Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: 7Vu/CwAaq7G/n0yYSRXNHTDMtJCTRE9SF5J3CZxslbQ=
Subject key identifier: D0:3A:77:30:C9:FC:D4:71:EC:19:1C:FE:EB:32:64:09:FD:EC:6D:5C
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 01964FDB0154D8E8FAD4083C16F75E46C604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 21:01:14 +0000
Manifest this update: Sat 19 Apr 2025 21:01:14 +0000
Manifest next update: Sun 20 Apr 2025 21:01:14 +0000
Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: lfsJfUqUE8DCLQ8X1zwlEqbATNQkUWR9uh2rx80DBb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:db:01:54:d8:e8:fa:d4:08:3c:16:f7:5e:46:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Apr 19 21:01:14 2025 GMT
Not After : Apr 20 21:01:14 2025 GMT
Subject: CN=d03a7730c9fcd471ec191cfeeb326409fdec6d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:5c:1b:97:c1:a9:18:68:92:56:05:ef:e6:
c1:19:0a:64:6f:c8:3a:4f:d7:38:7c:ae:2d:f0:2b:
b5:2b:ac:2c:92:66:44:91:c2:9b:d2:d8:3c:d8:0c:
c7:04:10:ca:83:84:5f:1b:03:69:1a:cb:31:2b:62:
1a:59:d3:79:62:8a:41:54:3b:e1:d5:13:13:bf:5d:
d3:be:d0:b1:1e:a8:29:41:c7:bd:ce:49:a9:a3:54:
7e:47:09:a4:c2:e0:3b:35:4c:21:37:22:54:9c:42:
68:bd:1f:cd:63:e0:1b:e5:ea:f6:dc:6a:dd:ce:69:
40:3b:c9:e4:33:b0:71:5b:e6:3b:8a:d0:09:5d:17:
f4:e3:5e:fc:05:41:e6:fb:b1:71:eb:53:f5:1b:fa:
19:f9:59:ff:b5:84:47:fd:f9:38:27:bd:03:9f:69:
11:d2:08:31:b7:f4:93:8c:fa:54:0a:a0:2b:23:15:
b4:7f:e0:7a:08:54:fc:37:1a:c5:a6:4e:97:f0:d2:
9a:25:ad:da:ae:e8:76:ba:8f:25:61:e1:3e:a5:a1:
ac:fd:aa:0c:13:65:d5:e4:8e:d1:d2:61:6f:f4:55:
8a:63:5e:a7:fe:58:5c:3b:cc:7d:85:aa:f3:1a:bc:
7e:9b:fc:b3:a4:69:68:0c:b5:ef:1d:e8:7b:23:bd:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:77:30:C9:FC:D4:71:EC:19:1C:FE:EB:32:64:09:FD:EC:6D:5C
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:fb:ef:00:73:8f:74:fc:0c:91:40:11:59:75:7e:c9:14:
0f:e4:61:a5:59:b5:20:d9:78:21:af:50:d9:34:09:6c:30:40:
33:71:66:40:2c:df:d0:aa:38:3b:41:1a:76:a4:2f:6a:05:89:
4d:82:e8:04:01:12:34:6b:7c:2b:f8:05:7e:1c:e5:4d:f6:dd:
0a:1b:8e:d5:68:22:e1:fe:b2:7b:76:20:35:f1:78:65:c2:d8:
7b:84:bd:62:db:f0:b5:d1:45:19:86:91:ba:79:27:de:ab:33:
8b:d8:49:21:9f:27:43:2c:c7:32:db:31:e5:83:58:78:ac:09:
aa:10:1e:8d:5c:2a:68:ab:8c:72:ba:47:ee:6c:3f:59:11:77:
8f:61:17:02:9e:50:04:5d:9b:02:c4:97:10:c8:32:7c:b5:cc:
ca:83:99:71:5f:a9:72:2f:3c:80:a3:13:67:c0:8a:68:e5:0d:
9d:ff:c4:04:ff:ac:12:ec:52:98:44:62:87:dd:cc:c2:03:8a:
de:af:e7:97:78:40:d0:f6:17:32:72:2e:48:db:e0:8a:b5:7c:
a3:47:1a:23:58:4a:c0:90:38:2e:7a:ac:ae:27:f6:39:fc:5f:
2d:c6:d4:11:60:8d:04:be:79:0b:7e:de:e5:a2:bb:eb:f6:ed:
13:7a:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:36 2025 by rpki-client