Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: PCXOAruoVP/jifzrRlmkfq2+09GYcXOw6E8nbB73iW4=
Subject key identifier: 32:3F:E7:5A:4B:51:FC:CC:24:2B:D6:2D:D1:61:A0:E1:B7:24:73:43
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 0196447B7214B35E961656C1F9ABCCFA4D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 02B4
Signing time: Thu 17 Apr 2025 16:01:02 +0000
Manifest this update: Thu 17 Apr 2025 16:01:02 +0000
Manifest next update: Fri 18 Apr 2025 16:01:02 +0000
Files and hashes: 1: LAyDLVrlWC7GYrIpkUltJFolhC0.roa (hash: 5fqulNX0pe/944CBeE9O8m/kZ++wdZNRG9xqatGIqks=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: +vqA1ymPh5GM0jIDiHairTr9D7LnVWm9W49otD6NVkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:72:14:b3:5e:96:16:56:c1:f9:ab:cc:fa:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Apr 17 16:01:02 2025 GMT
Not After : Apr 18 16:01:02 2025 GMT
Subject: CN=323fe75a4b51fccc242bd62dd161a0e1b7247343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:71:e5:7b:7d:a8:3a:3d:3a:fa:ee:d0:09:
50:71:17:9a:9b:56:4d:d2:47:4b:0c:12:90:86:a9:
0b:2d:26:38:e9:bc:07:33:f4:20:d1:cb:59:62:f7:
bc:d1:41:b7:f2:42:bb:df:c9:e9:0c:78:18:fb:4b:
82:48:82:4f:67:9c:d4:7d:b5:96:2d:68:eb:30:c8:
b4:be:ed:0e:9c:01:a9:7b:f9:17:a7:bc:f7:0b:67:
17:5c:af:c8:4d:5f:89:d0:c4:53:14:00:26:a8:55:
4d:db:5a:64:c8:ae:58:91:76:72:1f:1f:e2:de:14:
37:5d:a6:ea:ba:0f:11:4c:53:39:97:b5:7b:b3:da:
76:01:21:e0:f0:67:d5:a5:0c:6c:c1:c4:c7:f2:1b:
d2:1f:d9:ba:c9:56:72:fd:0f:9c:68:f2:f6:9d:f5:
36:dd:ab:1d:c2:9d:db:b8:08:2a:32:35:26:ea:e5:
a2:27:ca:b5:60:e3:6a:e6:5e:cd:9b:34:08:9e:03:
48:70:99:13:fe:bd:2c:e7:f7:29:86:c1:84:bc:20:
7e:29:c5:bc:17:4f:e5:4c:1b:b6:9c:51:ce:43:c4:
00:0a:08:6e:8f:2c:7e:c5:b5:55:ea:2d:0f:bf:79:
f4:8b:af:9f:4b:c9:01:7b:3c:b8:82:00:bd:0f:18:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:E7:5A:4B:51:FC:CC:24:2B:D6:2D:D1:61:A0:E1:B7:24:73:43
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:33:bc:da:c5:03:b7:44:26:5c:99:85:51:ae:19:a0:42:28:
a8:6a:35:9b:e9:aa:06:36:9c:64:24:1c:23:74:c8:67:f1:da:
d3:97:37:03:ad:1e:63:4f:d1:3a:bf:9b:30:01:43:82:fe:85:
7c:f6:2f:67:40:be:6a:3f:24:d6:a0:31:8e:73:ea:c6:ca:05:
96:cf:75:c6:e6:d3:d9:29:d5:ee:61:3a:a0:dd:51:5b:1c:b8:
ae:47:53:f3:05:ff:fa:42:35:31:18:8a:9d:62:b4:8d:75:2d:
82:18:91:b2:df:33:c3:22:1a:a6:66:bb:1b:32:a0:ce:8c:31:
e6:a2:e5:02:4d:2f:4c:da:d2:2d:85:3b:5c:5c:f2:3c:60:5b:
4e:4e:b3:62:a2:60:74:50:a9:a6:73:33:6b:1e:00:d2:b0:df:
c9:01:ed:4b:f0:50:0d:79:ec:47:3b:cd:92:23:f2:4e:ac:ba:
09:d7:92:13:db:02:35:47:08:73:21:69:88:57:80:94:a8:97:
cc:67:8d:b8:00:43:da:e1:d0:28:9b:98:51:dc:d3:43:f0:e8:
5e:67:f3:e6:2b:84:11:59:17:b1:98:72:2d:4e:7f:bd:d6:01:
7a:36:22:41:92:70:15:01:50:65:bd:6e:2e:b2:f8:ba:96:de:
9b:3c:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:00:27 2025 by rpki-client