Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File: VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier: M9/rHcl8GzCypEZvmzy8qlEfFCN9TIXoM8jrb97UvTs=
Subject key identifier: 94:9D:BD:BB:6B:17:33:ED:D7:8D:DB:DB:86:CF:3A:ED:44:FF:E0:1F
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 0196846CCC0DD75ABDDEDD897C7B86283480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number: 02DC
Signing time: Wed 30 Apr 2025 02:00:44 +0000
Manifest this update: Wed 30 Apr 2025 02:00:44 +0000
Manifest next update: Thu 01 May 2025 02:00:44 +0000
Files and hashes: 1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: TtB/z2Rr3nE4QtJhw2XISpG+qpk3Le3x49XyyjdjJno=)
2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:cc:0d:d7:5a:bd:de:dd:89:7c:7b:86:28:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Apr 30 02:00:44 2025 GMT
Not After : May 1 02:00:44 2025 GMT
Subject: CN=949dbdbb6b1733edd78ddbdb86cf3aed44ffe01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:bc:33:4c:40:b2:df:bc:7a:b4:ec:f2:00:
40:48:96:d9:32:53:07:a2:f6:48:87:31:07:bb:2a:
62:57:25:f6:6e:b1:a8:10:f4:c8:bd:33:67:57:8d:
fb:e0:95:fe:89:94:8e:6c:fd:45:c1:27:3c:06:3e:
ae:ba:c1:a1:34:b9:61:a3:69:e6:bd:15:e8:b9:0a:
06:c1:fa:d5:71:73:41:fc:b8:21:bf:90:18:72:b5:
f4:11:d7:91:85:11:79:a7:58:07:05:66:62:8f:cf:
f2:b6:c6:db:56:c3:09:a7:2a:f8:ec:ca:0a:ad:2e:
5f:26:0b:d2:f9:d9:48:fb:7f:7c:87:18:b9:b2:7d:
7c:ca:dd:b6:50:23:2e:b3:58:8a:24:93:88:b0:f9:
91:fd:41:22:e9:87:13:5d:8b:91:98:6f:71:b3:ab:
3b:d7:e1:5a:4c:70:fa:89:b0:ca:e6:10:16:7f:6e:
3b:dc:68:41:19:56:0a:d7:3d:2b:3f:33:9f:55:29:
4b:90:13:32:60:68:82:62:b6:a0:8d:2c:0e:23:81:
30:56:4d:bb:2c:48:6e:a6:a6:77:fb:28:17:b5:4c:
1f:28:d6:28:16:8a:8d:b9:c7:58:c0:db:f1:3a:96:
b9:64:e5:2d:8e:bc:82:a5:2c:c7:bc:aa:06:c7:ea:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:BD:BB:6B:17:33:ED:D7:8D:DB:DB:86:CF:3A:ED:44:FF:E0:1F
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a9:6a:1d:85:f4:1e:70:ce:5f:f9:f6:26:5b:c3:1e:c7:80:
96:5b:9a:3f:64:65:75:da:ac:d1:46:5b:a2:85:70:da:20:99:
dd:4a:10:ba:01:b1:37:a3:a2:34:85:59:f1:02:ac:8c:4a:98:
51:37:b8:b3:01:89:34:1d:b2:80:80:c8:6f:3d:ad:47:6c:81:
c4:1e:a2:10:7c:c5:09:2f:48:48:59:fd:9d:52:f7:f4:20:b7:
57:1c:de:28:1e:9b:a8:d4:5e:c3:6d:78:fb:a8:c3:d2:e2:4f:
65:49:78:d4:fc:b3:76:b9:6c:d5:2e:4e:5a:c9:f3:87:f3:c7:
bc:a9:72:55:00:18:6c:2c:49:d0:65:74:d1:d2:09:13:a4:c7:
ae:42:d3:36:5c:32:a9:7e:0c:ef:98:31:a5:63:9d:85:19:65:
cb:05:30:8f:6d:19:bf:ed:7b:83:0b:74:2a:1d:2a:e2:87:6f:
ea:64:f9:65:48:d3:1e:41:57:d5:03:94:40:86:78:29:d4:72:
52:1b:c3:86:92:19:82:ba:ff:4e:70:18:80:f7:b8:9c:c5:b4:
d5:0a:d5:31:05:a2:de:0a:bf:b1:91:44:c0:5c:8d:65:6e:35:
94:82:3c:72:08:88:70:62:1d:2e:1f:cd:49:b1:88:60:19:6f:
04:4a:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:24:20 2025 by rpki-client