Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File: VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier: F9owQDebCp2UPCPqxYbMkJgv19tj+EhaTMKk/gpMuwM=
Subject key identifier: 3D:35:F6:4E:F7:00:CD:7E:10:10:20:C1:99:F3:CC:42:FD:73:70:CB
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 019684DA231F9F366000F141965D7352257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number: 0924
Signing time: Wed 30 Apr 2025 04:00:10 +0000
Manifest this update: Wed 30 Apr 2025 04:00:10 +0000
Manifest next update: Thu 01 May 2025 04:00:10 +0000
Files and hashes: 1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: r8UMVLHCpCTJESH2OmuEe0PHC1svohDHVnN1DDNu180=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:23:1f:9f:36:60:00:f1:41:96:5d:73:52:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Apr 30 04:00:10 2025 GMT
Not After : May 1 04:00:10 2025 GMT
Subject: CN=3d35f64ef700cd7e101020c199f3cc42fd7370cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:a0:d5:55:7d:ff:4b:6e:e4:6b:d7:46:b0:
4a:3c:3d:c7:a3:e8:b0:e5:69:42:05:ae:37:9b:bf:
63:5a:a3:47:f9:2f:4c:bd:f8:a8:b0:ed:58:72:96:
04:58:3e:68:d8:f5:2b:bf:ec:bc:71:3d:33:69:a3:
d3:69:5f:46:5c:0c:7b:f0:f5:b5:e3:ba:94:fd:1d:
87:a8:f9:f2:ba:9f:f6:8d:21:20:54:3c:67:95:e4:
39:1f:54:db:d4:a4:df:94:06:05:84:01:a5:b6:34:
63:a8:d6:25:6d:d5:b2:78:87:c3:bf:54:85:1f:4b:
90:39:62:23:82:32:e3:d6:e1:5b:17:00:d6:af:fb:
ba:16:89:d0:2f:16:75:60:42:33:40:ea:dd:d4:e2:
51:71:3c:f2:99:29:13:fa:53:01:4a:d4:69:44:7d:
85:b8:38:2b:85:52:54:32:d9:a2:85:e2:ad:5c:45:
90:85:f1:16:55:b6:41:07:ed:13:a5:d3:5e:d7:5b:
29:07:0b:35:5c:50:66:38:2c:6d:fc:65:07:aa:bf:
96:3b:0e:c8:bd:8b:cd:8d:05:da:48:f9:83:af:d2:
5c:85:93:d3:d7:37:5a:3f:4a:7a:d8:d0:83:e3:4c:
7e:72:f5:5b:e3:c0:16:7a:fc:40:ff:f1:48:19:e9:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:35:F6:4E:F7:00:CD:7E:10:10:20:C1:99:F3:CC:42:FD:73:70:CB
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1b:73:83:6e:8b:90:65:cd:81:3a:2e:af:c6:dc:f9:d0:5b:
07:74:f4:cd:c2:80:3d:93:dc:e3:a7:34:75:02:77:c9:09:60:
92:97:9f:be:e7:35:46:5f:20:2b:d8:57:50:d7:a8:72:40:b8:
08:ad:ad:af:07:5f:52:0f:35:9f:db:2b:04:28:98:69:3b:f3:
08:2c:12:01:d2:0e:a1:3c:c5:ee:fa:00:d6:d9:3b:df:df:58:
28:30:36:e6:73:0d:99:c3:10:20:d4:a1:81:e1:ec:ed:9c:3f:
da:f4:d3:d4:d3:d6:7a:9b:31:12:18:19:b9:77:a4:40:40:41:
a1:3c:db:91:8c:83:30:fe:91:7d:d4:03:78:4d:1f:f9:40:3d:
8e:b0:b1:e3:c7:85:47:23:1c:d7:50:b3:f7:e9:cd:8a:fb:bb:
1a:cb:83:3d:59:cd:b4:47:e8:b4:ee:d8:1f:dd:6a:31:7c:17:
26:97:e9:26:d2:3d:25:38:0c:53:e1:ed:03:09:3f:6d:87:48:
20:7f:5f:fa:4b:e1:1c:02:e4:7f:71:00:54:80:cd:e4:2b:9b:
47:98:19:39:1e:25:ab:46:87:da:46:75:16:b6:ef:b5:77:77:
34:42:28:19:80:22:ae:50:40:b9:a3:f2:f4:7b:c3:a2:ca:87:
ac:8a:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:30:21 2025 by rpki-client