Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier: gU5kgHhTBrxrItD9qGHlEk3rdT3foJ7UG9pNTyIbyrk=
Subject key identifier: 72:92:BC:E9:44:F9:48:59:CB:94:1C:5A:3C:45:62:8E:F5:F3:AA:4B
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 019654C984748A690873649CBBDF465475E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number: 1344
Signing time: Sun 20 Apr 2025 20:00:14 +0000
Manifest this update: Sun 20 Apr 2025 20:00:14 +0000
Manifest next update: Mon 21 Apr 2025 20:00:14 +0000
Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: pSI9+WvGyj8bMrLt1RI0Hq6n/OuyBdWVjvn98jvFAr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:84:74:8a:69:08:73:64:9c:bb:df:46:54:75:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Apr 20 20:00:14 2025 GMT
Not After : Apr 21 20:00:14 2025 GMT
Subject: CN=7292bce944f94859cb941c5a3c45628ef5f3aa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:4a:cc:eb:14:b6:41:1c:c0:cb:0f:01:59:
11:d4:ba:d2:49:e8:d9:0a:57:f2:0b:1b:72:ec:ae:
5c:01:12:05:4c:72:7f:43:4c:72:24:8c:de:ad:af:
eb:2a:cf:35:95:7a:50:12:95:df:96:5f:55:b5:31:
3f:50:d8:be:aa:01:10:2f:19:cc:50:e8:24:2c:6d:
8c:76:7d:a3:db:9d:02:3c:60:ab:a4:6d:fc:ff:2f:
3e:8b:4b:8a:e7:95:9d:55:a0:ab:58:97:39:e0:b2:
71:49:4c:11:05:3c:2a:f9:fc:a0:c3:1c:7a:78:d7:
eb:f9:1e:b4:0a:f1:98:6d:93:99:64:8a:be:5c:09:
5f:d0:7c:59:fd:1f:46:c7:af:f6:73:72:9d:13:16:
99:78:3d:ec:4e:bf:db:66:f9:43:91:d9:bb:a6:7c:
96:ed:35:e0:d7:4b:00:54:86:41:6f:10:8d:46:f1:
c6:ef:fa:6d:ec:01:67:b6:31:e7:a7:4c:a8:d5:3b:
dc:4f:c5:92:ad:63:59:38:d0:1c:94:a7:bb:13:d9:
a6:bf:be:09:2e:fd:4f:68:e6:0d:99:fe:a1:ac:9c:
66:4a:f4:14:80:3b:5e:fd:59:0f:6e:6a:c2:40:f9:
32:7b:3f:bc:73:02:74:80:1c:63:78:19:b3:7a:a3:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:BC:E9:44:F9:48:59:CB:94:1C:5A:3C:45:62:8E:F5:F3:AA:4B
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:30:f5:ec:05:fc:ea:69:2a:23:db:f6:cd:ed:fa:d5:1f:
87:21:f6:1f:19:6a:b3:01:17:f7:92:b5:95:0d:a7:c7:b3:94:
dc:6b:07:67:48:65:cc:0c:93:96:b9:81:5c:35:76:2b:09:14:
28:cf:53:93:81:28:af:21:0e:df:d0:91:7d:07:1e:d0:9c:03:
b6:5a:f9:80:98:b8:b6:c2:8e:77:df:20:f2:77:af:61:12:4b:
f2:8e:cf:43:f1:23:f0:f6:61:e6:84:bf:a6:f5:8c:f6:9f:3c:
16:72:7d:e4:e7:bd:cc:94:db:6b:b1:90:06:04:58:63:1b:79:
42:fa:70:f4:bb:07:59:5c:be:37:ef:83:b2:05:d5:d6:c4:ca:
cf:6d:15:7e:17:b7:f0:15:12:2b:bc:b9:c4:49:d9:36:94:d9:
ae:12:aa:31:3c:c3:0f:23:85:3e:92:84:15:9f:a4:c8:e6:64:
69:4f:40:9e:c4:5d:c4:39:95:ef:54:d2:4f:28:e8:21:e2:a7:
a9:76:24:ff:5e:44:72:2a:56:33:dd:7f:4b:8b:db:42:54:90:
a7:41:56:ed:13:16:c6:5c:b1:c4:ab:e3:e6:0a:7e:02:84:10:
7d:7e:e0:5b:85:c2:9c:c2:aa:ea:04:a3:1d:b3:23:50:73:35:
22:e1:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:28:45 2025 by rpki-client