Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: /e6N7vuRShyptnyBo1ZTvXgtO8+b/1DLpbm1d7F0+ls=
Subject key identifier: 46:97:0D:61:5F:9F:0C:32:04:3F:26:D8:EE:62:3A:39:9C:B1:C2:EE
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019680FDE55E1F8DD534497BA7D7AE4232AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 45
Signing time: Tue 29 Apr 2025 10:00:44 +0000
Manifest this update: Tue 29 Apr 2025 10:00:44 +0000
Manifest next update: Wed 30 Apr 2025 10:00:44 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: O4X9gWxKYfmk2WF2RzngOc/ijSwiyzpgPOQk2OOnsJw=)
2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:e5:5e:1f:8d:d5:34:49:7b:a7:d7:ae:42:32:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Apr 29 10:00:44 2025 GMT
Not After : Apr 30 10:00:44 2025 GMT
Subject: CN=46970d615f9f0c32043f26d8ee623a399cb1c2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:08:3e:90:1c:63:91:be:4c:74:23:2c:65:
a7:6e:e2:30:2f:b6:5d:54:d3:db:dd:3f:82:ee:79:
97:9d:41:98:a8:92:79:23:1d:1a:86:27:e2:ab:67:
34:e6:78:a9:d9:e0:b8:55:32:34:67:41:d8:7a:9b:
46:31:a7:00:8a:0c:d1:e0:e9:cf:14:1c:8f:c6:09:
08:6f:70:df:d8:07:e1:aa:40:04:e5:e2:36:37:88:
01:0a:93:fc:94:b0:f3:63:6c:9b:8f:4d:46:37:09:
3c:d5:d9:f1:0a:56:37:7d:4c:e8:74:37:60:20:25:
58:86:f0:6c:4d:57:fb:2f:b0:a6:78:06:4a:24:e8:
35:41:36:7d:8b:90:7f:d6:d2:51:b9:8f:c8:be:0f:
e4:f7:ee:f8:26:ee:5a:11:86:7b:46:ec:df:44:7c:
46:69:6e:48:04:96:c6:ed:84:5e:fd:f4:0c:2e:4f:
32:6a:36:93:d4:36:2c:1a:1e:43:da:a5:c0:8e:1b:
14:10:f3:7b:8b:6d:bd:78:2a:99:4b:fc:21:27:47:
80:94:4a:62:01:52:6d:95:59:b1:af:a2:52:b8:29:
7f:0a:89:a2:92:6c:c7:05:3f:84:d9:29:af:49:4f:
9a:40:61:11:f1:2e:2f:a3:9c:04:90:bf:c6:c5:94:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:0D:61:5F:9F:0C:32:04:3F:26:D8:EE:62:3A:39:9C:B1:C2:EE
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fc:71:d6:6f:cd:51:24:1c:de:bf:1b:ac:22:f3:20:4d:76:
37:77:e2:f4:e1:18:a9:d2:a5:7d:3d:6f:80:08:8f:ac:7b:0a:
ec:97:94:3e:07:3a:58:7e:51:6b:1c:8a:19:54:a1:af:69:60:
1a:fc:c9:9b:15:75:9e:24:6f:95:3f:5b:9f:5d:fa:18:a6:11:
62:0c:11:cc:5b:a6:35:76:ed:6c:78:d3:bc:46:1e:11:1d:65:
aa:9e:f5:45:92:5a:06:ba:f5:a1:e6:62:bf:c4:1b:de:26:75:
17:48:47:6d:6f:b3:00:ec:31:b9:51:f5:05:9d:99:d0:59:a2:
a3:96:50:35:85:0c:6d:9e:37:71:69:4c:b5:d6:42:a6:87:db:
a3:59:87:69:2d:e7:e4:d8:7b:63:1b:b2:e4:99:36:e4:3d:48:
36:d6:4c:82:6d:03:ba:a9:3e:63:0e:cd:36:15:25:d1:15:5a:
e4:ce:81:9b:94:7f:0a:c2:36:36:9b:39:fa:43:d9:6e:2e:6e:
d1:20:15:16:c5:05:fc:fb:6e:6b:a0:99:ff:d0:e3:26:a1:c6:
71:ba:8b:e1:7f:f9:e7:8a:40:cc:fb:8d:f5:2f:0a:7f:8d:a2:
c5:bc:50:bf:37:90:a2:4b:52:be:e0:cc:0d:f2:6d:92:da:5a:
fc:3b:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:00 2025 by rpki-client