Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: 0WbakPjK8l5JILbFDxIrXbbYbwfACF60cIcyTkkPvPU=
Subject key identifier: D8:9C:CC:9A:02:81:AD:B2:01:49:48:A2:E6:3A:1A:31:3E:0F:38:1F
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019677C388B9169F5A14AC3CC312386B0182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 78
Signing time: Sun 27 Apr 2025 15:00:25 +0000
Manifest this update: Sun 27 Apr 2025 15:00:25 +0000
Manifest next update: Mon 28 Apr 2025 15:00:25 +0000
Files and hashes: 1: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (hash: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: 4szB5sqwIgycJ2v3KS+JGSKNvM0rw4tfU6VTQBpU8j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:88:b9:16:9f:5a:14:ac:3c:c3:12:38:6b:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Apr 27 15:00:25 2025 GMT
Not After : Apr 28 15:00:25 2025 GMT
Subject: CN=d89ccc9a0281adb2014948a2e63a1a313e0f381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:6e:38:ca:94:a2:35:4f:05:bf:1e:18:08:
54:df:2c:a8:46:ab:5f:32:c6:9b:1d:19:a1:5c:de:
5b:db:17:53:33:f4:83:b7:d9:49:f2:eb:92:b0:82:
27:fd:86:37:00:d4:2e:a0:80:ec:ee:00:4a:fb:80:
1a:9f:32:b5:05:43:83:92:67:c5:b8:93:7a:6f:df:
de:be:94:32:ad:48:56:fb:60:91:64:fa:ce:46:3a:
b5:bb:df:5a:47:31:da:a9:d1:bc:6e:bf:f1:e4:d5:
c4:16:4e:47:b0:81:0a:12:d6:b7:f8:4b:6a:78:c1:
0e:ba:fe:28:a8:5d:3d:48:be:44:ed:f4:5d:aa:4d:
71:84:c2:dd:5d:23:46:31:6f:ed:ce:b5:28:bf:91:
f5:86:60:e3:57:cc:25:7a:6a:9b:78:74:d3:3b:06:
1a:ea:2a:16:ec:c1:4d:cd:b7:50:a6:34:01:e0:f4:
76:3c:87:a4:3b:37:e5:75:31:1a:61:21:26:70:13:
60:aa:ef:41:d7:95:29:e5:ec:87:56:e9:ab:f8:ba:
f2:7e:ed:bd:ab:09:7e:6e:cb:0b:9d:c7:68:aa:9d:
12:0a:b1:b5:65:77:d5:5c:7d:1b:4f:fd:59:a0:e7:
e6:bb:00:5e:d7:9b:d4:64:92:85:db:da:c9:37:7a:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:CC:9A:02:81:AD:B2:01:49:48:A2:E6:3A:1A:31:3E:0F:38:1F
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:76:17:a9:4c:96:75:53:79:e2:5e:c9:9c:88:79:07:f3:94:
4a:e9:40:b6:22:e2:34:37:47:6c:c1:2d:26:53:e4:02:b1:8e:
b3:e4:fc:5b:6f:eb:f6:d9:b5:90:44:37:d7:14:5c:01:32:f3:
35:36:16:4a:22:9b:b7:a4:39:41:e2:e3:fe:e5:bb:6f:e6:8f:
87:63:24:26:5c:32:2d:fb:ad:54:76:72:10:31:cc:49:74:4b:
f9:ec:9e:68:5a:fa:48:0e:d6:08:07:ea:0c:7e:71:42:29:52:
27:33:1d:22:9f:18:be:1b:09:82:91:64:50:da:4d:c0:90:3f:
29:49:ec:56:ae:7b:ba:21:e9:dd:a4:a8:9c:2a:d0:70:9e:62:
97:21:83:00:04:c8:c8:16:3d:39:bf:ea:2e:d1:5b:f2:9b:20:
e0:4f:70:79:cc:86:6d:15:4d:01:84:2e:4f:88:29:02:70:c8:
ad:23:96:49:51:51:94:e6:e7:ff:09:b5:b5:12:81:39:69:26:
5b:21:39:aa:e0:3c:8b:58:ea:b8:a1:be:02:94:e3:0f:20:ac:
51:67:69:ea:34:3f:74:42:cf:49:10:6a:55:fc:2b:7f:3b:bb:
0b:1b:a7:50:d1:d1:cc:28:a9:bb:19:18:6e:32:7c:90:eb:71:
54:03:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:30 2025 by rpki-client