Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File: vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier: Ghr3NMJ3OPKwuto2MSt720S9VvgZ6RNjw2/lIZ+CDSA=
Subject key identifier: B0:14:15:E9:FC:C7:B6:6F:4D:68:79:3C:38:E6:D9:8C:91:C1:A5:70
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0196507F222F95926780810DD0C3F73007FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number: 1510
Signing time: Sun 20 Apr 2025 00:00:31 +0000
Manifest this update: Sun 20 Apr 2025 00:00:31 +0000
Manifest next update: Mon 21 Apr 2025 00:00:31 +0000
Files and hashes: 1: 1B6A9qa7KF81whAgrnv2KejzGGk.roa (hash: fbDtOi1s8oPbJKd6w9Zwx51Tf1HUbRzTLL7akFEQ9HM=)
2: IahDGP-i6VZriKXBsEnZCAjLxgQ.roa (hash: z6ZadpnmLWXnUrqDsvmd8VdfOzGOWV1JcSwpVi9K+wA=)
3: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: 8JA2v4dDCgee40PgVBej2OplQuRomEi+f/9pQVwyxG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:22:2f:95:92:67:80:81:0d:d0:c3:f7:30:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Apr 20 00:00:31 2025 GMT
Not After : Apr 21 00:00:31 2025 GMT
Subject: CN=b01415e9fcc7b66f4d68793c38e6d98c91c1a570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:58:ab:c4:74:14:9a:8a:25:c7:f7:fd:c3:
41:70:8e:38:ad:21:0a:c0:01:6c:5d:4d:9e:38:e3:
fa:fa:67:20:bf:53:f1:96:4b:87:18:9e:d9:ec:73:
b8:cf:1a:5f:23:75:55:1d:cd:0e:09:0b:9b:5a:69:
c7:cf:e9:a0:cc:44:cb:2a:91:0d:99:aa:21:0f:72:
ec:31:87:36:f5:ef:73:f3:4a:ee:7d:0d:05:a2:97:
73:75:07:fb:9e:cf:31:46:1d:f6:0b:d2:d3:52:da:
f8:ea:43:10:ae:d9:c7:7a:39:e5:0c:49:d3:26:66:
68:3d:0c:f5:bc:7e:67:d0:3d:9c:e2:6e:91:86:51:
0c:14:3d:f5:d9:83:f2:9e:bb:1e:38:17:2d:47:b1:
cc:32:e3:b7:ce:87:5d:fd:b1:48:7e:4e:91:35:82:
58:51:01:97:c7:53:c9:b2:a4:4e:a4:b5:21:ea:78:
b6:12:2d:da:82:a7:fe:c5:89:5d:5d:9b:c4:80:af:
6c:3d:9a:01:f1:b2:b6:5b:ee:eb:97:21:a7:ab:1e:
f6:0a:43:84:db:e4:b0:e3:86:ae:95:00:d9:f5:1b:
99:7d:15:95:fd:91:96:e4:ae:bf:86:68:fe:72:f7:
1a:17:80:f9:22:03:f2:73:f6:71:fc:15:8c:4e:a1:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:14:15:E9:FC:C7:B6:6F:4D:68:79:3C:38:E6:D9:8C:91:C1:A5:70
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a6:cb:cd:d0:c9:56:e7:c5:2c:94:c8:e5:a7:92:65:84:d3:
ed:09:6a:47:bd:e8:c8:e4:b5:ef:e5:61:1e:b9:d2:53:b8:7f:
15:70:13:10:0a:9d:88:74:2d:5c:d3:1d:f5:4f:10:57:67:53:
5e:3b:cd:31:09:3b:41:ec:7f:cd:2e:03:c9:d0:ac:8d:c2:52:
62:34:c4:1c:f0:d4:18:15:50:13:62:ac:86:0e:fc:a2:d7:0e:
6d:3a:2b:d0:f6:62:da:b7:a0:81:f1:dd:c5:c2:95:3d:33:88:
3d:13:f2:00:b6:cf:c7:9a:ce:be:81:6b:71:1c:c8:94:84:f6:
40:dd:47:7a:71:66:98:13:91:51:04:84:f1:59:b6:57:61:6c:
ba:1a:4b:8a:03:85:7e:10:2b:80:a5:e6:0c:6b:7a:14:8f:94:
3c:21:ce:4f:b1:b8:b7:31:d1:28:d9:a3:c0:df:a4:20:a3:50:
83:e8:ea:6d:84:61:73:57:62:c7:c3:c9:d4:73:e5:fd:31:17:
95:5f:a9:c7:5e:2b:af:9c:0e:a1:ff:1e:57:a4:8b:1c:e9:3e:
d0:74:f7:04:a7:5e:da:fd:bd:bb:92:4f:b0:d3:47:e3:c8:19:
22:46:49:bd:32:0d:4d:e7:60:68:c6:f9:43:23:b0:eb:ea:12:
58:e4:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:11 2025 by rpki-client