Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: /qBZbxPSi4MvoYRgLusrECMZ3mSOIZcc9iiVWfecGRY=
Subject key identifier: 74:96:CE:76:2F:34:18:2C:9B:57:9C:8D:F6:31:71:F4:A9:6F:09:D2
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 0196466947498BBD4785ABFFF59D7EBBD08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 11DC
Signing time: Fri 18 Apr 2025 01:00:26 +0000
Manifest this update: Fri 18 Apr 2025 01:00:26 +0000
Manifest next update: Sat 19 Apr 2025 01:00:26 +0000
Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: 5hvGyM4WlFH7cQ5xVU6bw9m6Kg8dKGGg2MKPqgVDKFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:47:49:8b:bd:47:85:ab:ff:f5:9d:7e:bb:d0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Apr 18 01:00:26 2025 GMT
Not After : Apr 19 01:00:26 2025 GMT
Subject: CN=7496ce762f34182c9b579c8df63171f4a96f09d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:a5:0b:b3:c2:1f:a0:63:76:33:de:17:3b:
41:83:9a:63:c9:c4:90:60:a1:57:49:ef:5f:0e:6e:
bf:f1:17:92:bd:39:f8:db:7a:e5:4b:33:9c:2c:70:
27:b6:5b:6e:35:08:88:c6:aa:41:d6:3d:85:a7:2a:
85:dd:be:f9:42:ab:84:03:0c:ad:dc:6d:c4:94:3e:
9d:d2:04:01:9d:96:49:bc:ee:8d:4a:a2:c4:71:8f:
9c:28:0e:a2:df:3b:f7:59:5b:c1:37:5c:83:16:93:
b9:09:fc:4b:b3:27:f7:f7:dd:d8:0d:0d:ef:99:68:
78:0d:25:21:23:39:ff:db:f0:31:23:ea:a7:d5:4f:
6b:bf:ff:3c:4c:69:b9:6d:79:46:14:bd:4e:a4:7b:
6a:47:45:a1:47:1a:a5:6c:66:47:3f:ca:f9:ed:c0:
c1:75:0d:e8:b5:4a:b5:e5:24:2b:32:03:78:8d:4d:
9e:ce:1b:cc:72:ad:7f:15:8a:52:6a:1d:ab:5c:d8:
48:a5:f4:4c:01:b8:32:10:ff:81:cb:50:cc:6c:b2:
93:3a:ac:4b:db:60:36:b8:32:c5:6f:40:4c:cd:82:
ef:8a:97:75:ec:ee:57:29:5a:95:27:9b:aa:c1:92:
51:7f:6d:ea:3e:46:0f:16:ed:c5:97:d4:7a:d1:fb:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:CE:76:2F:34:18:2C:9B:57:9C:8D:F6:31:71:F4:A9:6F:09:D2
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d2:53:24:b3:90:08:63:e2:8d:f8:ca:aa:ff:38:d4:f6:4d:
95:3b:cf:30:db:cd:eb:e6:e5:c2:17:c3:44:3c:59:d5:aa:28:
28:85:bd:71:ca:ad:25:7d:40:6e:2e:ff:be:c5:a9:46:d8:8e:
8f:d2:38:be:a3:ea:52:82:38:b1:a6:12:5b:2a:f7:ce:15:8e:
11:e4:71:52:36:25:1e:2e:fa:13:12:30:91:67:50:7c:46:17:
c9:99:e8:39:df:5e:20:67:36:6a:e7:6b:ce:91:92:09:95:45:
1e:1b:ea:9c:11:15:e7:ed:c9:97:fc:ca:a5:e8:b9:31:4c:e1:
8a:6d:5f:d6:c7:5a:9c:df:72:6f:e7:fe:ef:51:90:1e:5e:71:
9d:5d:7c:85:d9:22:d6:1e:b2:99:22:5c:68:d0:69:8c:c4:e0:
83:69:4e:f6:e6:21:c2:5f:e0:74:dd:5e:d4:36:4e:04:56:15:
ba:06:38:5e:e7:cc:3f:30:ce:e0:bc:4b:6b:a3:dd:c8:d5:62:
aa:31:cd:46:d0:d7:a2:c3:e7:a9:c8:78:0e:59:60:ea:85:b6:
24:7c:44:db:b8:3f:8d:a7:11:96:fa:78:84:f0:74:d2:98:f9:
34:19:5d:b8:10:cf:bb:6b:d3:93:56:6e:c9:bd:fa:39:6c:9a:
50:66:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:17 2025 by rpki-client