Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: YhdbxU+W/IfM/QMTAfl3jbgc1sEA81DJ9z17yE+t7Gk=
Subject key identifier: 4E:0F:B2:22:52:B2:11:5D:76:31:9F:4F:30:12:E2:B9:99:E7:C3:0C
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019653EE188544F7EE1BF4A7225697C567C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 16:00:34 +0000
Manifest this update: Sun 20 Apr 2025 16:00:34 +0000
Manifest next update: Mon 21 Apr 2025 16:00:34 +0000
Files and hashes: 1: 48X0W84hRzbzikjtu3NRrgiUVes.roa (hash: P9ZEa8jjn4X+qLk45EN8bhgk1iRKqKb3xPDq8e5YB94=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: rYbWVfGMBYHRdrbtidixz22/YHbGemvwJXIjd0OnWeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:18:85:44:f7:ee:1b:f4:a7:22:56:97:c5:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Apr 20 16:00:34 2025 GMT
Not After : Apr 21 16:00:34 2025 GMT
Subject: CN=4e0fb22252b2115d76319f4f3012e2b999e7c30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:fa:f3:4f:17:07:72:c9:1f:aa:db:fe:72:
e4:46:62:c3:7b:07:86:7b:b1:ee:87:b8:3c:72:79:
69:32:c9:2a:62:c2:1e:67:bd:e2:6f:e4:69:fb:b2:
94:d6:6b:5c:4f:15:d9:d5:8c:9c:e3:04:c9:7e:ac:
23:21:76:35:be:a6:90:83:3f:ce:8b:48:40:9d:e6:
a7:32:96:f2:81:4a:9c:fc:bc:a2:83:9b:b0:b2:f7:
e4:20:d2:29:76:7c:38:b8:29:23:c5:df:83:ad:85:
39:d2:63:4e:ee:0b:a9:fe:6e:ee:b4:b9:eb:71:7d:
ab:24:0f:aa:18:d2:63:9d:19:5b:bd:df:f9:fa:e6:
f6:ad:86:ce:7f:75:cd:96:5d:c4:f8:c1:60:52:e7:
21:3a:69:f5:3d:25:64:64:23:e9:19:ad:c7:02:1b:
98:1d:d3:fd:74:49:b8:7c:c0:4d:90:99:d2:7d:72:
bd:cb:ff:79:ee:b8:45:a5:c1:eb:f7:bd:0c:e8:8c:
65:76:ba:41:24:e7:ce:59:72:a2:cf:f8:d4:c4:a6:
32:9d:99:26:a3:d6:ce:78:5c:17:40:f9:6e:8e:2d:
5b:7d:e7:ff:a4:d0:ec:ea:c8:0d:e7:3e:b5:58:fa:
08:d0:83:c1:05:48:f0:ee:64:3e:74:5c:2d:74:38:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:B2:22:52:B2:11:5D:76:31:9F:4F:30:12:E2:B9:99:E7:C3:0C
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:69:90:a2:49:f1:7f:e4:a0:4a:9d:6d:d9:0c:cd:4e:9d:4e:
16:77:9a:b0:67:84:61:dc:3d:af:2f:63:ef:17:39:89:28:cf:
1f:22:a5:59:63:78:5e:3d:c7:27:c0:20:c6:de:3a:06:ca:da:
fa:ab:9f:92:05:f0:49:77:03:4b:75:77:84:75:7c:fb:aa:d1:
8c:96:d5:41:a8:c0:ba:dc:3c:3f:29:3c:4e:0c:71:8c:5f:ac:
44:e5:a2:0a:d1:6c:3d:8b:d3:cc:a5:79:1f:f4:aa:ca:0c:f0:
99:cf:2e:36:48:d4:59:dc:40:01:2b:49:2a:20:79:52:76:af:
5f:03:21:a0:b2:fb:6b:e1:cc:b9:a9:41:24:58:7b:d0:52:18:
ae:15:44:b5:a1:49:04:28:6d:4b:be:8a:90:17:bf:86:05:8a:
9a:2e:5b:74:a6:6b:d4:6d:0e:ad:9b:e2:84:e9:b1:4c:18:db:
7d:a5:58:83:1c:5c:3c:91:e8:60:c6:d8:55:0f:d8:aa:2e:12:
b4:aa:11:0e:9a:02:34:75:b5:54:e1:0b:68:b1:3a:91:50:ee:
5a:57:3e:8d:3a:21:cd:e2:50:1a:f9:c6:87:e0:62:21:dc:bc:
ea:4d:de:28:b1:5d:67:6d:4e:82:e0:0f:d3:1f:17:29:16:e3:
37:45:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:26 2025 by rpki-client