Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File: V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier: SPhDC8iosvXLweaw849TGXEnB0R0o7aN2upw/2WNLdM=
Subject key identifier: 0A:0C:44:A0:1A:A0:62:64:12:70:AE:3B:15:75:BD:7A:68:0F:DB:F9
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial: 019651917EC693B0C1DF6594190450779470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number: 14B7
Signing time: Sun 20 Apr 2025 05:00:11 +0000
Manifest this update: Sun 20 Apr 2025 05:00:11 +0000
Manifest next update: Mon 21 Apr 2025 05:00:11 +0000
Files and hashes: 1: A8RA-KyHreMNSgmJAylrJgsQAGI.roa (hash: nePGMmr2buSknOQjxf358rj5Sl4Q3WncEvIivf/SZEI=)
2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: cdCRVhPb5DiSYMjXJX00c+i+CFe1y4Pii3H90ggBC3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:7e:c6:93:b0:c1:df:65:94:19:04:50:77:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Validity
Not Before: Apr 20 05:00:11 2025 GMT
Not After : Apr 21 05:00:11 2025 GMT
Subject: CN=0a0c44a01aa062641270ae3b1575bd7a680fdbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:62:15:23:57:4c:fa:c7:c7:3f:d4:bf:73:
26:9e:e9:d7:16:ed:2d:2a:c0:c4:b6:15:46:c3:1b:
51:22:a2:ac:c5:a5:91:11:57:ce:ba:81:4c:33:04:
a0:35:28:2e:31:b2:43:0d:95:bc:5a:51:9d:90:d9:
5b:9a:b4:b3:7e:67:1f:7f:7f:bf:e7:c0:a4:0b:b8:
fd:76:d7:23:04:94:e4:5f:a5:60:3c:96:dc:a8:67:
7a:64:e2:c8:c6:c6:3d:22:29:d1:a4:7b:8c:a5:91:
1a:6e:70:75:14:6b:eb:69:10:3a:2a:08:cb:1d:ad:
55:79:fc:f4:8a:37:da:6c:b6:a2:fe:97:06:59:e1:
39:98:34:cb:79:e6:04:06:55:98:09:4a:c5:d6:d1:
fe:f8:4f:be:02:df:56:e9:3d:cd:33:30:24:3b:9e:
39:1b:60:7f:81:6d:78:92:eb:14:8d:1a:9e:e5:1c:
f7:fb:35:6f:fc:90:b5:c0:bf:d3:04:6d:ce:31:af:
33:f0:4a:3a:b6:a3:48:47:e5:69:17:94:fa:89:83:
0a:9c:57:59:5e:12:74:58:c5:e3:9c:f4:84:12:7c:
ac:79:01:54:23:1c:df:c8:e4:0e:5a:78:6d:b7:d8:
73:d4:58:44:98:89:f6:60:84:51:09:35:87:db:95:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:44:A0:1A:A0:62:64:12:70:AE:3B:15:75:BD:7A:68:0F:DB:F9
X509v3 Authority Key Identifier:
keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bc:35:01:bc:0f:ee:15:db:42:17:f3:7e:07:b1:f5:63:66:
6c:eb:fc:65:bf:39:d3:69:0f:fe:b9:41:0c:91:03:64:2b:62:
fb:b2:5e:fb:41:0b:db:11:8e:65:8b:46:89:24:ea:66:c5:3c:
48:50:91:af:73:24:6c:da:cd:d8:90:49:bc:d7:6f:bb:66:1b:
31:52:b5:bb:2f:65:c0:a3:24:e6:da:23:36:0b:41:18:3e:04:
f4:7b:0d:f6:af:bc:b4:c6:08:eb:0c:aa:1a:36:24:f6:56:9f:
48:32:3c:4a:68:17:ed:27:fc:b2:0a:b8:64:a1:27:82:3f:a9:
20:24:6e:b9:18:c5:b3:0f:a0:a3:37:3a:38:34:f5:48:3e:2a:
48:57:43:ca:20:12:57:8a:f5:af:80:9b:b5:72:7e:04:d3:ea:
6e:46:f2:87:ff:50:92:89:be:00:df:65:f6:1c:57:21:cf:e4:
83:40:22:68:7c:8f:cc:a7:18:7f:2a:ad:8f:07:9d:1a:63:d9:
61:c2:4b:21:7a:d8:e1:3a:8c:d7:3d:46:92:c1:98:a6:6f:89:
13:19:0d:0e:c8:36:52:d4:62:b6:6e:06:60:18:9c:74:91:fd:
e7:6a:b1:2e:ed:e3:0d:c5:98:b1:dd:56:89:2d:16:c2:fe:b6:
0d:4a:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:32 2025 by rpki-client