Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier: Cni75cskXmcPTGYxM+nBvNEKsN/7KjuVodOv2iV1iHg=
Subject key identifier: C9:A9:C7:6D:63:8E:BD:8C:A1:4F:3F:82:F2:16:58:26:E3:86:2C:4B
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 01964669C1A0BAD5C7E6DFFFE0B03A8F5AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number: 0FDF
Signing time: Fri 18 Apr 2025 01:00:58 +0000
Manifest this update: Fri 18 Apr 2025 01:00:58 +0000
Manifest next update: Sat 19 Apr 2025 01:00:58 +0000
Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: WVSHNIHS4fki0f6wvlT71VCkx1cvVB0kpsWPzgEzl+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:c1:a0:ba:d5:c7:e6:df:ff:e0:b0:3a:8f:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Apr 18 01:00:58 2025 GMT
Not After : Apr 19 01:00:58 2025 GMT
Subject: CN=c9a9c76d638ebd8ca14f3f82f2165826e3862c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:94:05:89:14:53:b0:9b:52:44:26:4a:8a:
4d:99:33:99:d5:e3:2c:3d:a2:37:53:30:40:c5:40:
fe:41:93:32:46:e8:6e:af:67:76:70:54:6c:9a:04:
96:fd:d5:b7:a3:40:b1:72:b4:e6:6b:b4:64:65:e5:
bd:5c:de:9b:84:07:32:d1:df:f5:c3:07:77:df:1d:
e9:36:cc:f4:a5:47:ba:19:0d:db:9d:b7:15:a6:e2:
fa:34:ec:a6:6b:c3:3e:7e:89:24:e8:78:55:db:44:
32:c8:15:79:5f:50:c9:d2:67:76:4f:0a:58:82:99:
4c:d1:a8:73:98:09:7f:9e:99:98:51:72:75:1e:c3:
d9:f3:31:b4:05:08:37:13:4a:78:e4:2e:9d:a8:6b:
60:48:58:78:95:54:01:7d:df:f4:d9:e0:f3:ed:e7:
85:b1:6f:81:1f:77:3c:81:15:ee:02:67:22:77:0c:
6b:23:5f:14:5f:dd:3b:39:af:94:f3:01:6c:f8:d9:
e0:1c:da:27:c5:fe:dc:81:ca:b8:73:46:b2:fc:38:
2b:3b:9e:b8:78:f9:dd:64:51:56:dc:64:2a:f1:5f:
92:dc:04:1c:7e:8e:30:6d:f0:25:e2:91:ca:5d:fa:
47:ff:a0:a8:6c:71:69:62:29:98:17:af:20:fb:38:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:C7:6D:63:8E:BD:8C:A1:4F:3F:82:F2:16:58:26:E3:86:2C:4B
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3e:ec:1a:6e:d4:a8:b8:35:e2:e1:c3:f1:2d:43:fc:ec:b2:
5a:39:5e:f6:5d:ee:58:f3:28:35:87:bc:35:15:b4:f8:17:cd:
b4:35:d5:88:eb:2a:3f:f0:3c:30:9c:ad:1b:79:c5:49:69:88:
33:7e:62:db:9d:13:7a:df:0f:d0:1b:49:36:1e:b3:a4:76:0f:
6b:6c:a3:88:4d:14:79:3c:35:c2:50:31:19:04:44:9a:c7:67:
51:15:5d:ca:10:d1:72:da:29:23:08:aa:7c:17:a1:b1:64:bc:
89:85:f7:b4:30:af:b5:bc:2e:c5:f7:4a:90:b0:dc:f9:48:42:
2a:12:2d:7f:29:17:12:9d:40:c3:ca:51:d9:e6:e8:9d:33:f3:
73:ea:91:2a:6d:1e:12:b9:3c:3e:00:9b:23:e4:c2:71:1f:36:
fe:34:b9:ed:03:8b:a1:8d:3d:86:4c:5a:c7:8a:2c:0e:c2:1a:
b7:88:4c:3f:a2:36:22:a2:44:71:2d:6c:5c:69:78:31:f6:8c:
39:be:1a:15:22:f4:e6:92:c3:e8:29:df:4d:1a:78:6d:15:98:
5c:4b:38:8d:d1:a3:37:57:cd:6f:f3:4f:70:32:f6:88:02:4d:
64:5e:60:2c:ed:83:20:f0:dc:4e:72:a9:2c:cc:87:05:50:5a:
0d:8e:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:22:55 2025 by rpki-client