Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier: k0g4MCfcFwkVGfSy9fVCudc3XisMQZAFQkmO3rCBvG4=
Subject key identifier: AC:B3:FC:F8:C0:78:41:7E:6A:7A:F1:C1:86:A5:F5:CD:86:36:B2:E1
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 019682108E47071354F39BF731AD4BEC12FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number: 04DB
Signing time: Tue 29 Apr 2025 15:00:45 +0000
Manifest this update: Tue 29 Apr 2025 15:00:45 +0000
Manifest next update: Wed 30 Apr 2025 15:00:45 +0000
Files and hashes: 1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: nRZdqU/ofHfTiw5VjywMqXlVrPPQR62AEd8l6vqBZ6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:8e:47:07:13:54:f3:9b:f7:31:ad:4b:ec:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Apr 29 15:00:45 2025 GMT
Not After : Apr 30 15:00:45 2025 GMT
Subject: CN=acb3fcf8c078417e6a7af1c186a5f5cd8636b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:bb:19:eb:b2:a9:ab:2f:be:7a:c6:30:15:
dc:b2:14:89:48:bf:94:89:30:da:b5:40:a0:98:9b:
47:ea:72:58:80:bc:d6:15:27:19:51:eb:ae:93:15:
fa:d4:c4:43:50:c1:c6:d6:64:03:92:a0:b1:da:d4:
75:4d:55:ba:90:0f:93:e5:24:83:c5:b8:b9:bc:ac:
d3:bf:69:22:08:18:95:c8:1c:7a:b9:50:34:0a:71:
76:58:0b:17:d9:05:39:95:3f:c5:0c:59:31:ab:bc:
af:90:10:05:f4:91:b0:5b:af:68:5a:83:19:2a:06:
e0:ed:71:13:83:3a:10:71:17:df:40:31:06:4d:52:
b1:d7:22:b4:86:54:13:bd:c4:e7:7c:f5:4f:f3:3d:
d8:e0:2e:5b:b4:46:9d:9a:ad:6f:26:d6:e8:0a:c7:
55:e7:c5:d3:a5:0a:15:ec:b5:7b:60:22:84:44:28:
8d:7a:89:a7:8f:97:58:96:27:06:32:dd:b2:dd:4e:
11:9b:09:ce:a3:a3:0d:95:12:6f:08:2b:5f:2c:23:
3a:c6:1d:56:7a:a5:9a:f9:9c:bd:79:c1:29:90:a5:
58:16:0d:d8:b7:cf:9b:96:c8:58:a8:d9:45:ea:ab:
14:60:9c:95:3f:17:67:62:aa:d5:31:6f:2b:d7:85:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B3:FC:F8:C0:78:41:7E:6A:7A:F1:C1:86:A5:F5:CD:86:36:B2:E1
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:4f:59:4a:df:f9:e8:98:71:f9:d3:18:93:5e:a6:b8:b0:
b2:a9:d4:a8:d1:85:94:18:53:cc:56:2c:e2:b4:72:49:1f:3b:
ca:e3:c6:7e:ab:ed:f2:b9:a0:1d:f2:29:33:b7:31:38:25:ff:
a7:84:0a:40:a3:ae:f5:7e:0b:2f:a1:0b:4c:a5:90:35:2e:7e:
f3:d7:dd:1e:2d:03:21:6e:04:2b:29:ed:77:28:46:fe:e0:5d:
fc:5a:96:32:e3:7a:8b:51:24:ba:0d:c6:7a:16:aa:b8:c3:71:
75:a6:4e:ba:f3:3e:f8:d0:90:bd:ff:1e:ba:cb:0d:f2:d7:30:
ef:bf:38:56:51:6f:8e:19:e2:ee:cc:b3:1a:20:5e:f1:45:b9:
c3:a7:b0:d3:4b:0b:d8:b9:00:c2:79:77:94:ec:c8:5c:78:4f:
ed:a0:46:66:b5:5c:ce:3c:73:16:ee:4c:69:bc:e4:9d:2b:d0:
76:f7:e5:d2:da:e2:b4:3f:bf:cb:30:13:f8:98:d8:8d:6c:99:
ef:b5:dd:40:81:00:11:85:4b:ba:fe:b0:ab:0c:79:16:2f:6d:
5a:a7:ea:46:52:84:6e:91:b0:43:af:24:78:6d:fd:92:ff:6f:
41:b6:8f:01:de:79:04:41:ad:ae:6b:43:2e:62:78:fb:5d:23:
86:bb:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:21 2025 by rpki-client