Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: PfoovGQI6QnhD8Cho4rSaJymG0ju1XDI0H5szP98DnQ=
Subject key identifier: CE:EF:0B:C3:09:20:6A:12:7B:B1:77:AA:64:EE:93:06:60:8D:E2:9A
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 01967530B1BF048EAC3AB50090938FE91587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 03:00:47 +0000
Manifest this update: Sun 27 Apr 2025 03:00:47 +0000
Manifest next update: Mon 28 Apr 2025 03:00:47 +0000
Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: jPg8FG32BKD3LSdqPPU2ycjCPVhqzYR72NUM1SeJu7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:b1:bf:04:8e:ac:3a:b5:00:90:93:8f:e9:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Apr 27 03:00:47 2025 GMT
Not After : Apr 28 03:00:47 2025 GMT
Subject: CN=ceef0bc309206a127bb177aa64ee9306608de29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:b4:89:9d:62:04:6a:d5:9f:73:78:fb:78:
ba:fc:d2:c5:96:70:28:75:fa:9b:f4:c1:6f:97:6d:
d5:10:25:b7:85:d6:3e:04:b9:da:23:7e:58:2f:cf:
be:fb:29:aa:1f:cc:e9:fc:76:44:6a:9e:31:9b:e4:
15:8c:72:20:b0:5f:67:82:15:17:80:3e:0b:95:65:
4f:3b:d0:4d:22:5c:24:8e:81:d9:c3:2f:82:ae:af:
17:d6:45:4f:fa:a4:4c:67:88:17:9e:71:48:8a:72:
28:1f:9a:20:7c:56:ed:d7:a3:f8:79:90:f7:b6:a1:
cf:ad:71:81:20:67:0d:19:0e:70:4c:95:12:35:44:
8f:ee:60:99:7f:9f:5e:6e:7b:28:c9:c3:d0:b4:6b:
cb:9e:ce:7c:8c:73:34:cf:07:7b:64:0b:4a:25:88:
c7:aa:41:4f:69:28:f7:d2:4b:cb:e2:61:83:15:a2:
8f:ac:a2:ca:1c:2b:1b:8f:a4:b8:5f:ff:92:15:26:
25:af:16:d7:ad:2e:62:a2:38:4a:a6:ab:61:7b:3e:
f9:8d:2b:f2:1d:4b:57:a4:b2:2a:d5:ac:63:3f:7d:
6d:be:91:0e:19:96:7a:7a:b4:7e:d6:ee:ac:38:5c:
01:60:1c:0b:41:3a:c5:71:ab:9c:81:f7:79:4f:0d:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EF:0B:C3:09:20:6A:12:7B:B1:77:AA:64:EE:93:06:60:8D:E2:9A
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:32:d3:3c:cd:48:b7:96:8f:f9:ab:79:16:44:e9:bc:25:f2:
97:7b:4c:15:53:a5:59:7b:57:5e:d6:7f:41:b6:45:29:f6:8e:
e7:a7:9f:78:24:46:bc:d3:c7:82:7b:b2:84:34:dd:00:7f:96:
9c:8a:92:65:ef:0c:94:bc:ae:c6:60:4c:a0:9e:0f:54:52:3b:
86:98:66:26:76:45:0c:82:32:c6:de:f6:54:b3:6f:44:bb:9b:
bf:b3:22:0d:0a:4e:ba:de:05:05:71:37:49:9f:93:f8:10:02:
76:e7:ec:4a:ba:60:c4:d5:a5:87:76:93:4e:cb:92:44:36:e2:
73:77:1f:5c:68:4b:f0:3c:59:05:4f:ea:95:ac:11:60:71:ba:
4f:8b:24:8f:3f:3e:4f:00:78:b3:4c:b8:12:ef:d1:4a:f5:0e:
fa:c0:61:49:2e:6a:54:72:ba:ee:2c:74:c6:b5:e0:c9:e2:4d:
fc:30:78:bb:8e:04:7b:2c:b9:e6:77:d5:72:34:b1:bf:24:8d:
96:bb:25:a8:4e:be:78:9c:2a:4e:09:ac:a9:3d:d9:7d:0d:49:
ab:a0:2a:1d:ef:5e:f7:3e:47:46:3b:f6:6a:10:92:63:14:74:
a6:1e:88:9a:51:ba:3a:46:51:a3:d6:94:d8:f2:0d:da:7d:2d:
b4:d5:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:57 2025 by rpki-client