Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: Q6l6pA9Tsv9uzS0CwOGR2rMxqJboCKd9PJxD0QZJelQ=
Subject key identifier: 4A:43:1E:EC:09:6A:BE:5D:8B:42:3E:9E:26:8C:C6:99:1F:AB:82:57
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 0196421EE251F221A82865473815499A907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 07E9
Signing time: Thu 17 Apr 2025 05:00:42 +0000
Manifest this update: Thu 17 Apr 2025 05:00:42 +0000
Manifest next update: Fri 18 Apr 2025 05:00:42 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: C9ljf3ZwBZCi4b9U5f/fxCv958CP4bOEMoNjmygXpjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:1e:e2:51:f2:21:a8:28:65:47:38:15:49:9a:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Apr 17 05:00:42 2025 GMT
Not After : Apr 18 05:00:42 2025 GMT
Subject: CN=4a431eec096abe5d8b423e9e268cc6991fab8257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:5d:36:b6:90:18:8f:e9:7c:c3:51:04:aa:
d1:21:c7:61:eb:9d:60:17:3d:5c:f2:34:a8:e0:1f:
5c:dc:79:de:0a:de:68:7d:7b:b3:f0:c6:87:36:81:
de:ca:a6:31:4b:f7:30:e1:e6:7f:0a:21:c8:ab:7e:
f4:d7:73:8d:4a:5b:cc:a5:5e:7a:08:e8:22:24:12:
2a:60:8d:1d:4d:d5:cb:3f:63:2e:ef:c0:ad:24:5c:
04:79:22:23:82:21:36:dc:8a:50:db:4f:7e:a5:39:
0d:c2:34:87:83:ed:ff:cc:3e:8f:1f:f0:e0:fd:47:
71:3c:0e:f7:48:1e:41:5b:a9:a2:2b:4f:68:de:48:
b6:17:41:0f:cf:81:b6:ea:4f:f9:70:d3:74:f8:e4:
6b:c9:58:59:89:e6:24:17:5f:54:9c:04:4c:fe:bc:
97:2e:91:02:11:4c:e6:3c:65:43:80:b8:15:d8:ac:
bf:9d:1d:44:cc:3b:c1:32:92:65:06:11:95:d8:12:
b1:0b:3e:12:b0:0f:47:a0:c9:e5:e2:ec:ed:97:e6:
87:b4:86:af:a0:fc:a1:b6:c3:4a:ba:90:90:ee:6b:
40:ed:17:de:ef:58:e3:0f:35:6b:07:88:74:85:8a:
b3:19:77:2d:cf:c8:9e:62:ce:cb:d0:5e:4f:c1:da:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:1E:EC:09:6A:BE:5D:8B:42:3E:9E:26:8C:C6:99:1F:AB:82:57
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8c:19:70:5c:bb:d7:3d:22:1e:db:d0:e5:88:07:2b:9e:67:
1f:7d:8f:ca:5d:bf:45:9c:bf:b7:72:74:23:46:6f:21:c1:e0:
b4:ba:f4:b4:f3:72:3d:df:93:27:b7:34:a2:6b:3f:79:f4:f8:
b7:de:21:23:35:43:9a:8d:ea:38:02:98:63:a6:40:8d:f9:fd:
8d:75:2f:00:ce:8c:f8:0e:f1:0d:e8:be:f2:36:f5:2e:63:dd:
94:ca:55:ff:aa:95:d2:2b:fc:d3:da:6c:a9:bf:e7:da:b6:4d:
61:53:08:0f:f2:83:17:39:29:b2:18:6e:d9:e5:72:22:a0:d4:
1b:0b:fc:a6:d8:04:76:89:c5:b5:cb:6a:98:0d:c5:1a:66:22:
f4:86:cc:61:6d:01:6e:bd:89:04:45:73:d6:3d:6a:e4:cb:72:
fe:01:c5:97:61:5a:1c:68:67:97:2d:41:1b:70:30:fa:01:b0:
25:ca:bd:09:a7:99:c3:7e:26:24:08:0f:f7:20:79:79:1d:3e:
40:26:83:4c:f9:58:33:69:07:88:bc:d4:86:46:8f:eb:e8:f3:
8b:77:81:4c:db:5f:ef:2d:ad:8e:91:d0:4a:57:98:40:f5:fb:
3b:ee:a5:cf:d3:01:57:17:46:0e:0f:86:26:c7:2f:ce:07:3a:
7a:d8:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:58:52 2025 by rpki-client