Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: Sx8HRz1qG71QCRZzMUgA6lOLN7xKfw3T3VX4yd/tqB0=
Subject key identifier: 4C:68:1E:D2:B3:AF:C6:DA:25:85:50:7C:11:8E:C4:37:3E:71:7C:17
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 01967E33AB76A856F00184A605673C9C5645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 21:00:37 +0000
Manifest this update: Mon 28 Apr 2025 21:00:37 +0000
Manifest next update: Tue 29 Apr 2025 21:00:37 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: iOMPFfPZlI4gq8QrCh5hUedsliqtrygcewyWfnkOut4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:ab:76:a8:56:f0:01:84:a6:05:67:3c:9c:56:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Apr 28 21:00:37 2025 GMT
Not After : Apr 29 21:00:37 2025 GMT
Subject: CN=4c681ed2b3afc6da2585507c118ec4373e717c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:af:d4:f2:b2:64:13:8a:aa:d4:ca:35:a7:
8f:c7:92:71:24:4f:9f:87:9e:90:c1:73:96:62:9c:
c7:35:4a:9a:19:b0:9b:b9:d1:7f:cf:6a:a3:16:83:
49:f3:e5:c7:11:cf:d2:d6:3a:6b:5d:79:f7:b5:09:
44:1b:37:67:fa:88:7b:fe:99:bd:8b:6e:7d:d3:de:
a0:6e:1b:66:79:69:5d:d6:83:ac:04:10:62:6b:2d:
f7:40:a0:ae:25:19:10:96:fd:26:e8:58:7d:f7:c6:
c9:e0:d8:d0:c7:7a:14:3f:43:d5:23:87:6f:78:60:
94:3d:82:73:a4:35:5b:7a:71:5a:d7:d7:2c:d3:a0:
ac:bc:24:79:1c:36:2e:7d:6e:55:c8:3a:a7:32:dd:
30:e5:47:6a:6d:53:71:e8:2e:aa:f0:1b:e2:64:70:
d7:85:9a:cf:16:09:1d:59:1f:10:06:4d:bd:ce:b1:
64:48:8a:14:7b:08:54:7c:d5:3f:35:6e:71:18:c1:
20:ee:1c:c5:12:e2:d2:cc:01:2d:aa:22:8f:ac:97:
9b:18:83:0d:03:70:99:11:d6:b5:9a:25:a6:dc:bd:
bd:3b:0a:17:7d:da:b0:16:2b:e0:12:e7:16:40:ef:
03:37:bf:28:60:90:ea:07:b0:d7:18:ce:af:fc:15:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:1E:D2:B3:AF:C6:DA:25:85:50:7C:11:8E:C4:37:3E:71:7C:17
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9f:74:34:f3:9e:48:d5:f7:2e:89:e4:de:ba:18:32:54:7b:
ce:bc:0c:63:3e:af:03:e8:f5:80:a2:8b:20:ee:d7:2c:3b:f8:
22:a6:60:8b:ff:e7:bf:90:60:47:a3:3f:53:cf:75:c1:aa:d1:
7a:28:0a:87:23:3b:85:b1:00:81:2c:ce:fc:fe:2d:f1:27:48:
29:48:dc:4b:fb:a9:d2:60:8b:d7:3c:33:c2:dd:b3:49:a6:81:
95:48:b1:88:3b:1d:c2:5c:f4:71:3e:a9:61:43:12:df:a8:2a:
7b:e1:bf:63:d1:a0:de:88:40:09:c9:ab:eb:6c:c3:56:f5:a0:
e1:6f:e2:06:68:c3:c6:5f:aa:0d:b7:97:d8:15:2c:df:1e:12:
5c:8e:6d:18:f2:b4:51:3d:11:60:c4:d4:83:d2:2e:14:05:85:
94:44:ad:e3:93:3e:bd:19:74:80:74:3c:c4:4f:f4:f4:2f:b9:
eb:b4:78:23:bd:8d:d5:fa:84:24:f0:6c:12:34:88:f3:5e:1e:
7a:ea:a3:5b:33:2d:9f:c9:5c:45:03:c5:3d:81:6a:f6:86:a3:
4c:71:5c:74:71:20:2c:d1:de:3d:7e:e4:3d:ec:c6:70:1d:d1:
94:4c:d6:f9:87:bd:e1:53:ba:29:0e:0e:7a:88:d9:bf:97:e1:
1f:b9:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:33:19 2025 by rpki-client