Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: Vc2u1nMUN/Ivz2obUe3KovCGCWCtJaekEpPQabert2U=
Subject key identifier: 0F:76:58:D3:EF:98:D9:F0:CA:60:99:DE:D4:45:7A:8E:FC:A5:C7:55
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 019659B96FC3E30EBBB036CF64C3F216816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 0F92
Signing time: Mon 21 Apr 2025 19:00:47 +0000
Manifest this update: Mon 21 Apr 2025 19:00:47 +0000
Manifest next update: Tue 22 Apr 2025 19:00:47 +0000
Files and hashes: 1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: z+Z0jAbeLE39G5Ie7F1DX0Zzhe2d5SZfup9pslEZrtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:6f:c3:e3:0e:bb:b0:36:cf:64:c3:f2:16:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Apr 21 19:00:47 2025 GMT
Not After : Apr 22 19:00:47 2025 GMT
Subject: CN=0f7658d3ef98d9f0ca6099ded4457a8efca5c755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:35:05:60:a9:c3:da:a3:f7:71:99:b9:03:
e5:cd:18:8f:06:3e:c5:43:db:91:55:93:e5:2a:59:
76:b3:4b:bf:82:a8:5c:92:df:ee:f4:98:93:e1:16:
d3:a5:c7:1d:2c:68:53:c0:14:38:36:d7:aa:be:07:
9d:8d:2c:ef:f0:2b:d7:64:c1:53:60:c1:50:f1:03:
99:49:fc:73:0c:c6:16:1e:31:1f:85:6b:82:fb:f0:
80:05:9c:5d:ff:23:b1:e0:0a:d5:ac:dc:29:70:69:
c3:90:76:ef:73:f0:e4:5a:6e:ad:9e:11:54:e7:ea:
ec:78:57:86:7e:8b:bf:63:18:f0:a5:17:a8:5a:95:
32:a4:d2:cb:fb:35:c1:9a:1e:3c:d9:25:6a:a4:9f:
b0:7b:02:d9:7a:0c:59:b3:a4:9a:49:1a:53:39:6d:
e3:ac:25:9e:c1:67:5b:45:de:b6:03:e8:52:47:49:
87:63:3c:35:be:d0:a2:10:fc:14:ff:0f:83:cc:a3:
9d:03:94:c4:9f:42:8e:b3:99:04:14:8a:24:52:e5:
fe:ac:34:ae:64:a6:de:5a:aa:08:c5:df:54:63:21:
7e:e4:ae:cd:6c:fc:e0:e9:d8:ea:f5:52:e6:24:23:
ef:07:95:6f:d9:72:12:3d:e6:19:3f:f8:be:27:d4:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:58:D3:EF:98:D9:F0:CA:60:99:DE:D4:45:7A:8E:FC:A5:C7:55
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:29:5c:33:22:fd:3f:1c:a3:22:8b:d4:17:8f:ce:2d:27:c7:
6e:51:19:f5:fa:c7:04:5a:63:bc:75:39:3e:c1:1a:97:92:1d:
b2:9e:f2:2d:d4:5f:cc:f5:f9:b3:cd:b9:be:38:03:7b:3a:dd:
44:2c:f0:01:d1:d9:10:83:22:db:45:e5:95:2f:78:d6:32:0a:
99:0c:66:5a:6f:0a:ee:2b:82:21:d5:b8:e8:6c:90:69:a8:99:
b4:56:bb:12:af:4b:f8:f7:06:47:99:0a:81:19:e6:6c:81:12:
cb:cc:6b:bf:0d:54:b7:bb:6c:b1:b1:39:4d:b1:2f:2b:31:3d:
d7:bf:15:aa:57:d0:ae:0b:6d:0f:12:b7:60:70:72:37:90:c4:
7f:7b:aa:cf:d3:c8:3e:66:22:e2:66:ec:35:27:81:54:58:09:
15:18:62:33:54:c9:2d:68:36:08:f5:04:12:da:d6:ed:1f:76:
c9:76:9c:3e:b0:e7:dd:ea:76:57:e5:d3:fe:6c:7b:4b:67:36:
a1:9a:4f:85:45:80:70:79:50:3f:5e:a7:4c:a3:d6:69:a7:1e:
3b:a4:ae:e9:1e:c4:35:85:6e:7e:6c:e4:c7:f1:53:ed:2f:f3:
82:5f:d0:a4:18:2c:7e:b7:65:ae:f6:d8:5c:b3:89:bd:ef:85:
89:d9:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:35:07 2025 by rpki-client