Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: plFG8TxPBIlsDlM5EhJGKN1Q5TMFn+UImcCg+KB/23o=
Subject key identifier: AE:CD:AD:55:4F:21:EC:D4:1B:03:B0:FE:96:BA:A1:9C:B7:45:43:39
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 019676E838C13E12AD0CD98910EF51D3506E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0979
Signing time: Sun 27 Apr 2025 11:00:52 +0000
Manifest this update: Sun 27 Apr 2025 11:00:52 +0000
Manifest next update: Mon 28 Apr 2025 11:00:52 +0000
Files and hashes: 1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: m5/27fn6vBQPf3Ic1B0AomEfiV/Ilu/btY89z3vBf3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:38:c1:3e:12:ad:0c:d9:89:10:ef:51:d3:50:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Apr 27 11:00:52 2025 GMT
Not After : Apr 28 11:00:52 2025 GMT
Subject: CN=aecdad554f21ecd41b03b0fe96baa19cb7454339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:9e:6c:c8:e7:c4:bf:55:e7:ea:b5:32:af:
d3:b0:45:00:f5:b7:c7:47:10:27:fc:38:6b:57:a6:
b2:52:87:2e:61:f9:b0:43:a4:59:ac:1f:e1:16:75:
10:ff:03:9b:de:e7:21:e9:de:6c:1c:d5:6c:9b:2d:
86:3b:65:b4:62:95:49:a5:95:bc:87:7e:02:7f:cb:
25:88:44:42:e6:9d:5e:28:14:03:b4:8f:b2:0a:db:
76:6d:d6:77:c1:e6:0e:66:78:3c:ce:89:8c:e6:1e:
56:7c:a1:e0:e6:01:b7:8a:d6:dd:46:3f:33:b0:81:
14:61:24:d4:ea:1b:b6:3a:a8:09:0d:62:8b:18:93:
46:70:17:da:d3:25:ba:e0:62:72:e1:8a:a1:70:83:
6a:a0:8b:13:7f:c2:c4:a3:85:81:66:31:23:e3:27:
0c:2f:29:4c:c3:a3:3c:50:3b:5b:09:0d:d4:cc:ec:
60:7d:b2:ba:91:dc:95:32:5e:33:58:d8:8b:12:8a:
48:21:ba:ba:05:66:4a:b7:53:77:c9:67:f5:e5:3a:
b2:23:08:9d:fb:83:cc:eb:b7:65:69:c0:3a:89:fa:
01:17:2b:96:67:93:cc:ba:46:73:34:95:4c:b0:5d:
18:5e:74:b1:3d:f1:83:75:d3:d1:df:7e:54:3c:eb:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:AD:55:4F:21:EC:D4:1B:03:B0:FE:96:BA:A1:9C:B7:45:43:39
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b0:a2:1f:56:91:c6:f2:52:c7:3c:b4:07:06:25:25:16:7f:
56:d0:55:68:63:85:7b:51:81:eb:14:20:48:94:7d:fc:e7:96:
89:27:04:08:12:c9:b6:6d:0c:d9:8d:8c:86:1f:55:4f:0c:a9:
fe:92:39:bd:fa:a5:11:d7:79:b0:1a:ca:9d:b5:98:79:d3:a4:
d4:4f:e5:58:a2:fa:68:4d:41:da:97:b1:57:4b:85:25:31:a0:
bf:d9:31:91:85:a0:c8:de:ae:c2:1d:c4:84:e2:28:b0:9b:e8:
84:3a:04:fb:19:2d:27:49:94:a5:56:ee:71:7f:ef:1e:ee:73:
ec:77:23:f9:42:09:ef:f4:8f:93:f1:fd:b4:6b:cd:5a:11:02:
03:a3:98:77:e0:6b:46:1f:3e:d2:86:f6:38:17:75:5a:7d:82:
fc:1b:cc:0d:5d:75:24:6a:b3:b9:e2:23:36:56:a1:6a:50:5c:
ec:73:9e:e3:65:3f:ed:79:d2:89:c8:10:97:e4:25:b2:d6:17:
a7:c8:42:e8:4f:35:ad:ee:cd:11:14:f1:61:19:be:60:19:16:
5a:37:75:29:82:20:c9:2c:87:f9:4e:5e:21:3c:f4:fd:28:59:
8b:b3:f3:d5:75:6c:97:3e:c8:69:5e:54:72:85:d5:44:0e:c0:
72:d0:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:25 2025 by rpki-client