Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: wIdOmz8zEW+qZcgeiq0U0qxZ/PjB7lYxLUEIGFPF3uA=
Subject key identifier: DB:CF:8D:B3:81:19:63:6E:DF:B8:CB:A0:34:98:33:6E:FD:38:AF:74
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 01963D667CB2C028C1BA8BED7D0B4DE63899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 0327
Signing time: Wed 16 Apr 2025 07:00:48 +0000
Manifest this update: Wed 16 Apr 2025 07:00:48 +0000
Manifest next update: Thu 17 Apr 2025 07:00:48 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: s5Qzr5nqw8njDJNZzEVm+ZG9V3/MepIa45G3XfF1R6c=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:7c:b2:c0:28:c1:ba:8b:ed:7d:0b:4d:e6:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Apr 16 07:00:48 2025 GMT
Not After : Apr 17 07:00:48 2025 GMT
Subject: CN=dbcf8db38119636edfb8cba03498336efd38af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:e6:13:df:03:9b:79:16:34:8f:b7:0d:44:
d3:86:2d:44:0e:1a:f2:3e:81:a3:f9:6e:16:36:f1:
1e:ef:b1:37:75:a2:70:f6:03:01:62:fa:a5:45:57:
b7:b1:58:79:01:a1:db:54:d7:cd:20:fe:62:dc:e7:
21:d3:ab:c4:29:e2:17:59:e4:c3:f5:6e:97:b3:5f:
0d:5c:1f:f8:ce:b9:ec:67:e1:75:7b:31:c3:0b:a7:
22:29:92:3d:b9:bb:98:5b:4f:63:24:fd:b5:b8:78:
89:f8:07:32:3b:68:b5:54:42:75:18:b6:46:75:6e:
26:e3:89:62:eb:b3:bc:85:18:14:6f:4c:44:19:e2:
62:38:44:60:e5:73:00:79:d5:93:87:3b:09:8c:d2:
e6:e7:cf:ba:e8:ec:92:2c:2c:28:7b:af:b8:b8:87:
44:79:88:60:f0:d8:92:63:dc:82:e1:23:2c:af:66:
8a:cc:cf:81:c0:a4:35:12:3d:30:9c:ea:84:0a:a8:
94:e7:c4:f6:55:70:0a:e1:d9:60:af:d7:7b:e8:79:
e2:68:1d:88:97:d3:4d:fb:00:79:98:47:8c:59:aa:
d8:de:28:e5:53:a3:9c:08:42:7e:18:21:f6:f9:b8:
a4:55:6f:6a:2e:a8:34:65:d3:a8:97:1a:1c:cf:cb:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CF:8D:B3:81:19:63:6E:DF:B8:CB:A0:34:98:33:6E:FD:38:AF:74
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b0:e4:e1:e8:11:2a:d3:5e:b5:1b:89:44:6d:55:88:55:da:
cb:13:01:b0:fd:4f:67:78:3b:8f:a4:92:c9:fd:f2:41:cb:ff:
b3:73:49:6a:b9:67:23:61:f6:86:a4:e5:a8:b4:24:bb:ab:db:
ee:ac:81:f3:ee:37:68:c2:f1:c5:c8:d7:e2:3e:ce:22:76:74:
a4:91:07:cd:1f:46:ba:46:aa:e1:e4:d9:b1:a3:17:2b:d6:d9:
d5:e3:b2:c7:b8:63:53:c8:1e:7d:46:e6:6b:9e:28:d7:ed:58:
a2:f9:75:ff:1f:cb:a2:c9:28:de:3e:df:da:1a:2d:ce:c4:a3:
a4:67:4b:dd:a6:1e:e1:94:87:68:10:b3:3c:7e:58:97:d9:a7:
47:e7:95:d8:10:cb:51:af:55:ef:1d:fe:09:d5:09:80:31:ab:
ff:23:3b:89:5d:63:c1:10:2f:7e:cf:02:80:97:1d:c6:17:d9:
27:2c:61:40:64:8a:ed:5e:22:5f:19:a4:b5:d5:47:27:a8:ee:
97:8d:19:37:d0:2d:a7:24:61:b6:f1:a0:e8:dc:f0:e2:6b:4a:
b7:95:3c:b0:93:96:70:e8:91:35:b7:e0:7c:ea:d7:c0:52:31:
00:94:1a:30:8d:d4:d7:1a:05:02:ae:33:f3:93:a1:b9:a2:02:
11:9d:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:48:55 2025 by rpki-client