F6:BA:4D:6C:E1
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:90:3d:bc:e9:b2:de:d8:e5:8f:c4:6d:59:c4:f2:50:b3:2d:
cc:8c:1c:fe:0e:f4:2f:98:cb:76:48:e1:09:dd:e6:22:6b:3c:
fe:39:43:10:fe:7c:78:d0:0f:3a:aa:4a:2e:4e:b1:87:d2:ca:
a8:a3:cc:0a:bd:8f:c4:a8:68:41:32:19:d6:f9:9e:1e:8f:2a:
31:4a:92:05:f9:46:e2:ec:33:d6:d4:f6:1b:0c:2b:fb:af:15:
e8:59:09:bb:a2:aa:16:1a:22:cd:c9:7f:bc:af:5e:48:4d:92:
94:64:ac:e5:7f:ca:03:32:83:83:01:7e:3b:0e:3a:64:b8:49:
5c:5a:8a:9e:c5:8f:5c:04:e2:0d:20:dc:86:8a:c5:6f:7e:85:
8b:4b:32:9e:2e:5c:d0:15:ad:26:ed:c6:44:63:e8:0d:80:66:
11:2d:0a:dc:d6:7e:30:4b:4d:d5:1a:70:0d:cc:89:f6:99:9c:
c9:f0:24:78:e6:36:b9:55:96:0c:35:7f:b1:24:c6:8b:29:64:
a1:4f:c0:ad:70:e3:02:88:dd:84:3e:b0:b5:c9:a9:1e:3c:a0:
e6:37:ee:f5:ea:dc:2e:7e:b4:18:48:8d:64:f4:a9:bb:f1:bd:
c2:dd:f8:3f:6e:d3:f2:2d:ab:69:a7:7f:b6:eb:e5:da:bf:73:
77:cd:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:28:50 2025 by rpki-client