Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: I3cb9SXNOepjodVOc5T+IXU0h8EzKQMja0HHtegU4GM=
Subject key identifier: 00:71:47:FE:2F:09:2D:E5:87:ED:1B:4F:8E:A4:F9:FC:85:65:7E:83
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 0196748C03637D17B086C1724E7A211C51D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0BD6
Signing time: Sun 27 Apr 2025 00:00:55 +0000
Manifest this update: Sun 27 Apr 2025 00:00:55 +0000
Manifest next update: Mon 28 Apr 2025 00:00:55 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: XMj6YlyX52z4jyKIfPxW8gsZenH3zQn6teI2o/sXDNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:03:63:7d:17:b0:86:c1:72:4e:7a:21:1c:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Apr 27 00:00:55 2025 GMT
Not After : Apr 28 00:00:55 2025 GMT
Subject: CN=007147fe2f092de587ed1b4f8ea4f9fc85657e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:fc:00:09:52:be:19:c1:d7:16:56:e8:c6:
eb:8b:a7:74:29:3a:51:e1:ab:42:cc:a4:bf:19:ba:
99:96:46:55:b3:6d:cd:fb:ce:6f:9f:37:c2:a7:4a:
c0:78:c9:ee:b9:ad:aa:b6:e9:2c:60:e7:f2:d9:77:
ab:9f:1c:4a:09:dc:25:9d:8d:70:37:e2:b1:0a:37:
a7:eb:ab:74:a3:24:94:51:33:f1:6b:97:fe:63:4d:
91:4c:e8:09:4a:1d:47:ee:ba:bb:d7:a9:c9:b6:96:
74:48:8f:12:51:f7:61:03:09:b8:be:e6:bc:6b:45:
24:31:78:d4:a9:cc:3e:e9:5b:e1:78:fc:8f:61:85:
3e:45:d0:d1:ce:4e:ff:49:e5:e6:71:cc:a7:b4:31:
5a:e3:f6:4a:3c:21:e2:2d:54:3f:43:f5:97:64:29:
44:57:8b:9c:1c:e7:0c:28:f0:96:2a:80:dd:0e:36:
43:78:14:1e:5a:4e:fa:38:dc:fe:da:cf:3a:cf:31:
cf:c4:a2:56:8c:bb:2e:bd:16:b8:d7:69:33:ed:29:
ad:d2:92:8f:96:9c:81:de:1d:3c:b3:d5:9c:fb:08:
4b:d2:ee:fb:8b:29:b0:a1:bc:70:a8:f8:c1:5a:ce:
9f:75:17:92:11:9a:87:8a:a7:07:8c:52:a5:25:9a:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:47:FE:2F:09:2D:E5:87:ED:1B:4F:8E:A4:F9:FC:85:65:7E:83
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:49:4c:65:66:fc:c1:b2:ba:d6:b2:9c:bf:5a:35:de:41:7a:
b0:bf:52:c7:c0:68:69:51:da:fb:e2:0e:cb:0b:ec:10:24:aa:
c7:03:7b:ee:5a:05:ae:71:aa:6a:9e:df:07:32:d2:bd:a2:1e:
2f:a2:28:83:f2:5d:c3:0c:f5:b6:63:a0:03:9d:ef:a6:b5:88:
e0:d4:10:d7:22:f2:dd:35:24:3e:39:ee:2b:f2:33:62:34:fe:
fd:a1:b2:6a:b1:18:d8:67:c2:aa:7b:14:03:83:5d:f1:46:75:
21:90:8c:9d:20:1b:63:fe:91:b8:62:0d:9a:df:16:4e:e4:7a:
a5:41:af:12:5a:62:5b:07:ab:d0:e5:67:61:04:60:84:84:04:
c0:2b:49:15:a4:e4:b4:89:0f:20:6f:f0:89:be:57:1b:d7:9a:
4f:62:69:26:b1:08:38:28:1e:6d:00:cd:e3:af:49:63:7d:3f:
6c:2a:63:5a:24:52:95:82:7f:31:76:b6:15:68:4f:73:f6:01:
5c:94:da:97:68:38:58:d5:fb:c3:76:e6:d7:37:e3:a2:53:ca:
ca:b2:ae:10:46:46:0e:34:8e:65:3d:96:3e:44:e5:3d:c4:94:
c8:48:ae:a9:1d:04:9c:ba:57:c0:42:ec:05:b1:90:cd:89:a9:
d4:1e:4f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:55 2025 by rpki-client