Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: y3hBMgv7oTDHdwywHZtyw550U7dAsLrpSOHCATYMmOs=
Subject key identifier: 10:C7:70:30:7A:3E:65:20:03:7E:A8:FB:CD:82:E3:3D:DF:56:CF:DE
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 01967D21279ACA9169AD1FE7EA9C20C84C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 16:00:46 +0000
Manifest this update: Mon 28 Apr 2025 16:00:46 +0000
Manifest next update: Tue 29 Apr 2025 16:00:46 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: I/o3J94f7PWbyabSoT7cqptoOy7cPcMPELw/7Yohm3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:27:9a:ca:91:69:ad:1f:e7:ea:9c:20:c8:4c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Apr 28 16:00:46 2025 GMT
Not After : Apr 29 16:00:46 2025 GMT
Subject: CN=10c770307a3e6520037ea8fbcd82e33ddf56cfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:14:a0:49:9b:09:02:83:01:c2:d0:2f:7c:
7b:48:95:b8:a7:42:44:20:26:a8:86:d2:0f:2d:72:
1d:da:1b:33:c1:fd:dd:80:36:16:28:ae:49:77:58:
9b:54:08:f5:39:7d:4f:a5:2c:b4:be:1b:42:c1:2e:
20:52:4e:a1:35:bf:da:bd:da:a5:0d:57:0d:15:a1:
ee:fc:01:13:c4:13:25:4e:cb:31:d6:47:dd:f8:69:
2d:e3:5f:84:d7:ab:ab:55:66:aa:fb:b7:22:b5:8e:
6c:13:6b:8d:13:2a:ec:bb:a7:e1:40:05:b7:18:9b:
93:b0:7c:52:20:ef:80:d4:e2:29:1a:22:0f:a2:be:
28:66:f7:ca:80:92:88:50:be:27:8c:68:ed:38:54:
f6:39:2d:b5:46:d8:e0:c3:ec:7a:9d:ed:d5:bc:54:
37:9e:08:70:bc:30:4f:83:78:bc:bf:08:46:e6:7b:
3a:cc:23:8d:6c:da:e9:b9:c1:c1:f2:95:51:6c:9c:
71:51:dd:e2:e0:b6:07:80:8e:44:86:9c:22:f0:13:
70:41:ab:76:14:04:4c:ec:e9:58:e5:ab:2f:ab:0b:
80:1d:f7:c9:42:46:c0:67:a4:ef:64:ea:7a:ae:79:
65:b2:24:91:ff:b1:38:8a:07:4e:a9:72:7f:9a:a1:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:70:30:7A:3E:65:20:03:7E:A8:FB:CD:82:E3:3D:DF:56:CF:DE
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6e:6b:3d:0d:17:01:e1:a7:55:c9:66:03:48:3e:11:48:76:
18:da:81:51:0b:46:76:d2:95:5b:a1:ab:1d:75:9d:03:77:b8:
dc:19:73:10:e5:9c:c8:7e:66:59:87:49:cd:b9:42:01:9e:03:
75:a8:f8:3e:51:c1:74:09:97:2a:0c:a3:0b:e8:d4:4b:5c:c1:
80:b4:40:34:17:91:c2:14:28:91:d2:a6:b8:23:70:d2:1f:8e:
66:e8:af:5a:7b:81:6b:a0:a0:66:1f:79:2f:c7:88:75:1b:10:
ab:88:73:c5:2f:86:59:70:f9:89:75:e4:2c:67:41:42:93:83:
a8:e1:64:f6:4a:10:c2:ed:c7:84:3a:ce:89:25:6b:ad:27:ef:
16:78:2b:f9:d8:fb:1e:c9:ec:c8:95:8c:12:ef:02:c7:c4:76:
2c:7f:25:1e:9e:01:97:a7:79:90:e9:01:ec:3e:a2:93:87:63:
0c:24:8a:4e:65:f1:70:9d:35:75:7e:3c:d1:17:8b:d7:3d:f6:
c2:04:b5:80:7a:78:0d:f3:6e:f2:41:5b:51:f0:7b:12:e5:07:
b2:21:fe:a7:82:42:f0:32:2f:9c:94:1f:89:aa:3d:8b:48:3c:
5f:ff:5a:ff:e2:74:98:54:29:37:96:51:86:dc:3c:9b:7f:07:
98:86:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:41:57 2025 by rpki-client