Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File: vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier: SugcHt4Fgue6dQMzLhq4/Y0MXt8gnbUnwVroB5bVpto=
Subject key identifier: 42:16:D6:4E:DD:23:AB:0C:70:51:E8:ED:18:9F:37:2C:4C:C8:DD:C2
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer: /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial: 01967831C3E398BF3026BA4489714BCAF4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number: 0EC9
Signing time: Sun 27 Apr 2025 17:00:49 +0000
Manifest this update: Sun 27 Apr 2025 17:00:49 +0000
Manifest next update: Mon 28 Apr 2025 17:00:49 +0000
Files and hashes: 1: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (hash: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=)
2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: Vti14fuguV+fGi6waDJbNKuYncOgmQ4LyOTTEEM2uTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:c3:e3:98:bf:30:26:ba:44:89:71:4b:ca:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Validity
Not Before: Apr 27 17:00:49 2025 GMT
Not After : Apr 28 17:00:49 2025 GMT
Subject: CN=4216d64edd23ab0c7051e8ed189f372c4cc8ddc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:67:05:f4:f9:ee:24:41:a3:c8:2b:42:f7:
ca:6a:01:e5:39:1f:2e:ed:f9:84:74:1a:0d:a4:40:
ec:37:bc:83:4a:cd:73:2d:54:9d:3a:73:b7:0c:b1:
54:54:06:13:44:c1:17:8b:8a:20:db:4d:94:cf:de:
ad:ef:35:0b:06:d7:8b:bd:7d:55:5b:26:d0:ac:70:
f9:41:05:ad:7e:9a:d9:2d:bd:24:89:bd:28:ad:cb:
06:ee:c4:e6:ce:f2:a2:e9:2e:0d:74:a7:1d:21:5e:
f1:9d:09:e1:e1:2d:ca:eb:c1:72:c2:98:c9:f0:90:
e2:a7:c5:3d:92:86:f3:a4:62:19:e2:5e:e3:04:2e:
8d:b5:6c:d7:3a:77:55:64:b5:c4:01:a3:1d:76:3a:
f1:ca:d4:e9:e8:1c:95:44:f8:75:27:9f:dc:f6:0e:
57:d8:5b:f0:3c:19:5a:3c:24:38:c6:2c:94:1d:6b:
f4:5e:29:ac:00:f1:8c:74:ae:57:de:55:62:b6:e8:
95:be:19:ca:d9:14:ad:b0:ea:3f:ef:33:32:25:4f:
f3:ae:bd:67:72:5d:3b:a3:4b:25:26:78:fe:f4:6a:
73:90:7b:0b:53:bf:44:62:dd:75:aa:8e:e5:d7:19:
0a:c6:ca:25:58:9c:16:43:05:22:e3:59:45:c1:a7:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:D6:4E:DD:23:AB:0C:70:51:E8:ED:18:9F:37:2C:4C:C8:DD:C2
X509v3 Authority Key Identifier:
keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5a:e4:e0:4f:45:c0:58:bf:14:56:81:0c:c5:92:cc:c2:69:
f1:c7:e5:1c:8e:ed:cc:70:3b:fa:ad:88:73:84:a8:8a:35:32:
97:c0:d3:3d:9a:7d:5b:85:de:02:38:db:d9:7b:b7:fe:d9:99:
65:a1:9c:c7:f9:a5:af:f8:66:8a:a0:1a:c1:b8:e7:33:a9:c2:
9a:c0:90:4e:1e:af:75:91:5a:9c:b8:ba:63:9a:d3:09:af:3e:
2e:b7:20:0e:da:02:9f:f0:0b:a2:4e:02:5b:ce:70:6f:62:98:
32:3a:cc:cd:64:4e:77:a3:24:8e:85:4f:cd:b0:28:de:3d:ba:
09:db:f2:48:10:ea:a2:98:2a:16:c9:59:98:39:28:41:2a:f0:
36:ce:85:c7:a0:77:bf:37:7f:30:ef:c4:d2:aa:7d:5a:19:a0:
3a:75:9b:4f:f2:19:35:88:c7:5b:f4:c1:ab:be:b5:94:a4:77:
7a:3f:55:72:d2:e5:20:43:33:f0:8b:03:8d:38:7e:55:fb:02:
37:22:24:d6:25:c0:33:fd:a9:27:ce:72:c7:3a:2d:00:60:73:
27:00:d2:9f:00:66:5f:c9:fa:bb:c7:c8:02:66:bb:91:b6:36:
3d:fc:8b:fe:f9:e6:97:68:5b:5b:d6:80:53:5d:d6:4c:97:6e:
47:55:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:16:16 2025 by rpki-client