Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: 5MDi/V7hEuroJRx+tkJkq+WXvC06e5SExRvI2lsylqU=
Subject key identifier: 26:FE:E2:CA:17:AB:CF:A6:EF:C4:8B:B0:E5:09:A2:A9:4C:57:C6:ED
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 0196789FAEF479D6D4A08FE48A3E89FB2CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 0E3B
Signing time: Sun 27 Apr 2025 19:00:52 +0000
Manifest this update: Sun 27 Apr 2025 19:00:52 +0000
Manifest next update: Mon 28 Apr 2025 19:00:52 +0000
Files and hashes: 1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: j8o53FXUmLe1FB6QbCbySzr9FFO/sU8zp/WOKqiR2Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:ae:f4:79:d6:d4:a0:8f:e4:8a:3e:89:fb:2c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Apr 27 19:00:52 2025 GMT
Not After : Apr 28 19:00:52 2025 GMT
Subject: CN=26fee2ca17abcfa6efc48bb0e509a2a94c57c6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:16:cd:19:2f:0c:61:ff:34:81:61:57:86:
50:b3:85:ee:ca:82:40:d4:a7:98:26:78:f0:31:8a:
f0:da:7f:f9:c0:87:fe:c6:94:53:96:6b:31:24:02:
f3:45:7b:e0:96:2f:a2:56:95:cb:c0:e9:71:4d:07:
2e:10:1c:b7:6a:ad:a9:e5:33:92:25:76:29:89:bb:
76:56:cf:2a:94:35:28:f3:e7:1f:01:25:e4:21:aa:
39:78:1a:9c:be:ef:83:15:fb:e1:bc:ad:c3:3e:0f:
7c:78:c0:be:ff:76:39:2f:0d:05:30:11:52:92:be:
74:5d:d1:db:f2:83:57:08:d6:05:35:a4:a8:3b:21:
17:cf:21:7d:ab:bd:9f:cf:09:36:56:69:ae:c3:b2:
c8:58:86:ef:38:f7:55:9c:77:11:7f:3d:b6:b2:6e:
3c:f4:bc:66:7a:66:a3:10:b3:64:40:3c:f0:9d:2f:
aa:ec:95:d3:94:4c:35:db:ba:6a:72:cf:8a:c4:09:
ea:9d:3c:8d:0c:a7:96:2e:ec:5b:88:bf:f0:dc:c5:
e7:3a:b5:43:7e:0c:ba:56:46:28:41:26:5c:99:0e:
5a:60:63:6a:ca:e9:c8:88:de:95:cc:1d:47:74:9f:
00:a0:02:43:73:55:d7:47:f1:71:70:59:9d:94:ec:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:E2:CA:17:AB:CF:A6:EF:C4:8B:B0:E5:09:A2:A9:4C:57:C6:ED
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:14:09:de:cd:e1:e5:6b:a1:c5:99:85:25:22:68:59:1e:c2:
7f:dd:a3:b1:d6:1e:48:1e:1e:9d:a9:cc:90:45:da:38:64:e0:
8f:b5:d6:bf:38:33:94:5e:7c:64:e2:dc:d4:46:22:41:22:0b:
82:c1:dd:90:89:d1:b3:5b:d8:03:22:57:21:f5:f5:d6:c6:a9:
e5:1c:73:9a:66:36:98:0c:f2:3d:3e:1b:0b:5b:45:1e:e3:e0:
7e:70:9f:bb:47:68:8d:e1:f9:cd:e2:6f:6a:b4:bb:2a:e1:dc:
52:08:60:3c:4c:ac:25:9e:5b:82:e4:bb:42:b8:16:c0:59:14:
27:cc:c3:d1:0e:ef:17:70:26:f9:5a:4c:f4:8e:6a:b4:04:9c:
fb:2b:f0:a5:58:38:0d:42:ac:93:b3:5d:d5:4d:cf:a5:b8:22:
47:fa:ea:58:2b:e7:d0:28:33:12:dc:01:5e:1b:6e:ff:5c:3e:
db:02:0a:94:57:6e:3d:89:cc:62:9c:f3:08:ea:2e:e5:2e:2a:
c4:68:36:b8:bc:69:7e:a8:f1:2c:f1:f4:c1:2f:cd:cb:6e:a8:
0f:83:66:18:d1:8e:bf:d3:32:9c:55:94:c9:d4:57:ed:55:3d:
32:64:c6:d8:e7:6b:7b:93:0b:2b:4e:71:90:bd:a0:c5:9c:b0:
59:a8:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:56 2025 by rpki-client