Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: e0lMCKCwoMVsMWwktOotFxjxa15wv7otvHHudbT0+NM=
Subject key identifier: F3:9B:22:58:EE:39:0D:91:7C:D3:C9:58:95:11:4F:91:A2:2A:27:7A
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 01963EE6D3B20E7154BDB3FF242E25570CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 14:00:36 +0000
Manifest this update: Wed 16 Apr 2025 14:00:36 +0000
Manifest next update: Thu 17 Apr 2025 14:00:36 +0000
Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
2: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
3: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: JdlC5CSlKfODOLjy0c2/up1DIMCJH5x4xueY5vc9uU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:d3:b2:0e:71:54:bd:b3:ff:24:2e:25:57:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Apr 16 14:00:36 2025 GMT
Not After : Apr 17 14:00:36 2025 GMT
Subject: CN=f39b2258ee390d917cd3c95895114f91a22a277a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:25:69:ae:3e:21:15:0d:a8:e7:c3:15:38:
7e:e6:9d:a0:be:d8:4f:f0:59:d9:8c:13:94:a7:24:
75:52:1c:9f:27:00:66:9b:f4:56:56:3b:07:83:fc:
85:f3:68:ef:94:c8:20:16:bd:6a:70:7c:c8:2f:15:
91:31:16:e5:fa:35:d7:17:ea:69:a1:df:01:1b:9e:
7a:cc:62:6a:71:14:94:29:8d:d4:f9:a8:81:20:c8:
20:d2:27:7c:10:82:2e:50:21:7f:5c:89:8e:38:63:
a6:96:ce:c8:8d:ba:ef:75:f8:23:19:e4:a2:6d:6b:
b0:5a:a7:79:68:af:22:40:d5:ee:bf:16:2f:6b:40:
8f:95:f1:d8:40:b2:9e:03:55:c6:ab:28:e5:c5:cd:
f5:74:93:93:0d:50:73:b2:44:38:ab:b3:03:af:c6:
df:7a:98:05:ca:b8:fd:da:4d:83:5a:e5:7b:80:47:
30:c1:d1:d8:a1:d4:2f:aa:94:6e:ed:67:4f:cd:c6:
eb:5a:a5:7a:34:60:ec:32:f7:4b:05:ee:76:4f:f5:
e5:6c:34:c8:93:bc:81:77:86:6f:a1:83:67:8e:fe:
3a:82:b6:fa:b1:da:fd:8b:38:3c:d1:29:b3:b1:00:
ab:9c:4f:51:9c:33:b4:2d:73:2a:9f:5d:d5:41:34:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:22:58:EE:39:0D:91:7C:D3:C9:58:95:11:4F:91:A2:2A:27:7A
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ea:55:39:9e:58:46:e4:3b:93:02:33:cb:ba:70:36:1d:e5:
4a:0f:85:9a:9a:ee:c2:cf:12:7d:26:ee:54:3d:ec:5e:b8:54:
0a:3d:bb:1c:ed:1b:db:28:da:38:3a:75:24:4e:5e:ac:df:b7:
fc:df:dc:3d:11:7b:e7:fa:f5:10:cd:ef:0a:44:fb:9d:57:d9:
1c:fb:a4:68:bc:57:0e:c3:26:86:3a:b4:ca:96:30:3b:23:4f:
d2:f3:a7:4c:16:6c:fb:ec:19:d0:9d:a4:d9:c4:4b:a0:20:ca:
42:ed:2c:3e:87:92:62:5f:6a:78:da:ba:75:96:09:b3:29:7b:
c0:b9:d7:8f:70:11:ae:39:36:99:fd:7f:ef:c1:66:27:a2:70:
33:09:40:b8:1e:d9:ff:bf:1b:23:7e:7b:60:23:d6:48:e6:ea:
35:a6:84:cd:be:4f:d1:c4:09:4f:1b:08:28:a7:53:c7:d3:31:
c4:bb:66:df:5c:0f:06:ef:72:18:2c:6e:ce:e6:d8:bd:af:59:
59:c5:90:cf:a9:3e:34:31:93:52:4e:bb:ca:d3:4d:da:47:d2:
27:65:bc:cd:ff:f0:e2:f9:1a:9d:cb:1b:c9:c3:fa:8a:42:95:
72:4b:0a:6a:d3:cb:c5:a1:e4:c3:b2:26:ea:df:c3:94:b0:3b:
92:99:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:55 2025 by rpki-client