Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
File: vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft (raw, json)
Hash identifier: gkQTLHmMo49wK1E9ZYqkBHORIIID2+OkuPEvvCbIzmY=
Subject key identifier: 78:0C:F1:BE:68:72:FA:45:A5:40:0D:52:DF:41:64:95:4A:09:DC:27
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 01963C5382F1A0ABAC91CD5A6B04128C3EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 02:00:27 +0000
Manifest this update: Wed 16 Apr 2025 02:00:27 +0000
Manifest next update: Thu 17 Apr 2025 02:00:27 +0000
Files and hashes: 1: FnExCvLDVdYuTR08kgWAavX-Pk0.roa (hash: AIJMjDttEuZdQI2f5T19fqAfcHk4SoNhDhOU5X3/Gj8=)
2: SPSE4yPci_Rs0ulEes6U9Ga5aEI.roa (hash: OAmumDrq2brGzOON0ZBpmY/Uom5WD7nl6vre292Hhmg=)
3: db5zCybt_34-4-i-989NlftPaAE.roa (hash: t4OVx3KTrCCGv9kMRVOWKBYVAK6vdDRT4hnb6yO9KXg=)
4: vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl (hash: kOy+j2kpL9L++9YpM+j2NgDag6uHkBaOLuX8C2SICbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:82:f1:a0:ab:ac:91:cd:5a:6b:04:12:8c:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Apr 16 02:00:27 2025 GMT
Not After : Apr 17 02:00:27 2025 GMT
Subject: CN=780cf1be6872fa45a5400d52df4164954a09dc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:9a:b6:7d:a5:e3:54:48:0b:56:34:2c:ef:
44:3e:17:44:fc:47:5d:33:2e:73:80:ec:a0:6d:ac:
6d:03:a3:de:6f:7c:7d:b0:07:ee:df:0a:f9:56:c3:
51:8b:c8:96:5b:ca:cd:2f:2b:2a:dd:17:4e:16:42:
ad:97:51:18:ba:c5:5a:ed:55:24:22:53:fc:5e:e5:
91:e6:9d:c0:ca:e0:fe:d4:b6:62:4d:e5:f0:35:b8:
b0:2f:f2:89:9c:f8:b9:9f:a6:0e:e0:a6:59:5c:75:
37:8a:c8:26:5d:42:42:14:6d:ed:b0:79:7c:5d:fa:
df:05:5d:35:b0:57:20:03:a1:33:ae:45:4a:19:65:
1b:f5:07:42:c3:73:d5:6e:41:f2:4a:4b:bf:e4:d9:
37:dd:d6:63:5b:00:d2:90:d4:15:dc:4c:f5:3a:ad:
94:b9:f3:fa:34:d6:ae:ef:53:72:1c:c5:94:f9:d8:
1b:62:f7:97:c1:87:af:bf:60:96:15:c6:fd:36:7a:
ee:14:8e:28:b5:33:ba:2d:88:ef:fd:0f:36:b8:05:
15:ab:8a:49:13:31:3b:d3:70:d7:b1:f5:e8:39:10:
f1:5a:34:a6:54:00:6b:92:fd:61:53:cb:53:51:81:
00:ea:f6:71:a3:21:67:68:24:f9:14:5e:c1:e9:b2:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0C:F1:BE:68:72:FA:45:A5:40:0D:52:DF:41:64:95:4A:09:DC:27
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6e:91:9b:10:6c:5c:96:88:32:3a:50:fa:7b:42:d0:c0:86:
4c:1f:67:24:b1:40:fd:fb:3e:34:67:75:3c:19:23:c9:df:80:
a5:fe:67:ec:93:08:80:13:88:aa:52:6a:4c:42:3d:5a:a7:96:
26:8b:e3:6c:af:6f:da:0a:50:a2:dd:aa:4d:f9:75:c0:6e:c4:
94:54:b9:16:6e:b2:27:e9:56:5c:de:3c:20:a3:1d:e3:16:17:
e7:8e:f3:d8:71:89:ae:52:27:57:1a:45:62:25:ab:c7:e9:fb:
8b:ca:5a:7a:31:26:2a:42:60:65:2e:99:ab:c8:a5:24:1d:0f:
95:d4:02:e9:8f:b7:77:2e:e4:23:1b:c1:0a:c0:b4:2a:11:6d:
cf:03:a0:59:39:8e:20:c6:20:89:98:7b:61:08:93:0f:ef:db:
08:d6:d3:54:32:c3:15:d8:74:e6:f7:b6:a3:fd:dc:2e:db:b8:
f5:e4:36:f9:ab:7e:d3:61:ba:9d:0c:95:ba:97:25:3f:29:d7:
c5:cc:3d:56:af:9a:5c:9d:98:6c:4e:e5:89:b0:1d:b4:4e:56:
3b:dd:17:d1:5e:a9:a2:71:ee:5d:83:e5:5d:3a:34:28:96:94:
55:9e:58:14:89:2b:8b:cf:a2:9f:5a:30:59:80:d1:4f:ee:7a:
13:67:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:47:22 2025 by rpki-client