Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: dYwjz6ujbKU8PEKKrT5QHLR7avscZnGmqkmY1ubcpww=
Subject key identifier: 95:3D:16:F5:8C:C4:50:3B:A1:DE:1A:AD:AC:59:5E:B8:71:1E:A5:11
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 019611A0FB09904DB8578C6D9E5FAD47DC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 14DE
Signing time: Mon 07 Apr 2025 19:01:24 +0000
Manifest this update: Mon 07 Apr 2025 19:01:24 +0000
Manifest next update: Tue 08 Apr 2025 19:01:24 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: UgQqRBxh/pbbuhAyVNep9jGQHEJyBKXI+aOLmpWbHDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:fb:09:90:4d:b8:57:8c:6d:9e:5f:ad:47:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Apr 7 19:01:24 2025 GMT
Not After : Apr 8 19:01:24 2025 GMT
Subject: CN=953d16f58cc4503ba1de1aadac595eb8711ea511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:df:71:4c:b4:1a:04:0f:61:de:57:fd:c9:
f1:23:d3:bf:c7:f7:e5:05:bf:99:2c:d1:32:68:85:
5b:93:27:fa:f2:99:d4:2c:6f:9c:d7:40:d9:6a:cd:
68:ec:3c:c2:99:0e:3d:3b:93:3d:91:20:07:59:a1:
5e:a1:34:2c:33:e8:87:25:97:4b:02:4c:74:b2:6b:
8f:56:c5:27:2a:8a:3d:25:17:2f:44:48:4a:5e:c8:
95:03:b2:48:a1:79:b6:c1:3c:05:5b:11:6f:18:1c:
e7:95:7d:b2:6c:12:37:62:49:fb:6e:88:23:87:34:
0c:42:fa:ab:cd:6d:8b:7e:74:92:ca:cc:4c:ae:b7:
06:22:f1:a4:99:8d:36:f1:0b:23:27:56:65:64:73:
79:88:b8:a9:4f:5a:78:21:0b:24:97:75:a0:54:31:
ae:ee:b9:9c:a2:fd:6d:a4:61:2c:03:3b:d3:2c:12:
1b:19:88:54:0c:e0:51:87:3f:83:f2:df:5b:09:e6:
7d:24:7f:e8:7e:80:38:11:3d:81:bc:9f:8f:e1:ff:
12:68:e4:28:83:7e:d5:9b:ae:69:95:aa:2a:94:20:
0e:ae:96:24:82:bd:a3:56:79:4f:a3:e7:fe:07:85:
d0:eb:7a:a7:7e:59:f6:bd:c6:c0:05:29:2d:32:dd:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:16:F5:8C:C4:50:3B:A1:DE:1A:AD:AC:59:5E:B8:71:1E:A5:11
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:49:3f:ac:a3:33:5b:39:78:e6:58:5c:52:11:73:7a:88:
bd:14:63:d5:fe:91:d3:a5:09:53:2a:ee:26:05:62:eb:35:2f:
39:a6:e0:3d:0f:43:f0:ec:ca:d9:7a:cb:e9:c6:d1:5b:a4:3e:
e4:cc:0c:ad:da:f3:87:4a:61:fc:3a:0b:51:65:ef:ea:d3:0a:
ed:1d:82:1b:5e:eb:3e:70:8d:61:f6:42:46:a9:fd:aa:7e:6a:
41:86:ab:dc:da:62:76:a3:db:48:f5:5f:fa:a5:e4:3d:08:42:
0b:11:14:6e:fd:4f:2f:6c:3d:a9:51:3e:4e:46:3c:47:c9:f5:
33:14:75:7d:e3:62:4d:53:14:9c:91:74:74:04:73:94:30:a7:
b6:9e:fc:d2:e8:7c:d5:53:14:18:2a:cd:6b:1f:2f:75:63:5d:
e2:88:96:cb:81:1c:a8:c5:40:22:56:ef:ee:1d:cb:37:22:0e:
f3:c1:74:d1:5e:dd:38:60:92:45:d1:ea:7b:2b:89:97:6d:6a:
9e:07:29:6f:f7:44:72:a9:b4:58:57:17:e8:ce:59:75:c4:ff:
74:3f:a0:51:17:e9:cc:4f:dc:ac:8d:a6:95:13:d2:80:4c:95:
00:81:50:38:ce:ee:f9:61:fb:78:ef:52:15:bb:f6:4b:f8:6e:
23:ec:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:49 2025 by rpki-client