Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: r0ySQzkSnzg/PSSD/LL/pshEggMX1YpeaCayc9JpFvg=
Subject key identifier: 39:DD:5B:74:22:C0:3C:E8:EE:46:F2:1C:6C:BF:C9:79:45:CA:6B:DF
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019674C2DE94F5A6082549A2055A59800A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 0842
Signing time: Sun 27 Apr 2025 01:00:50 +0000
Manifest this update: Sun 27 Apr 2025 01:00:50 +0000
Manifest next update: Mon 28 Apr 2025 01:00:50 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: HO/NrnIEcv9K/BCmDZbhz3ZMd/Ic1Br1qdEHQeSJz34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:de:94:f5:a6:08:25:49:a2:05:5a:59:80:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Apr 27 01:00:50 2025 GMT
Not After : Apr 28 01:00:50 2025 GMT
Subject: CN=39dd5b7422c03ce8ee46f21c6cbfc97945ca6bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:0a:65:e1:6d:f7:8e:2c:a2:59:7c:45:ae:
a2:19:d9:89:09:e9:41:cc:dc:24:e3:31:1c:28:56:
44:ca:3f:d3:be:73:14:06:18:61:90:a2:3a:c1:4a:
93:82:85:90:24:28:ef:f9:31:e6:65:8c:86:bc:43:
2b:fc:fd:b5:1e:36:ec:17:80:2e:31:21:b3:6a:57:
5f:d1:05:e7:a3:fa:55:da:f4:37:d7:4c:a0:de:48:
f8:72:ba:5b:14:57:4e:79:23:19:e0:ea:96:f3:70:
02:6e:e4:01:cb:99:0a:c3:54:12:0e:b6:95:b9:f3:
ad:f0:d0:f3:48:77:b6:ff:6b:9b:bf:9f:27:bc:d4:
ae:b6:5b:64:a8:e2:c2:c4:ec:dd:5e:4f:d0:2f:96:
67:dc:75:ae:5f:72:a1:c2:be:98:9f:42:df:02:8f:
f8:53:6f:0a:e1:48:64:b5:79:13:97:3d:74:3a:24:
8f:cf:d7:8c:5a:e3:73:27:00:49:f0:3a:7d:95:7d:
5d:15:68:c4:88:f9:2a:e4:b4:f0:ef:fb:b4:93:d1:
a4:68:45:38:33:bf:e8:7d:0e:af:4c:36:9e:97:a1:
25:65:a8:80:4f:74:b4:c7:ec:e7:e4:ec:fd:f6:f0:
d3:e4:14:b3:f9:81:5d:57:ec:4c:93:cc:66:ed:25:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DD:5B:74:22:C0:3C:E8:EE:46:F2:1C:6C:BF:C9:79:45:CA:6B:DF
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e8:6c:2e:12:b4:ac:c8:5b:06:b7:67:38:0f:c8:0a:60:e5:
2c:ed:58:bb:55:6f:d5:cd:9d:31:ed:89:09:c3:b8:07:c3:4f:
25:12:24:03:34:14:bb:c9:05:6e:59:f3:f1:a4:10:4b:ac:0f:
36:8d:74:3d:85:63:dd:98:c9:2e:dd:33:47:da:2f:8c:25:08:
47:e1:83:16:c8:ad:69:0e:64:99:89:d6:dc:be:d5:60:b4:e4:
59:83:7b:f5:2b:8a:58:c4:42:48:cc:e6:a8:39:af:ad:83:3b:
32:30:0d:0f:a0:ac:f6:28:34:a4:6d:43:2d:bd:b7:09:97:f1:
eb:cf:bc:fb:76:b2:62:e0:ff:6d:b7:fd:30:a6:37:ae:de:17:
24:01:83:dc:e8:88:99:d2:5e:52:82:25:e1:cb:e4:e6:84:95:
a2:39:83:86:33:a6:8b:31:29:15:54:82:8c:be:26:26:4a:ab:
fa:f3:4c:09:53:60:d9:85:f3:83:ca:b3:b4:c0:4d:41:64:5e:
ec:d8:e9:31:57:63:9f:51:63:c8:23:64:6b:90:67:84:58:d8:
67:69:21:61:7d:26:45:7c:d2:5b:64:dd:a6:1c:69:a2:7b:7a:
45:6d:16:02:c6:8a:1c:ca:c3:8c:3e:a1:97:b2:a3:03:d6:a8:
0d:eb:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:42:19 2025 by rpki-client