Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: RF9cy1ftsJVpjcIXw6gFrD31FL9Kb5gE8ufdeDBZJzE=
Subject key identifier: 2A:F4:AE:7F:65:0A:49:77:53:4E:57:92:26:41:87:D2:0A:89:6E:B4
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019676B14695618A177162012E1898CEF05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 0F03
Signing time: Sun 27 Apr 2025 10:00:51 +0000
Manifest this update: Sun 27 Apr 2025 10:00:51 +0000
Manifest next update: Mon 28 Apr 2025 10:00:51 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: UrD/0jZ6IUaoMWsCbTpEu3tuWrPzupB/Iri4FSR76KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:46:95:61:8a:17:71:62:01:2e:18:98:ce:f0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Apr 27 10:00:51 2025 GMT
Not After : Apr 28 10:00:51 2025 GMT
Subject: CN=2af4ae7f650a4977534e5792264187d20a896eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:5b:63:c8:95:10:f3:7f:d7:2f:38:c5:14:
07:b2:99:a5:57:de:20:3d:b7:1b:67:dd:b6:bd:db:
bd:d2:1f:7f:71:42:6b:bf:ce:a2:3f:da:7b:b0:d5:
d7:8a:f7:2c:b8:9b:a3:7a:af:d9:f9:79:02:b7:bd:
61:d3:94:d3:03:f6:31:48:59:5c:db:3e:42:93:c6:
0a:0e:97:b2:3f:06:33:c4:a5:3f:29:42:a9:c7:3b:
ab:89:82:56:fb:0b:0c:ec:fd:08:11:00:97:ef:0e:
6e:95:f4:f0:8d:a7:56:ba:ec:df:ce:2f:82:08:f9:
4f:61:f0:1a:d0:d3:74:83:a6:ce:90:87:13:17:37:
09:34:dc:ae:30:e9:90:b1:6a:92:75:9f:a3:2c:4d:
3d:f8:ae:41:f7:d9:00:0f:c8:75:93:db:f2:bb:24:
c9:a0:1d:f1:df:97:33:90:17:90:39:5d:5d:cc:98:
8b:5b:a4:4f:2a:dd:98:40:08:9f:7a:13:09:1b:ba:
59:e1:17:cc:53:df:3c:b0:cc:14:99:bc:48:3d:e5:
2a:38:5d:99:1c:c1:78:65:07:b8:33:0d:39:f5:51:
13:6a:05:4e:8a:63:a6:fe:77:80:39:24:8b:ed:24:
00:6c:8f:53:2f:43:e4:1b:03:f4:6b:ec:5f:7a:30:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:AE:7F:65:0A:49:77:53:4E:57:92:26:41:87:D2:0A:89:6E:B4
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:28:e5:7c:9e:3f:bb:30:95:1d:e0:78:0f:af:0a:57:77:6f:
42:ec:9c:4c:4e:e7:e6:b7:d2:8e:14:c3:0e:d8:88:37:c7:89:
b2:ed:12:ae:ae:8a:e0:3b:f0:8a:e2:47:dd:b4:89:a4:d2:b1:
eb:7d:a9:17:bc:7a:0c:12:87:81:04:e9:c8:3b:c7:7d:1f:a0:
f2:3a:d5:d0:ec:4a:3a:ef:d7:09:1e:14:f5:ae:cd:75:61:47:
80:7c:86:be:30:b2:71:bd:64:65:a4:31:50:8e:70:a1:e6:be:
8a:b9:1b:eb:4f:74:a9:49:0a:a7:95:4e:3d:76:86:0d:c5:da:
b6:9e:15:38:88:5e:36:96:51:26:dc:0e:f0:07:79:d7:1e:90:
a7:6b:8d:c9:90:7c:e3:2f:0e:0b:89:de:65:4f:02:95:da:92:
60:b0:05:96:92:b5:e2:97:a9:d9:1e:a8:30:9b:e5:11:67:0f:
b6:bc:3c:2d:aa:e5:71:1b:2f:0e:c4:a8:1c:7a:ad:7a:8f:b9:
10:a0:fb:2a:54:34:a4:59:5f:ad:21:b2:9b:48:dc:8d:d1:dd:
4f:98:98:5e:bb:57:57:08:0f:cd:b9:85:24:6c:7e:e2:05:16:
08:83:0f:22:2f:6f:5a:5a:9a:02:8d:9f:5f:8c:3b:ea:b5:88:
c2:ab:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:05 2025 by rpki-client