Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: EliTnS1S1gdgyT319GXAKKUby7Fd+KTQkB2v70HAKmg=
Subject key identifier: E6:1B:95:87:0D:EF:B2:86:36:E1:9B:49:12:70:89:1E:7B:37:E5:46
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 01968134621140C185443BD1383B86CFCDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 1047
Signing time: Tue 29 Apr 2025 11:00:15 +0000
Manifest this update: Tue 29 Apr 2025 11:00:15 +0000
Manifest next update: Wed 30 Apr 2025 11:00:15 +0000
Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=)
2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: 97XAgQG2gAYo5IBx7aCPyKXadImLEQpAQ/n/lBYc15A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:62:11:40:c1:85:44:3b:d1:38:3b:86:cf:cd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Apr 29 11:00:15 2025 GMT
Not After : Apr 30 11:00:15 2025 GMT
Subject: CN=e61b95870defb28636e19b491270891e7b37e546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:1a:a4:44:97:ce:b4:60:4a:71:d0:bf:a1:
a1:e6:a5:65:66:8c:ce:c6:59:0b:c6:53:c0:f5:4e:
92:df:1f:d2:ef:59:ee:bb:89:98:06:fc:08:ab:6e:
99:8c:c5:f7:7a:79:3b:33:55:c9:b9:f1:4e:f0:e3:
ca:40:e9:7b:5b:21:2c:a3:00:ca:63:38:60:b1:0f:
1c:3b:90:f0:f6:98:36:5f:6f:a9:74:b6:af:78:c8:
99:5e:9d:9d:82:7d:d4:0e:48:1c:1b:6a:8d:3c:7b:
24:84:0e:7e:73:81:06:44:c9:17:0a:4e:cf:d7:dc:
29:a0:e3:5f:08:48:af:77:25:e5:4f:1e:e7:82:31:
08:c9:9e:4c:47:7e:87:40:b1:53:0f:41:32:90:aa:
32:e0:05:ad:c3:0e:df:28:36:91:f6:40:70:ee:bb:
73:ee:37:c4:34:61:57:e9:6c:5b:99:45:c2:a8:a9:
2e:5f:54:15:82:78:80:ed:07:38:d1:b9:3e:9c:e0:
88:9b:03:2f:79:1e:06:8a:f7:fe:76:f9:03:3e:92:
d1:82:9e:8f:62:27:31:41:25:53:5e:0f:12:bb:71:
67:21:bf:91:7e:3d:90:1c:6b:d1:59:e7:c0:04:f5:
c8:42:ed:2e:18:c2:ca:d5:2d:0b:0b:6d:64:2e:17:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:95:87:0D:EF:B2:86:36:E1:9B:49:12:70:89:1E:7B:37:E5:46
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:00:9f:1f:db:b3:ad:86:cb:84:21:14:7c:d3:e2:30:30:1c:
d5:c7:9a:30:bd:8c:b0:bf:8a:68:07:7c:b7:d2:22:bb:44:2a:
24:68:f8:2e:b5:24:6a:74:bf:c9:6e:dd:e2:c8:1b:38:1a:8f:
bf:47:b8:75:0f:90:35:87:30:f8:75:1c:eb:e1:be:91:1c:46:
f7:78:bc:f9:f5:a0:c3:11:34:c7:17:ee:4e:5c:8e:2b:6a:cd:
b3:8b:1d:94:e5:2a:16:dd:ac:75:51:20:1a:45:3a:d1:87:ce:
63:1d:64:31:3d:6e:97:1a:75:32:e3:13:33:79:e1:af:db:72:
de:38:8a:57:05:c4:62:03:6f:70:52:19:15:bd:fd:d0:c3:d8:
2e:ff:28:28:c3:f2:0b:44:26:9e:c1:ba:15:7d:86:b6:53:b0:
2d:02:88:49:31:6c:15:bf:47:35:b7:6d:8f:39:7d:bb:82:fe:
e0:1f:21:ac:8b:07:2f:d9:ae:7b:49:8b:e3:f2:50:ed:73:17:
11:21:98:83:68:1a:8d:31:5d:52:19:5f:21:2a:27:d9:92:a7:
8d:d5:a5:eb:f2:3c:3b:59:a1:28:07:df:b1:1e:7e:62:df:9a:
22:e1:3d:a6:1d:55:88:02:35:02:22:f1:45:8d:54:c4:dd:dd:
9b:54:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:37:29 2025 by rpki-client