Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: WJBQfQodxWoP+UPOHnDxVL2n2hTOUtoGNT2DNAVmYMc=
Subject key identifier: 57:1C:DD:79:91:56:5A:0C:7C:CA:CD:F4:2C:E5:48:9D:40:CB:DA:CF
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 01967CEA3E7ED48398488274CB0EFE1966D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 0F0B
Signing time: Mon 28 Apr 2025 15:00:48 +0000
Manifest this update: Mon 28 Apr 2025 15:00:48 +0000
Manifest next update: Tue 29 Apr 2025 15:00:48 +0000
Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: C1TnqoD67Ld32RGuUBLLelv0FB6XD3aycRfnUGnsAhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:3e:7e:d4:83:98:48:82:74:cb:0e:fe:19:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Apr 28 15:00:48 2025 GMT
Not After : Apr 29 15:00:48 2025 GMT
Subject: CN=571cdd7991565a0c7ccacdf42ce5489d40cbdacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:c2:17:99:13:b0:c2:87:6d:27:46:bc:7a:
47:7e:6e:48:c6:b2:90:88:7a:f4:d0:2d:99:35:54:
73:b5:74:07:af:cc:ed:a8:14:fe:77:46:bc:99:54:
63:78:b8:24:51:d7:d3:8c:bd:4c:a6:28:d9:89:fb:
7d:7b:59:a4:ec:9e:f7:b8:73:b8:1e:53:d9:52:9d:
23:f7:d4:fe:bf:33:f9:0a:48:bf:35:6e:8b:6a:40:
29:ef:8e:6d:b4:69:f2:8b:af:49:d6:57:12:8b:4c:
95:68:17:a9:75:54:c8:af:a5:f1:78:4a:d2:08:b3:
5a:85:3c:58:13:9a:22:af:40:b8:26:eb:e4:cc:35:
9d:b7:1c:3d:38:77:27:d1:ec:ce:f8:e3:dc:aa:1f:
4d:95:ca:47:b0:d3:6a:6e:73:61:96:af:cf:06:d9:
2f:73:f0:c7:c9:28:a7:05:70:aa:d7:11:ad:71:2e:
66:72:a2:1a:e3:29:cb:fe:bf:c9:ab:91:a2:e9:bc:
24:20:6c:72:70:75:bd:ca:bf:c8:61:9f:df:41:7c:
47:0d:6f:85:b3:73:fd:44:74:16:88:c4:64:68:7b:
96:0b:56:a6:dd:66:ab:63:e6:0d:0d:9e:18:f7:3d:
83:cb:7b:2c:0c:e3:13:f3:c0:bf:be:ae:0c:f6:68:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:DD:79:91:56:5A:0C:7C:CA:CD:F4:2C:E5:48:9D:40:CB:DA:CF
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:95:e5:f5:ad:5a:5f:eb:89:5a:ff:dd:ed:fa:9d:75:0c:98:
de:1e:0d:ba:b0:27:12:03:d8:3f:13:69:c7:a8:4e:d2:d5:65:
79:2b:64:5d:c7:08:23:53:bc:ea:de:cb:93:77:e9:a5:db:52:
6b:ee:0c:0c:47:1f:41:6b:7b:1c:7b:d7:0b:40:1c:c4:a5:8f:
49:95:47:c9:a0:5e:8f:a5:e2:77:e8:ab:54:44:1f:dd:1d:27:
e8:39:4a:e9:56:6f:d9:cf:12:d2:1e:49:7a:35:c7:af:07:52:
d3:e1:d8:8e:5b:21:a2:d7:ff:e8:fe:ee:59:b5:40:ab:1f:b6:
7e:7c:54:d1:61:e4:df:1d:e9:6b:e4:06:82:c0:27:df:7d:29:
9a:eb:be:88:19:4f:96:07:be:4b:d4:e3:d8:c1:81:53:d9:13:
37:a7:74:25:85:50:19:1c:6d:8f:ec:49:87:76:85:bc:7e:c6:
7b:0e:76:a7:c3:3c:f3:a4:58:8a:c4:67:55:46:da:61:7e:ba:
71:bc:c0:b8:5f:6e:e0:12:92:03:1e:43:61:fa:37:c8:c4:72:
44:c3:b6:95:30:4f:a0:2b:82:2c:5f:ca:97:7e:66:a7:d0:90:
02:d3:76:f8:7d:2e:72:35:6f:db:06:69:2e:ee:28:46:ea:37:
a8:a9:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:53 2025 by rpki-client