Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: nE6l9zBbaMESuRSCcfa/selUwEUJTSBc8zT62PbtvXE=
Subject key identifier: AC:B5:83:27:9A:8D:5C:33:7C:47:0F:A5:7B:F8:BF:82:DB:FA:32:55
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 01962ABC10FB3451F7B5E25BEE81307B5B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 33
Signing time: Sat 12 Apr 2025 16:01:30 +0000
Manifest this update: Sat 12 Apr 2025 16:01:30 +0000
Manifest next update: Sun 13 Apr 2025 16:01:30 +0000
Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: CvvmGFZ+DJm7oTQtMZwtyokwiZpX7caOuBG9RBqVbnM=)
2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:10:fb:34:51:f7:b5:e2:5b:ee:81:30:7b:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Apr 12 16:01:30 2025 GMT
Not After : Apr 13 16:01:30 2025 GMT
Subject: CN=acb583279a8d5c337c470fa57bf8bf82dbfa3255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:ba:cc:76:55:dd:e1:fd:5a:4c:40:b5:43:
3f:28:6c:5a:09:74:7c:b1:7a:92:3a:01:1c:53:69:
04:8d:48:99:98:75:9e:05:43:2c:c9:10:7b:bd:c4:
d1:ba:0f:f3:4b:86:df:81:bd:78:4f:09:89:74:d5:
a7:90:ea:b1:e7:0f:8c:f0:db:0d:b3:6a:0b:07:a8:
69:f2:ad:dd:d1:2c:af:51:2c:1a:fa:c4:a8:78:27:
bf:7a:04:5b:a2:1b:b3:46:97:d5:af:c2:01:a0:9a:
ea:2f:c7:01:3a:4f:09:73:7e:5b:35:ad:53:87:62:
82:c1:92:88:b4:64:67:eb:fd:cd:c7:a0:93:bc:77:
c6:81:7e:29:19:7d:45:c0:1f:e4:1f:f1:45:28:9e:
ea:4d:d4:05:fe:5e:56:f1:11:57:f6:f5:f5:1d:0b:
af:aa:53:47:9c:d5:7d:08:f0:49:ab:39:f7:ee:a9:
95:f4:2e:a5:d6:45:0c:21:d6:b5:a0:93:20:e7:a8:
a4:97:c3:53:04:dc:5d:43:9e:30:b3:f0:ac:a5:c8:
7d:67:3f:b7:9a:d1:f9:c9:d9:47:99:c0:52:c7:21:
7c:47:d8:66:1d:f7:66:a0:32:4e:05:7f:2c:f4:56:
88:e1:fa:a5:db:ba:00:32:23:db:d8:91:c5:33:8b:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:83:27:9A:8D:5C:33:7C:47:0F:A5:7B:F8:BF:82:DB:FA:32:55
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:ae:a6:61:24:42:c6:30:10:72:0d:6a:6c:de:9a:72:8c:
68:56:76:26:92:fd:ca:96:27:c3:1c:16:3a:20:62:8d:98:2c:
07:15:bd:cb:ae:f9:86:5a:fa:bd:8b:95:02:84:e0:c6:bf:e4:
2a:3a:44:36:41:3f:2f:dc:65:e4:9d:65:30:eb:c8:30:30:e5:
43:87:03:75:4e:38:6b:a1:93:86:cc:5b:cc:c3:17:d8:b7:c2:
c6:47:8e:3b:f1:1f:f5:a1:61:c5:53:21:87:ae:cb:97:93:79:
5e:93:37:f5:ba:7e:1a:00:69:08:7f:73:8c:c2:39:8c:a2:df:
68:f5:12:04:4d:d7:c2:03:0d:73:66:bb:ba:85:b2:51:5c:92:
42:71:3e:97:cb:56:59:72:e9:33:ff:b0:ee:e0:6d:eb:fa:71:
75:e0:a9:b7:43:ce:05:4e:91:55:3c:9f:28:a7:ef:db:87:43:
f4:af:d9:88:be:8d:34:a4:69:1e:58:2b:13:95:94:43:16:81:
ed:19:f5:58:f4:c0:1d:bc:7d:25:0f:56:9b:6a:f1:40:24:9d:
4f:e4:30:22:fa:59:b5:8c:47:0c:5a:36:71:20:5c:e8:25:b8:
4a:31:c0:9b:ec:6f:6f:7e:42:0a:73:38:70:c5:a0:7c:9c:10:
97:d1:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:05:08 2025 by rpki-client