Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: h5qan4gJvECN3zqxafGO9qy670c9NccL/2MV8nLOPrc=
Subject key identifier: D0:B8:C0:B0:3D:61:F7:93:9A:E0:7A:23:7A:B3:F6:6A:29:F6:C5:59
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 01967A5767404961CBB21A2F79EEAA17F5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 03:01:10 +0000
Manifest this update: Mon 28 Apr 2025 03:01:10 +0000
Manifest next update: Tue 29 Apr 2025 03:01:10 +0000
Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: GSHEu4bqAfG9AFAUv3SxeCJWXEdCPXBxh5ckt/xdw64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:67:40:49:61:cb:b2:1a:2f:79:ee:aa:17:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Apr 28 03:01:10 2025 GMT
Not After : Apr 29 03:01:10 2025 GMT
Subject: CN=d0b8c0b03d61f7939ae07a237ab3f66a29f6c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:a0:d6:14:03:39:b2:16:56:57:e3:2a:51:
4a:84:2b:20:1d:bd:e3:d1:50:f4:d2:ff:ec:ab:9d:
ab:f1:4b:0f:3a:74:21:7d:7d:92:8f:b4:8b:32:42:
8a:58:d0:d3:fc:ac:44:ed:34:02:f6:59:ac:ec:f6:
16:53:51:3b:b3:72:61:cd:4e:ed:00:0f:4c:15:ec:
d8:32:c8:2b:a6:cd:9a:1f:0d:9c:83:95:10:80:fa:
dd:43:e8:8f:39:01:d0:e4:f8:99:e5:3e:13:5d:40:
1e:05:46:6b:b8:b0:8c:5c:5f:0b:b9:db:14:26:8b:
d0:15:51:a5:cb:8c:b5:c0:ac:29:bf:11:67:b1:bd:
b5:a1:37:ed:c7:97:69:ff:2e:8b:a2:e4:e7:a1:a3:
20:99:b7:72:ec:c1:7d:93:b2:c4:67:f6:32:9e:7a:
fe:c6:7d:88:47:e5:28:a7:83:5a:f6:90:d5:47:24:
cd:e1:40:00:bc:54:27:56:27:ff:0b:e1:1a:7a:bb:
85:1f:43:2b:db:f9:3d:71:2d:f8:07:87:27:a8:a8:
13:b9:cd:a6:fb:af:dc:32:48:9c:fe:47:28:6f:09:
37:29:3a:00:d3:5a:8e:ac:4d:80:44:14:03:bf:35:
2e:46:90:5e:2b:ee:3b:f5:84:d5:d8:47:af:f5:72:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:C0:B0:3D:61:F7:93:9A:E0:7A:23:7A:B3:F6:6A:29:F6:C5:59
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8f:12:0d:74:04:7a:e7:3b:06:1a:51:54:dd:23:92:80:8d:
5f:1f:2e:dc:c0:29:f3:6a:fe:8f:91:f3:e3:8a:7d:7a:26:33:
69:e7:53:3c:6e:ef:c9:ce:1b:37:1b:73:25:22:b7:1a:f6:93:
56:4e:8c:ae:c6:42:fd:d2:92:05:f0:74:b3:58:06:fd:19:90:
7f:3a:20:7b:a9:40:2a:f9:17:d1:32:6a:b5:61:82:da:05:3e:
08:d5:0d:69:64:af:4b:57:02:3a:08:ed:15:4a:5b:1d:5b:89:
60:7d:69:cd:17:99:92:8e:64:9d:08:66:b3:ca:0d:09:02:24:
aa:56:2a:30:e7:be:53:0c:1c:cd:a8:e3:a6:c1:c0:8e:69:14:
5d:6c:68:f2:a8:ac:34:22:28:14:10:0e:e8:cd:7b:d4:6d:f2:
85:f5:5e:98:8b:95:7e:9a:9f:19:04:0f:17:63:56:53:0e:ad:
a4:d8:76:82:bd:ca:56:a7:9d:9a:0d:c2:8d:2d:c2:80:2d:b1:
9e:6a:63:d2:f3:1b:f5:73:8a:32:78:e0:ff:5d:6d:35:91:09:
f6:df:07:a1:ea:b0:2e:b4:8e:4e:37:72:21:e1:3a:2d:80:a9:
79:2b:6a:a1:13:46:df:43:76:db:0d:e7:21:99:d7:84:48:3a:
d9:6d:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:36:41 2025 by rpki-client