Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: /QqgLA8HZ/yuvQukg2DAvHnkNpaYOq3Oqi1eTZx4ybk=
Subject key identifier: EB:BB:A6:18:FA:18:BE:AA:7E:BF:BA:40:64:9F:83:11:C5:12:4A:9C
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 01958BF25039579D04BBED75FF7098BAD913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 20:01:08 +0000
Manifest this update: Wed 12 Mar 2025 20:01:08 +0000
Manifest next update: Thu 13 Mar 2025 20:01:08 +0000
Files and hashes: 1: iGx0ASbC0IY_V38PaAKzK-E2dmk.roa (hash: H2ehYzvvVTx5ItHmx2FObso7EsAZmXEeB6Z16rR/dFQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: JqepcZYC5+9fpW8abo2dSJEk+x/gIvw1UkR7DS5WFls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:50:39:57:9d:04:bb:ed:75:ff:70:98:ba:d9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Mar 12 20:01:08 2025 GMT
Not After : Mar 13 20:01:08 2025 GMT
Subject: CN=ebbba618fa18beaa7ebfba40649f8311c5124a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:88:a4:fb:9e:b7:0d:b4:02:c1:ed:55:7e:
de:dc:19:c6:70:c4:dd:99:98:51:84:07:67:39:31:
68:8f:2f:0c:b0:06:e6:d5:90:93:d1:8d:fd:60:fc:
ea:1d:7f:97:a7:9a:11:12:34:e3:00:86:81:cf:f2:
7c:98:cf:53:78:c0:1e:e9:d1:38:1d:79:42:7f:86:
c7:0b:79:4f:c8:25:d8:77:8e:20:f3:dd:22:34:f5:
9b:f9:d7:32:03:a0:70:2d:d3:b1:20:0c:d8:62:8a:
8e:c7:d2:86:28:ba:05:f1:aa:c4:02:26:b2:44:55:
01:6a:46:a6:89:46:a3:4d:2b:3c:0d:6b:d5:db:91:
bd:d4:ae:36:c1:b0:0e:7d:ff:5d:70:14:d1:9e:30:
12:be:ca:6b:1d:be:c6:a9:91:75:02:41:3e:4c:63:
03:73:57:b6:36:51:e7:f2:61:09:cf:df:d9:d1:fe:
14:05:c5:bf:56:e0:6f:c5:c0:9d:f9:cf:1d:d1:c5:
9c:f2:62:9a:a5:59:41:5f:43:3a:4b:b8:6b:13:2b:
00:de:7f:15:f1:86:19:f5:b7:a5:68:1a:56:ff:98:
f7:f9:8b:bf:e3:34:59:e8:a1:86:1a:d5:cd:de:f6:
d6:46:65:7e:57:13:57:67:72:b8:32:d5:99:cc:7d:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:A6:18:FA:18:BE:AA:7E:BF:BA:40:64:9F:83:11:C5:12:4A:9C
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c1:43:bc:ef:59:6f:d0:8f:b4:bf:08:74:a1:3e:e7:11:73:
44:58:5a:1a:fd:7f:a7:10:72:fc:47:aa:92:61:88:77:35:62:
c9:ff:52:aa:8e:a4:19:56:d6:0d:05:10:ab:ba:75:52:7f:79:
68:e3:d5:ca:a3:3b:4d:18:ea:c7:1e:86:96:0d:7b:ee:2a:80:
81:c7:e6:75:19:28:c8:80:de:13:c0:9b:3f:d1:c9:09:7d:1f:
26:47:5a:4b:f2:ed:f5:a3:1d:c1:01:00:6c:d3:4b:94:d8:3a:
50:8e:16:ca:b8:93:21:f1:a0:62:14:c7:47:cb:aa:22:6a:d7:
bb:4d:64:17:84:99:dd:05:16:eb:df:f4:65:f8:f7:66:a1:b8:
dd:72:15:79:fc:22:40:fa:01:08:3f:9f:f2:d6:2b:40:01:96:
7d:3b:f3:46:90:16:72:fd:5e:47:e5:7a:c7:dc:ba:f3:2e:ab:
78:2f:ed:30:90:26:b7:a9:8c:85:05:f6:c0:11:0e:38:67:07:
e3:20:4f:fe:46:12:a3:5d:01:65:8b:26:8e:a6:af:85:da:9e:
83:2f:94:ee:09:70:bc:a0:41:1d:be:d4:c7:18:dd:e2:e0:9d:
f2:d5:69:04:fe:f0:62:f4:ae:4d:4d:8b:c0:9e:0a:c2:84:a0:
76:ce:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:57 2025 by rpki-client