Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier: gZPW3RPgtCpmCeLpkykUXLaj9vYwi+NSMNznCqj7ipM=
Subject key identifier: 5F:97:AA:E5:5F:4C:5B:6A:BA:06:F5:C4:F5:BC:E2:BF:3A:73:B0:5B
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 01964D103114484EB4D876B1A0D2B46E6A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 08:00:28 +0000
Manifest this update: Sat 19 Apr 2025 08:00:28 +0000
Manifest next update: Sun 20 Apr 2025 08:00:28 +0000
Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: 0iivj4U0ZwDX/T1f3wna8HCIVYjynjB6U7ag73ygv/k=)
2: s5i_5wQ4_7M-HybTJU4UVXQHFrc.roa (hash: cMPzuVDjBzNlIE9nP4d6ZjU1EE0q53jdrLL/axSPLpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:31:14:48:4e:b4:d8:76:b1:a0:d2:b4:6e:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Apr 19 08:00:28 2025 GMT
Not After : Apr 20 08:00:28 2025 GMT
Subject: CN=5f97aae55f4c5b6aba06f5c4f5bce2bf3a73b05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:dd:45:11:84:df:b7:d9:60:2f:58:42:88:
10:b1:b1:e1:89:52:de:79:a2:c6:c7:15:5c:16:c4:
8c:74:e8:cf:2b:9b:f2:b7:78:ce:48:96:09:76:09:
3e:b9:79:a0:94:8f:89:b6:c9:e4:96:bf:ca:6b:b5:
d6:6d:13:2b:f2:04:ef:43:76:33:6b:df:a5:c8:96:
1e:62:09:2b:43:bb:0c:09:ab:03:30:9a:54:c8:1b:
95:3c:53:81:50:38:cb:2a:13:c1:47:44:5c:95:ea:
a4:99:17:8f:e7:26:07:2d:de:60:a1:ba:93:09:32:
b0:1c:5d:3a:9e:98:56:ab:48:ff:c4:b9:07:c8:39:
21:cf:04:eb:74:a2:55:04:64:fc:3c:2e:fc:cf:a9:
57:ae:e7:ed:52:96:07:c9:0f:d1:43:17:c1:d0:54:
27:73:dc:56:1e:8b:f6:1c:f6:79:ec:63:da:de:20:
0f:3c:18:67:58:10:3f:9c:08:51:55:1b:27:50:3a:
16:a0:1a:81:71:dd:70:4d:8d:b1:41:cd:d5:ce:9e:
e2:dc:64:dd:2f:e9:6f:a8:cc:bf:ec:9e:66:9c:09:
27:3e:06:69:d1:aa:27:09:7f:9c:84:8d:86:73:19:
88:03:62:fc:65:5b:54:6f:58:cb:9b:0c:2a:e1:5e:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:97:AA:E5:5F:4C:5B:6A:BA:06:F5:C4:F5:BC:E2:BF:3A:73:B0:5B
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:59:77:a8:a0:9e:60:85:8d:51:47:77:d8:63:23:d1:78:
f8:bf:46:36:a2:ad:57:7b:22:6a:32:20:36:ba:ef:6e:2f:72:
3b:5a:83:fb:5f:65:c3:86:72:2d:ff:58:27:84:e2:50:c9:31:
ea:55:f7:7e:6d:15:a5:f5:74:61:c1:06:3f:bb:dd:4d:b2:50:
7d:66:84:7f:a5:21:c5:1f:89:55:ca:35:77:05:ec:81:36:b1:
2c:2c:29:5b:8f:26:dc:d8:90:09:0c:d6:93:f9:d7:6b:11:25:
66:b6:06:09:22:33:2e:d1:f6:16:d5:d7:68:a7:ca:34:29:30:
2d:ff:30:db:be:f4:bc:62:5a:b3:1f:9b:6b:d2:ff:d5:79:2e:
a3:3d:e5:b4:75:56:d0:60:37:28:d2:0e:85:47:57:73:bc:74:
8e:98:32:84:be:2f:0f:46:5e:f6:ca:79:e7:6d:ba:5f:ee:f3:
0e:f2:8b:04:eb:36:28:ac:5b:e4:68:e9:5c:21:b2:c4:11:32:
a7:4f:2d:5f:14:a1:f0:d1:74:44:ed:9e:5e:29:ca:70:2d:fd:
0b:10:f1:db:11:c7:d2:8e:cc:bb:e9:75:41:ef:25:27:a5:48:
0e:98:34:66:05:d9:1d:d0:8c:0e:b9:5c:f8:97:7c:b0:44:76:
aa:d4:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:39:38 2025 by rpki-client