Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File: 92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier: Ilvj0KG2rQrvzliJ6GuXYhLJvFjGkoxRm3Qmc4/UMT4=
Subject key identifier: 0C:10:A1:6A:A4:78:1F:3A:90:BE:D0:A7:C1:C9:00:9A:17:DF:6C:33
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial: 0196760CBCD34AF53637CCDDEFAA457F02BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number: 0D26
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: ZRVDsLxlvU3lSdPnNWJDSEvTLE/aAGHoQAnphZLj5sM=)
2: Bgx4v1LhphfEVxiPgOOZhtKcYxk.roa (hash: PMSZWU3KeqqHp7dEdYFCinejkuywjWErsotBlVqvg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:bc:d3:4a:f5:36:37:cc:dd:ef:aa:45:7f:02:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=0c10a16aa4781f3a90bed0a7c1c9009a17df6c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b1:fc:57:93:7b:a7:bd:c3:9c:02:92:25:3f:
f2:31:3d:15:00:ff:d3:22:81:7d:95:19:4c:aa:28:
b4:30:d7:49:aa:b4:59:c8:32:f5:ce:db:6a:75:8e:
95:6d:38:27:1a:83:eb:fa:c7:b9:40:eb:19:0c:9a:
21:32:bf:8b:b9:59:e5:c4:c8:92:e0:60:91:68:a1:
af:82:e6:60:dc:73:cf:ff:13:43:ee:ea:18:2c:d1:
d8:8a:9e:e5:5c:7c:bb:1f:b4:00:82:22:7f:92:d0:
c4:be:5f:05:b6:66:5a:75:ab:b3:eb:80:0c:60:e0:
e8:3e:28:b0:ce:6d:fb:4f:9d:47:cb:e8:c1:72:51:
a3:a6:83:7d:09:a6:7f:2c:0e:b0:fe:78:17:32:16:
8f:f3:a4:71:dc:41:92:39:bb:13:a1:60:b8:4e:eb:
ad:ee:6a:73:f7:1d:51:ba:57:c9:ef:12:ac:b3:b2:
0e:55:36:c7:c7:37:4e:ef:36:23:eb:08:f2:88:00:
60:00:63:56:6f:71:3b:5d:c7:ee:54:1f:ac:44:14:
07:bb:91:64:59:d8:9a:f6:4d:c8:71:62:59:c9:1f:
ee:23:a9:5c:1c:b1:c4:3e:6e:c9:2d:62:fc:76:da:
ed:46:e1:5b:bf:df:d9:ad:93:3e:ae:43:d8:8d:b1:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:A1:6A:A4:78:1F:3A:90:BE:D0:A7:C1:C9:00:9A:17:DF:6C:33
X509v3 Authority Key Identifier:
keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4e:ad:ed:16:93:b2:cb:1c:39:7e:17:91:c1:b7:ad:e0:7b:
27:09:c7:50:b9:8c:af:68:5c:80:3f:8f:e6:e8:c2:48:7a:d7:
2f:81:c5:c2:8b:9d:1d:b6:92:d9:76:74:ed:14:e8:ff:c5:c9:
be:6a:4d:4c:77:f2:75:b8:dc:6e:36:96:9e:32:9e:99:57:51:
87:81:96:3c:e7:4c:40:a2:27:31:bf:8b:0d:f2:0b:bd:30:ef:
8e:a1:be:7c:60:cc:a0:68:8e:4f:fd:1f:79:c2:1b:f7:2e:1a:
93:21:e6:bb:ba:ba:c0:17:b9:61:64:05:94:22:fb:9a:91:3c:
97:a8:b5:7a:1c:56:fa:c3:24:81:1d:86:ab:dc:24:c8:87:27:
7e:e0:75:6a:85:5b:0b:68:fc:a8:22:82:50:c3:b6:c4:cc:f3:
d2:c3:89:47:d7:d9:31:8b:62:0e:bf:fd:53:ed:de:84:f0:24:
a6:b6:14:78:a7:6e:2a:0f:db:23:85:2b:10:3d:1c:f5:28:51:
ca:38:48:4a:d4:64:8f:76:c4:9d:e1:53:82:54:98:96:ea:87:
87:a7:84:03:b5:0f:3c:ca:3e:21:0a:42:19:c2:42:7d:f1:fb:
c5:01:81:84:9d:a4:a4:51:32:37:7a:78:43:1c:d2:55:74:08:
3b:00:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:18:26 2025 by rpki-client