Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: MPWzovGcIXQFdp01Jn48RRP2bSfgrtN7H5AyboWDUPo=
Subject key identifier: BE:8F:60:3A:D8:CF:98:B2:FC:F4:B4:08:56:13:55:AC:D6:61:BE:A5
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 01967868BAE91B1BE4555CE93098CDD64A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 13C4
Signing time: Sun 27 Apr 2025 18:00:51 +0000
Manifest this update: Sun 27 Apr 2025 18:00:51 +0000
Manifest next update: Mon 28 Apr 2025 18:00:51 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: Okf9tRNWnwJnUbNffX8RW3QG0SImUETrgAyMoGMsPA8=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:ba:e9:1b:1b:e4:55:5c:e9:30:98:cd:d6:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Apr 27 18:00:51 2025 GMT
Not After : Apr 28 18:00:51 2025 GMT
Subject: CN=be8f603ad8cf98b2fcf4b408561355acd661bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:ca:08:a3:7a:cf:55:1e:2d:8a:a7:dd:47:
b7:3c:f3:48:fc:be:97:09:17:05:a4:ab:92:00:1e:
84:d3:c0:46:bb:79:12:5b:47:fe:f3:72:30:5f:0b:
c9:ae:2d:b1:9f:55:c5:8e:4a:8c:05:85:0b:76:41:
54:d7:2f:36:08:6d:64:9b:a5:42:6f:14:8e:5e:9f:
1d:99:b5:04:3f:c8:15:0f:b5:20:38:02:7d:b8:61:
0c:68:b6:6d:85:30:1a:24:94:96:7a:3c:3b:90:cd:
8a:0a:cc:74:27:71:c3:c7:65:c9:5e:b0:b4:82:10:
67:97:6b:9c:d4:f7:53:66:81:87:ac:9e:13:f8:9c:
2b:0d:ff:a9:5f:b4:da:7f:52:22:5d:63:6b:16:87:
06:fa:4f:7a:13:cf:8a:d2:2e:b3:cd:c1:95:f6:ab:
40:86:92:4f:d0:f4:e5:fa:dd:1e:2c:a0:59:ea:42:
aa:0a:96:54:54:10:2f:64:ef:b5:08:43:d7:c4:08:
91:5d:d8:4d:40:e4:da:f2:fc:e7:ca:75:f5:86:7d:
67:08:58:2b:84:88:30:b8:24:30:14:98:0e:5b:39:
33:b3:bb:c9:17:73:79:0f:a1:da:ca:27:c3:47:d8:
4d:5f:28:fd:aa:3e:06:e2:72:d4:ae:fc:24:20:05:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:60:3A:D8:CF:98:B2:FC:F4:B4:08:56:13:55:AC:D6:61:BE:A5
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7c:8e:a0:45:df:58:04:99:47:50:a0:94:d9:a0:ab:33:88:
c9:06:35:d6:30:28:fa:40:b2:ef:66:63:ff:f5:f4:14:0e:2c:
1e:f3:36:7a:8d:04:8d:2d:84:ee:da:73:47:0e:da:e4:74:bd:
e1:b0:ae:82:e8:eb:8c:89:8d:54:8f:d7:22:8d:5c:e4:48:e4:
2d:f9:3e:98:62:63:cf:43:4d:6d:32:18:ae:ed:87:49:d6:17:
51:f4:bc:64:eb:98:a0:95:45:eb:be:f6:5a:4b:3f:c8:d2:cc:
6c:54:65:79:64:a0:58:17:e6:8d:a7:ea:0e:ec:46:57:4e:1d:
e8:ad:59:dd:7a:22:4a:ac:3b:eb:63:e2:42:f5:0c:7a:ee:b7:
d9:6b:cd:77:41:15:3b:02:fe:f1:88:d6:f1:ed:2f:c8:23:d2:
33:67:ff:7b:37:ae:68:ed:55:56:8f:59:cf:f3:18:99:d9:f5:
c9:48:0d:2c:7c:3c:4e:80:26:30:53:79:2c:de:2a:99:af:ee:
42:05:f5:87:1c:41:46:64:25:14:02:de:28:62:41:d4:d4:04:
c6:55:b1:63:8b:fd:c8:c1:65:b3:03:20:9a:e7:ae:5f:8b:b5:
10:86:b9:78:21:6e:46:79:f6:90:d7:7e:b8:75:3a:8a:21:e1:
b8:c0:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:33:36 2025 by rpki-client