Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: Jo7f73fW9m2yxVBzeG76Yvf6/qtdv9P4Qi8cwZFCYpQ=
Subject key identifier: 66:95:78:4D:DC:F5:76:6F:9C:C8:8F:46:84:EB:1B:D1:20:C7:44:1B
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 0196805898E30A7A1C478801F048C41AAF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0BAD
Signing time: Tue 29 Apr 2025 07:00:12 +0000
Manifest this update: Tue 29 Apr 2025 07:00:12 +0000
Manifest next update: Wed 30 Apr 2025 07:00:12 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: 8vQOb7vaJhB4PD00wHvZot7YIxNMnU+yGs/ajq8o+bg=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:98:e3:0a:7a:1c:47:88:01:f0:48:c4:1a:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Apr 29 07:00:12 2025 GMT
Not After : Apr 30 07:00:12 2025 GMT
Subject: CN=6695784ddcf5766f9cc88f4684eb1bd120c7441b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:27:a6:fa:ce:1d:a6:42:09:be:f5:b1:93:
41:09:bf:4f:d1:7e:f7:1f:e3:44:5a:72:55:86:c6:
f3:f0:46:56:ab:8e:8b:3a:b3:b0:0a:e1:71:6d:0b:
62:2c:48:d9:57:a2:d0:a6:b7:34:78:5d:41:5e:e8:
ae:c6:0e:1b:6c:51:bb:3b:cf:0a:0c:5d:f2:32:2d:
84:59:37:73:01:3b:a8:ae:52:dd:92:12:57:c3:75:
29:aa:3a:19:80:2a:07:92:2c:b2:f8:39:db:b9:37:
06:7f:d1:54:df:f2:08:bc:e2:33:82:d3:d7:e8:9f:
55:9b:8c:55:c7:99:9c:46:74:df:e4:0d:5a:11:40:
de:8b:6d:1d:fb:1c:4f:1e:95:06:24:62:fb:66:a9:
97:71:9b:48:ea:64:d7:5e:14:06:b1:bf:54:6a:72:
da:8c:75:ac:0e:0f:ff:39:64:81:8d:a9:da:98:0e:
4e:e2:0c:26:06:5b:a9:ea:fd:6e:1e:9b:73:52:4a:
45:50:70:26:25:35:80:bb:49:68:7e:6d:92:bf:05:
4b:bd:98:91:66:19:ac:67:7f:df:95:6e:65:89:b9:
f3:f0:61:5d:28:5b:e5:39:4f:15:d8:55:32:4b:2a:
b5:a3:ff:aa:ff:3f:35:2d:62:e6:50:d9:83:14:9b:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:78:4D:DC:F5:76:6F:9C:C8:8F:46:84:EB:1B:D1:20:C7:44:1B
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:ee:68:3d:29:53:04:52:01:31:05:02:0f:d3:9a:b3:b2:
b6:dc:0a:40:e2:44:79:af:c3:2c:70:d8:c3:c4:8b:92:f7:dd:
32:96:da:80:93:8b:9b:7b:90:44:df:e3:aa:c2:5c:db:ae:68:
a0:bd:b0:a4:00:2c:bd:d7:4e:90:e7:2b:d0:11:a1:d7:f7:1b:
60:3a:f8:28:c5:2a:d2:b4:3f:cb:c4:f5:5d:57:a3:1b:fc:b8:
ec:57:cc:aa:f7:f9:30:27:48:2a:b2:ce:5b:6a:68:fe:0e:a9:
69:c9:f1:eb:33:1f:a1:c5:af:52:f0:e2:2c:70:2c:65:6f:0d:
7e:c1:d7:9a:0d:67:b0:08:ba:92:fc:9f:2d:1e:37:00:a5:d6:
2e:d3:58:2b:23:33:2b:a6:b3:01:52:2f:24:c6:21:70:ef:d4:
62:0e:8a:28:b5:cc:9b:45:e9:dd:78:a9:e9:24:ac:df:64:33:
2d:50:d8:9e:31:ff:be:15:16:fb:0a:a8:12:45:4f:f2:54:da:
8d:c2:72:bc:ac:98:9a:66:d3:ea:a4:35:f4:8e:f7:59:4c:df:
41:71:f9:91:48:c5:2e:91:a4:03:18:cc:24:59:7d:cb:79:bf:
b7:29:c8:a7:40:73:be:41:74:76:08:ca:5f:c6:58:f5:88:13:
ed:c8:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:09:00 2025 by rpki-client