Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: P4znZjkwyBdAL9j2ksNKch96/EaP9LQQZHAMOGc5EtI=
Subject key identifier: 47:0A:AA:90:11:DF:A5:A8:2D:E8:68:85:5E:E4:E9:69:D6:78:53:68
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 01964F6D4ADF0BC2E4E7758B02EB4F5FAC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 03DE
Signing time: Sat 19 Apr 2025 19:01:24 +0000
Manifest this update: Sat 19 Apr 2025 19:01:24 +0000
Manifest next update: Sun 20 Apr 2025 19:01:24 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: icWHFPHGWYdhFlFaHJlYVskIzwdk1zndi0R3dvhQMic=)
2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:4a:df:0b:c2:e4:e7:75:8b:02:eb:4f:5f:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Apr 19 19:01:24 2025 GMT
Not After : Apr 20 19:01:24 2025 GMT
Subject: CN=470aaa9011dfa5a82de868855ee4e969d6785368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:77:b8:0b:60:1d:ea:03:1e:62:4f:6f:b9:
a0:e2:74:f3:78:b8:b6:4c:a6:7f:e8:e1:66:1c:3a:
64:d9:19:e2:5a:6c:6c:7d:b4:b7:1a:1a:e2:76:60:
53:7d:fc:c6:a7:3e:ac:fd:fa:dd:9b:66:b5:2c:ee:
2f:fe:03:a1:53:86:87:5d:e0:f1:f5:89:3e:03:aa:
29:45:70:73:d6:b2:ed:9f:f0:2d:f0:29:88:b7:00:
8d:cc:62:5c:c0:2f:15:ec:c7:e6:95:06:90:49:fa:
d6:7a:9b:42:ca:ef:c2:74:d7:37:25:7a:1c:f5:0c:
e5:15:88:dd:a7:6c:87:59:4f:e9:96:9c:c7:36:34:
9a:5a:3b:97:66:d3:9f:1e:d1:3e:f3:01:29:60:06:
cf:b3:fd:5a:75:64:ad:7e:a7:96:9a:32:2a:6f:ae:
a3:96:a8:c7:a4:db:45:9d:9f:34:ee:66:84:e4:46:
a7:56:b3:9a:32:59:d2:ea:ce:c4:f7:e1:38:36:ea:
e7:90:a4:4e:53:56:48:53:35:c7:2c:ed:74:e9:0a:
65:55:c1:4d:73:a5:6a:65:00:30:3b:e0:e5:ec:bd:
9e:04:d1:90:71:88:73:03:36:68:c7:19:c2:4b:8a:
20:05:1f:ae:92:39:8b:80:36:4a:93:a1:a0:1d:9d:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:AA:90:11:DF:A5:A8:2D:E8:68:85:5E:E4:E9:69:D6:78:53:68
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f5:f1:d5:99:cf:a1:ee:1e:5c:b6:f5:84:07:fb:9f:77:25:
5b:ea:c4:24:6c:b1:38:92:d2:25:ec:04:80:22:56:f5:cf:a7:
27:ee:c8:18:32:fc:09:b4:d4:b9:3a:81:e5:37:2a:29:9b:4b:
ec:c2:f4:1c:a5:8e:7f:b1:95:50:6c:d7:04:53:2c:b3:a9:de:
f3:15:98:e8:4a:2d:1f:03:31:4b:0d:09:37:a0:9a:51:31:5c:
9a:a2:41:e4:9c:a2:41:8d:f8:c8:b9:c6:10:ba:f6:c8:02:f2:
07:7c:7c:12:75:91:d5:4e:a1:07:76:38:d5:1d:94:20:8c:2a:
8b:0d:07:3d:54:59:73:8c:81:5a:64:9d:36:b9:48:1e:20:c6:
e5:0b:a4:e6:cd:7e:3a:b9:b7:2a:3e:54:e4:d0:b8:07:2d:b3:
38:09:ef:08:ac:42:87:30:7c:31:ea:74:4b:f4:8d:69:72:1b:
64:cc:cb:79:04:d4:3f:3a:48:92:71:cf:9c:0b:46:d4:23:cb:
15:bd:27:95:01:3c:b3:7b:8e:4f:6b:98:55:d4:80:83:c7:91:
87:0d:5c:eb:cf:c1:00:56:85:7b:97:56:fb:4e:d3:91:2c:c1:
ea:9d:e1:ad:2a:a2:8d:dc:33:d2:51:d7:29:69:4a:53:48:9b:
b4:fd:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:07 2025 by rpki-client