Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: EpqEZSO6gfdeYexQS+Xi9H0MOTJGOpYkFEpa16QoEkY=
Subject key identifier: 43:C1:82:71:6C:7E:C2:BD:09:21:E9:05:39:88:36:D9:A4:57:61:3B
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 019673420E54B462773CF8999F58DC8BD352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 0297
Signing time: Sat 26 Apr 2025 18:00:30 +0000
Manifest this update: Sat 26 Apr 2025 18:00:30 +0000
Manifest next update: Sun 27 Apr 2025 18:00:30 +0000
Files and hashes: 1: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (hash: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=)
2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: aOaCdRfvmZEBMs4yGYH2uGC3fch3iQEvGQFdPVT+kz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:0e:54:b4:62:77:3c:f8:99:9f:58:dc:8b:d3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Apr 26 18:00:30 2025 GMT
Not After : Apr 27 18:00:30 2025 GMT
Subject: CN=43c182716c7ec2bd0921e905398836d9a457613b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6f:da:25:ef:6d:89:e8:d1:17:d7:6f:c6:73:
50:58:b4:b0:c7:9e:ad:0f:aa:b3:48:70:ca:0d:b0:
3f:ee:b9:dc:f8:af:65:69:f5:2d:c3:f6:20:52:75:
84:cf:25:6f:0c:50:7e:1a:ae:61:8b:e7:e9:1c:71:
e0:bb:26:fd:bf:7c:29:9d:56:79:18:9c:a8:ac:bf:
99:39:f1:db:dd:4f:34:a0:3b:4a:c0:1e:92:15:36:
fd:26:37:d2:c9:fa:b6:34:a3:eb:8e:46:e4:17:db:
36:da:f2:a3:5f:b1:60:a7:94:1d:60:bb:18:94:f7:
d4:69:98:68:c8:33:9d:5c:ba:d4:f7:01:a9:67:f3:
78:f7:11:3c:09:32:2c:e6:35:a8:2d:c8:9f:88:c8:
7c:5b:fc:9f:e6:d0:70:4a:f7:a2:5e:f8:c9:ae:98:
ef:64:32:27:9c:76:c6:c5:1e:f7:64:e7:17:83:55:
14:35:0f:52:3e:28:3f:99:c7:c3:fd:99:a0:ea:e1:
e1:ff:f2:6b:79:cc:c9:48:51:9e:7a:9a:62:bd:06:
78:56:0e:11:61:92:ce:25:d7:07:4f:b3:05:49:5d:
29:7e:03:3f:21:27:cd:cc:69:c4:45:f5:c6:87:ba:
5a:1a:43:b3:ca:cc:6f:56:12:2d:23:c8:a1:b3:33:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:82:71:6C:7E:C2:BD:09:21:E9:05:39:88:36:D9:A4:57:61:3B
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b0:af:6b:49:fe:ea:ee:e4:00:99:12:ad:10:8c:c3:65:ad:
4e:d6:2a:99:7e:f5:98:7d:00:13:0c:b4:0f:cb:42:42:9f:f4:
0f:96:68:3a:50:79:20:46:cd:57:f5:99:d6:78:03:49:e0:98:
93:7b:4c:14:1c:bc:e1:ac:72:06:c6:2b:78:44:cd:91:cc:13:
df:85:c1:12:6d:4a:70:92:8b:9b:20:5e:3b:cc:69:93:17:66:
42:9f:b2:a8:bb:58:c9:5b:0a:72:da:96:2f:b8:fd:93:8d:63:
9f:52:b6:17:7d:b8:be:a8:f0:0b:fa:ae:bd:1b:e9:95:29:81:
3e:3b:ae:1f:0a:b4:01:d0:21:1b:d3:86:a9:0e:17:6d:59:64:
8d:b5:e4:04:9c:40:31:c6:f6:61:fb:f0:10:39:95:d1:3a:55:
e6:69:43:f3:c9:e0:da:ee:74:dc:0c:bd:da:e4:9a:2c:7c:7a:
9a:12:14:5e:cc:34:0f:db:74:25:32:45:7d:d2:86:9c:7b:45:
64:d4:21:bd:3f:a8:35:1b:75:bf:39:00:3d:1a:c0:13:59:63:
88:6f:4b:27:56:8e:66:c0:34:ce:17:4d:bc:43:ff:d5:21:13:
31:de:ff:fe:d2:d6:09:1b:50:c8:d6:b2:bc:54:32:35:45:d7:
8e:9e:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:23 2025 by rpki-client